Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa
File: 3134322e3230322e39302e302f32342d3234203d3e203534313333.roa (raw, json)
Hash identifier: Sg8QwcVpILlnvq++ntYaJdCaGspOzw2WUgMSoofAHZo=
Subject key identifier: 94:85:D1:AB:6A:D8:53:5A:F8:9C:10:BF:97:70:46:D8:6B:57:9E:92
Certificate issuer: /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial: 3937973D0CC2FE584195F4DE746F5606CE9D8AA3
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa
Signing time: Sun 07 May 2023 15:07:58 +0000
ROA not before: Sun 07 May 2023 15:02:58 +0000
ROA not after: Sun 05 May 2024 15:07:58 +0000
asID: 54133
IP address blocks: 142.202.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:37:97:3d:0c:c2:fe:58:41:95:f4:de:74:6f:56:06:ce:9d:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Validity
Not Before: May 7 15:02:58 2023 GMT
Not After : May 5 15:07:58 2024 GMT
Subject: CN=9485D1AB6AD8535AF89C10BF977046D86B579E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:8c:7e:ee:01:4d:a3:3c:c6:91:af:5a:2f:
b2:62:39:6f:bb:84:cc:9f:04:5d:4d:7f:ab:af:95:
00:c4:37:93:77:ac:71:d7:12:b7:03:3d:54:c9:46:
57:4c:04:9c:b5:65:bf:cd:f6:e3:cb:22:04:6d:ee:
0c:f6:7b:b4:48:8c:b2:49:bf:a5:07:f4:75:34:f8:
77:29:e0:ae:98:5d:f6:25:84:ac:72:29:7e:aa:40:
9d:00:0b:d7:1c:cc:c0:b8:33:b0:44:1b:42:08:f1:
f3:e6:40:b0:a3:9f:ad:b7:61:67:94:4e:c6:52:7c:
5b:07:54:92:0d:67:9c:36:e3:44:9c:67:96:5f:45:
79:01:2a:80:f8:2b:2f:e6:c5:8d:62:b6:af:bb:27:
ca:d8:1b:6d:b6:69:66:ba:b9:c5:4a:a2:63:99:e8:
34:17:d5:d8:f7:2b:ad:0b:22:6a:f6:44:a0:f7:e5:
c2:c3:8a:0b:cc:64:dd:22:64:98:80:cd:89:8f:14:
30:16:e7:0b:09:26:ff:c1:4a:08:2e:92:f5:fe:4d:
d8:4a:b7:5c:0b:b5:24:95:c5:0c:94:a7:3b:80:b7:
ba:0f:0d:fc:e8:db:b2:ab:9b:c5:08:f8:11:4c:45:
9e:46:13:97:90:34:a2:bb:de:09:72:d5:14:fa:2e:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:D1:AB:6A:D8:53:5A:F8:9C:10:BF:97:70:46:D8:6B:57:9E:92
X509v3 Authority Key Identifier:
keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39302e302f32342d3234203d3e203534313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.202.90.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b9:f9:3c:ed:17:ef:00:a6:14:da:6d:d6:36:b2:5e:b7:32:
70:92:8d:ca:fc:8e:9a:84:42:bf:f3:b2:24:ed:18:70:f7:80:
d9:7b:94:2b:2f:4f:4f:1c:47:cb:9a:f7:b6:8b:d6:fc:dd:7e:
bb:86:64:15:b0:2b:d7:46:0d:14:b6:e9:4f:49:c7:81:6c:14:
b7:7c:db:f3:b9:8b:6b:44:de:9d:41:d5:c4:af:eb:e9:b0:4a:
5b:14:ec:1c:23:cc:50:78:e6:21:ed:46:1b:38:96:01:55:1e:
51:11:6f:c8:74:65:11:d6:6a:2f:48:28:26:3a:53:5d:12:92:
46:19:d0:bd:56:12:a3:08:5d:8c:88:63:3d:3a:29:f5:9d:9c:
9b:82:5a:d3:63:06:c5:3f:ff:98:a2:e0:a1:aa:d4:ce:17:5f:
11:2c:f6:2c:83:fd:b5:0c:74:4e:c2:38:99:cf:1e:12:08:7f:
23:ce:b4:48:21:c3:9c:36:e3:8a:e9:5d:31:29:33:0c:f2:f9:
b5:32:4b:a9:0f:0a:9e:86:2a:0e:7a:ff:d9:6b:04:71:6f:2d:
3a:7e:b6:f3:44:ef:21:63:26:eb:cc:52:69:a8:29:9a:07:f3:
2c:e3:b5:b5:0b:b3:ee:15:75:1d:5e:c3:06:0d:83:b1:72:4a:
c5:81:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org