Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a31303a3a2f34382d3438203d3e203533333536.roa
File: 323630323a666331633a31303a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier: XGZHeabmpqfFLQp7bH66u3C4N6cG1BwIhDTu1Ftlbtc=
Subject key identifier: 3B:C1:F4:08:18:47:CA:B3:2B:89:98:F3:18:CD:EB:54:FB:77:91:77
Certificate issuer: /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial: 215A40A1E8933B2FE1BC4B52DFFCECE8AC2E0B52
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a31303a3a2f34382d3438203d3e203533333536.roa
Signing time: Tue 13 Sep 2022 01:20:21 +0000
ROA not before: Tue 13 Sep 2022 01:15:21 +0000
ROA not after: Tue 12 Sep 2023 01:20:21 +0000
asID: 53356
IP address blocks: 2602:fc1c:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5a:40:a1:e8:93:3b:2f:e1:bc:4b:52:df:fc:ec:e8:ac:2e:0b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Validity
Not Before: Sep 13 01:15:21 2022 GMT
Not After : Sep 12 01:20:21 2023 GMT
Subject: CN=3BC1F4081847CAB32B8998F318CDEB54FB779177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:82:29:ba:b5:45:68:67:b6:19:ed:da:1d:
13:9f:00:91:68:42:0e:52:40:3c:c9:31:ce:b0:f4:
c9:4d:7a:40:15:31:31:00:54:e7:43:35:fc:10:a1:
f8:62:6c:d6:8c:e1:e2:a6:e9:89:0b:3d:05:1a:ed:
9a:dd:7a:9b:56:8a:0c:79:7a:71:e7:da:9a:c8:88:
6a:c3:69:89:ab:94:1b:41:fa:71:02:dc:af:ca:f8:
ad:9a:d0:ee:33:f4:50:9d:2d:67:00:94:ff:98:bc:
a7:aa:f8:93:19:72:84:66:4b:f7:25:85:1c:27:95:
f9:fe:9a:cd:7a:1e:87:87:64:1c:c7:6b:18:24:3f:
b6:20:46:15:40:28:f1:81:85:72:78:71:d7:6c:1e:
2f:f1:37:4a:17:5b:45:e7:7d:3f:17:a4:64:db:50:
3c:5a:f1:90:6d:26:3a:66:f2:a1:21:b4:ab:80:58:
3f:d8:66:40:45:3b:7e:58:01:75:5e:5b:7a:60:19:
a3:c0:32:48:22:70:c2:34:af:97:e1:bd:d4:47:58:
a2:73:2e:ad:3b:55:f5:72:48:56:d2:5a:d5:44:cf:
9c:9c:dd:3a:57:c8:51:74:90:b7:b4:8e:86:70:be:
01:0b:54:a4:ac:11:2e:29:6e:b2:47:49:b0:b5:2e:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C1:F4:08:18:47:CA:B3:2B:89:98:F3:18:CD:EB:54:FB:77:91:77
X509v3 Authority Key Identifier:
keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/323630323a666331633a31303a3a2f34382d3438203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc1c:10::/48
Signature Algorithm: sha256WithRSAEncryption
7b:bc:cd:ea:1a:04:bd:e0:be:d0:7e:99:72:a8:b7:eb:30:bc:
be:57:83:4a:17:87:3d:c3:f1:c9:85:b5:e9:b9:0f:45:7e:30:
df:d2:89:1f:ab:9d:fc:21:df:27:d2:0d:3a:dc:98:d3:65:ae:
03:2c:56:e4:4e:d4:87:fd:d8:e1:27:40:21:65:f3:be:a1:43:
cf:d5:2b:9b:c7:23:19:b8:d4:85:10:16:d2:e8:ea:0d:0c:b7:
73:91:69:e4:e8:a7:5c:15:cf:30:3c:49:6e:66:a0:32:6d:5a:
79:c7:46:8d:81:4e:29:53:c9:98:5c:15:fe:56:53:82:de:85:
7a:38:23:99:1b:a2:f7:6f:3a:ca:05:a6:00:16:9b:6e:8c:9a:
a6:9c:8b:05:08:ba:95:c7:d8:6e:b7:cd:44:a7:67:ea:34:68:
34:60:d1:be:c7:e3:33:76:b4:78:64:65:dc:d6:b0:11:ef:cd:
78:64:7c:9c:22:bd:d1:6d:2c:f9:04:e8:a9:ec:b6:03:d6:05:
0d:b0:51:69:e9:91:29:2a:ce:0f:72:70:2f:02:b0:28:63:60:
8b:91:27:d6:32:10:42:da:cf:e9:48:36:ad:30:6e:6e:44:82:
05:bb:b8:a6:8c:2b:bd:63:c8:c8:d9:e3:dd:fd:c6:58:84:46:
8a:42:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org