Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215271.roa
File: AS215271.roa (raw, json)
Hash identifier: jEocWDG9z9IeJymSZWlF6JZ481XQH3KIIxccseFGmCA=
Subject key identifier: F3:A0:19:19:78:34:2F:3C:41:54:99:DD:71:B0:A7:6B:85:8A:B1:64
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 57BEDBD689FFFFEA3D4AD8C68B135504885CC8D1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215271.roa
Signing time: Wed 16 Apr 2025 08:54:58 +0000
ROA not before: Wed 16 Apr 2025 08:49:58 +0000
ROA not after: Wed 15 Apr 2026 08:54:58 +0000
asID: 215271
IP address blocks: 2a0f:9400:6180::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 18 Apr 2025 17:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:be:db:d6:89:ff:ff:ea:3d:4a:d8:c6:8b:13:55:04:88:5c:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 16 08:49:58 2025 GMT
Not After : Apr 15 08:54:58 2026 GMT
Subject: CN=F3A0191978342F3C415499DD71B0A76B858AB164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:f7:b0:72:f6:5c:02:77:5b:ed:a0:c1:25:
27:cb:af:d9:d1:13:f0:ea:60:32:6a:02:9e:fe:98:
96:4f:4f:91:7d:b2:98:4f:06:77:38:3f:0b:5a:10:
80:cb:64:27:8c:a6:35:70:3e:0e:bc:23:25:19:37:
8a:6f:07:ca:59:9f:08:71:39:a8:e5:54:b0:22:ed:
90:56:80:42:87:40:04:63:e8:8f:ff:39:22:f3:aa:
f7:6d:b3:8e:0b:cd:51:7e:ae:b6:86:38:84:e8:16:
3e:1a:cd:61:89:5f:9c:e5:a3:3d:0b:d9:30:69:79:
09:bb:47:d2:44:3a:81:e5:15:62:68:e6:f7:df:39:
5c:16:53:b6:f6:a9:33:a7:d3:b9:4d:31:d9:cc:eb:
85:d8:cc:5c:bf:ad:08:c1:15:e9:2d:ee:2b:e4:01:
6c:03:3c:46:a6:97:5e:51:8a:c8:a0:f2:d8:fd:12:
4b:27:d2:df:79:01:bc:da:63:4b:93:59:5e:71:64:
3a:54:14:7b:ab:6f:cf:6f:6f:74:99:04:24:be:a1:
26:bc:58:d8:82:91:3e:3d:6e:ce:c2:d7:4e:6d:4e:
59:b8:50:b9:a9:ad:ec:49:88:a5:a1:fc:a5:dd:4b:
27:e7:57:62:cd:93:8c:67:e9:61:a8:4b:f3:2d:57:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:19:19:78:34:2F:3C:41:54:99:DD:71:B0:A7:6B:85:8A:B1:64
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6180::/44
Signature Algorithm: sha256WithRSAEncryption
a4:1b:3b:15:a9:3b:62:9f:28:e0:84:52:37:09:28:e6:60:97:
f3:db:e4:ba:48:91:5f:d6:fc:ac:68:a7:09:9a:f1:b2:03:d9:
d4:5e:ed:02:f5:49:e6:78:01:a7:d1:74:06:ad:1e:cf:58:e4:
ff:b9:d0:8d:8b:15:5e:cf:1e:58:b3:dd:29:fb:8f:6b:a2:e5:
55:1a:33:88:0f:bd:bf:62:7c:23:31:6c:a6:ba:40:f5:9e:0c:
bb:0c:a0:d1:ca:2e:78:62:61:7b:17:14:c6:e7:be:16:eb:8a:
cf:ca:26:33:41:a7:4f:4e:6a:9d:a5:15:84:f2:16:dc:84:58:
28:6a:e9:1a:24:de:60:27:3f:b7:da:ef:95:86:16:4f:50:00:
98:13:3d:4f:19:8f:e8:16:6f:b9:5f:b8:cc:1c:d1:98:b5:58:
09:ce:70:2d:3d:88:a1:58:93:84:5c:09:57:50:fe:30:2e:3b:
38:67:ab:a3:12:72:80:0f:18:f7:7a:cc:bc:aa:95:23:bb:81:
87:71:d1:05:97:fd:22:a1:e7:74:ba:8b:d2:a6:24:9b:99:d6:
b2:63:55:61:b8:7e:02:c2:0e:ad:3c:90:eb:39:1d:28:51:e5:
6a:88:8e:5c:21:4a:24:b4:15:3c:50:b6:51:4c:83:09:5e:ed:
f1:3e:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:12 2025 by rpki-client