Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365653a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a3365653a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          IFEcxG52Jv0Z4VIDKmuKDomFJkYBDs/y53EHFT4kC3w=
Subject key identifier:   AA:7E:BF:B6:A1:D0:D4:45:29:4A:95:9D:5F:60:4C:FB:E2:F9:6A:89
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       502A8A85A5F6B919F579912719798C4C5078716B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365653a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:21 +0000
ROA not before:           Thu 16 Dec 2021 03:21:21 +0000
ROA not after:            Thu 15 Dec 2022 03:26:21 +0000
asID:                     53356
IP address blocks:        2602:fed2:3ee::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:8a:85:a5:f6:b9:19:f5:79:91:27:19:79:8c:4c:50:78:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:21 2021 GMT
            Not After : Dec 15 03:26:21 2022 GMT
        Subject: CN=AA7EBFB6A1D0D445294A959D5F604CFBE2F96A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:0b:b9:12:5b:7e:46:9b:fd:fb:71:ee:de:
                    14:6c:d9:ef:9f:36:f2:4a:bc:e5:92:b0:47:25:b6:
                    14:f1:51:00:37:1c:fd:87:90:5f:0a:62:69:79:60:
                    28:c2:25:91:dc:77:5d:0e:eb:5e:7f:3e:cc:49:d0:
                    db:e4:cf:24:79:e0:97:8a:d8:d0:04:34:7b:cb:b9:
                    1f:c8:23:e9:c7:d4:86:ae:e5:9b:e2:e4:be:5a:ad:
                    e8:27:96:bb:0d:ab:c2:6b:9e:c8:06:1c:03:d2:84:
                    a2:8f:00:55:92:ba:7b:7b:b1:9e:7a:93:07:4b:47:
                    26:b7:34:1a:95:26:6b:f6:ff:1c:64:a4:9c:26:0c:
                    bd:4d:0d:45:30:e1:fe:13:ed:a8:e2:ca:0e:12:9e:
                    c8:f1:91:db:18:f8:27:9f:f2:e7:ca:b1:6d:ee:80:
                    32:e8:18:09:b4:92:ea:1c:49:75:6a:74:5a:68:29:
                    f5:6e:6f:8f:9f:2f:cd:c8:49:59:4d:08:ac:c1:ac:
                    c2:6b:51:c6:f1:c3:65:24:fd:2d:fb:1f:11:b5:43:
                    ff:81:34:25:df:e9:0c:99:97:90:dc:8d:da:a4:e1:
                    51:7e:54:95:e7:10:b3:d0:e3:97:64:ef:e5:fe:6a:
                    34:9e:8f:29:ff:0f:7a:ac:07:30:af:66:98:32:d4:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:BF:B6:A1:D0:D4:45:29:4A:95:9D:5F:60:4C:FB:E2:F9:6A:89
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365653a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:3ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:8c:56:3a:ae:31:49:b7:3b:1e:9a:64:25:93:17:a9:42:
         e2:a7:23:17:db:5f:d8:45:3f:a3:d0:d1:2a:8e:62:11:06:6c:
         06:9d:8e:e6:0a:eb:91:37:75:33:7a:6a:e5:ff:77:8b:86:02:
         4b:a7:d0:7a:e4:79:9d:49:6b:c7:19:69:b2:ab:38:3b:91:f6:
         bf:81:65:20:81:50:ee:fa:1c:bd:95:d3:fa:ae:15:da:12:89:
         2d:ec:cd:2b:a7:29:2e:e4:cf:9e:4d:67:43:29:92:18:85:53:
         f0:d6:85:e7:fa:3c:d6:5f:07:08:71:1c:5b:4f:e1:a0:6e:fe:
         6f:41:9a:97:7e:63:e4:1f:12:ab:28:ae:d2:8c:e7:dc:09:b4:
         7e:d5:e2:6c:21:d9:b4:e9:3a:be:b7:b3:4d:16:9b:b5:62:a2:
         6d:be:d0:77:86:b6:61:54:5e:43:60:31:9f:b3:5a:bb:91:70:
         91:71:f4:05:e2:05:bc:9e:dc:30:5c:68:e7:c6:5b:d3:ed:66:
         0d:40:77:e6:6c:f9:ab:4f:00:7d:84:45:09:ab:5d:b1:db:42:
         cf:f6:37:7f:c4:f3:6d:cc:49:e0:58:46:b3:e8:49:f0:ce:4e:
         b7:e0:75:a9:b6:e3:fa:0e:66:e7:fe:fd:0a:97:b0:2d:a7:df:
         86:ac:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:54 2025 by rpki-client