Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033323a3a2f34382d3438203d3e20333939373438.roa
File:                     323630323a666564323a373033323a3a2f34382d3438203d3e20333939373438.roa (raw, json)
Hash identifier:          iID8WPDKjMkK9G6Dh9w1DJ9ewEVSg5wy9NKUT1oVy/M=
Subject key identifier:   81:EB:05:1F:31:F0:E0:35:88:7D:12:0A:CA:95:E1:34:A6:5F:71:FA
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       537E8350353455F9BE95EC37AD524CFF71F50DC6
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033323a3a2f34382d3438203d3e20333939373438.roa
Signing time:             Wed 22 Dec 2021 02:35:12 +0000
ROA not before:           Wed 22 Dec 2021 02:30:12 +0000
ROA not after:            Wed 21 Dec 2022 02:35:12 +0000
asID:                     399748
IP address blocks:        2602:fed2:7032::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7e:83:50:35:34:55:f9:be:95:ec:37:ad:52:4c:ff:71:f5:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 22 02:30:12 2021 GMT
            Not After : Dec 21 02:35:12 2022 GMT
        Subject: CN=81EB051F31F0E035887D120ACA95E134A65F71FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:c2:73:1d:00:d7:7d:79:72:5a:cc:50:07:
                    61:68:85:fe:74:8b:ee:cd:c1:3f:c2:42:7c:6b:ab:
                    88:fe:28:1c:58:13:ef:12:e8:fc:92:d2:0f:b4:67:
                    5d:df:6b:29:cc:bd:c1:a2:25:54:ce:0f:2d:39:e6:
                    42:db:58:15:ea:08:1a:ce:ed:c5:07:53:c9:d7:01:
                    89:e5:8f:50:36:38:54:62:2c:03:95:d3:c6:51:0a:
                    e5:1e:25:fb:1d:ed:de:83:ae:53:9a:e0:a4:b4:ea:
                    52:be:d2:d5:99:0a:fc:09:2b:94:b4:54:e1:dd:d1:
                    20:1b:40:94:ae:c6:9e:b7:0f:4d:e3:2e:9c:74:3c:
                    15:c8:6f:4f:6b:b0:76:61:c5:74:a7:8c:da:e2:38:
                    41:3d:76:50:d8:4d:14:15:f0:e6:5d:aa:44:80:ff:
                    59:81:9a:06:56:53:f9:69:06:49:2c:fd:07:44:9a:
                    25:bd:f5:95:b0:b7:e7:6c:ec:51:6a:df:c8:13:d4:
                    4b:dc:f9:ec:b7:79:e7:a3:e5:8f:1f:55:39:83:0d:
                    bd:98:40:e2:3c:e6:6c:5d:0d:74:92:15:c8:22:ec:
                    d0:37:7c:b5:ac:c7:71:39:3a:d5:b9:2a:74:8f:49:
                    b2:55:f2:4d:be:06:c6:1c:65:87:99:5f:7f:eb:89:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:05:1F:31:F0:E0:35:88:7D:12:0A:CA:95:E1:34:A6:5F:71:FA
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033323a3a2f34382d3438203d3e20333939373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7032::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:27:3a:13:ea:69:d1:89:17:c7:b2:e6:80:bf:ed:18:52:
         d0:cb:b9:b2:07:eb:72:7a:70:bc:c2:b4:53:c8:33:48:71:ee:
         cc:5f:83:a8:d0:69:6a:f3:86:f8:53:ae:bb:07:81:d7:cc:33:
         a0:96:19:e0:20:63:6b:fc:cd:2f:6a:de:e9:a8:39:8d:3f:67:
         d9:57:ec:9a:cc:d6:91:80:ae:b4:cd:f7:2c:b0:9e:0e:88:f6:
         66:d4:2b:cd:0f:a5:10:78:17:12:a0:c1:01:37:48:d8:d2:e3:
         5d:02:e6:3f:2b:7d:a1:7f:8f:02:e9:9f:de:95:55:eb:3f:5f:
         12:30:92:72:bf:35:bc:e7:d1:81:05:ce:47:c2:41:8a:5a:e1:
         de:86:f0:c6:06:ac:12:70:f5:6a:65:4e:20:74:52:53:a4:59:
         b5:15:99:a3:15:39:ee:9f:54:a1:f6:5a:6d:57:8a:68:ca:f1:
         2d:55:60:68:3f:d1:44:99:da:02:01:b7:51:95:b3:2e:df:32:
         aa:a8:73:b2:58:38:f1:67:43:de:8b:09:bd:46:12:e8:c3:11:
         e5:64:ec:b5:d2:2c:c7:76:7e:0e:a6:73:8e:89:76:bb:33:56:
         0d:a5:44:b6:8f:f2:d9:68:ca:3c:1b:a2:a3:1a:f6:20:d6:1a:
         f1:fa:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org