Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131663a3a2f34382d3438203d3e20313431333736.roa
File:                     323630323a666564323a373131663a3a2f34382d3438203d3e20313431333736.roa (raw, json)
Hash identifier:          ooiVAQuxPswMCcuN/o5tsIA2Mx/cIJJ8dDOyQTLOzeQ=
Subject key identifier:   7C:CE:77:89:E5:36:36:27:C2:F9:C9:4B:33:7E:22:B3:7C:2E:F1:AE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       56A327BA6400F0D3E21AFD1C58CA1E4E82FEBE33
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131663a3a2f34382d3438203d3e20313431333736.roa
Signing time:             Thu 16 Dec 2021 03:26:29 +0000
ROA not before:           Thu 16 Dec 2021 03:21:29 +0000
ROA not after:            Thu 15 Dec 2022 03:26:29 +0000
asID:                     141376
IP address blocks:        2602:fed2:711f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:27:ba:64:00:f0:d3:e2:1a:fd:1c:58:ca:1e:4e:82:fe:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:29 2021 GMT
            Not After : Dec 15 03:26:29 2022 GMT
        Subject: CN=7CCE7789E5363627C2F9C94B337E22B37C2EF1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:26:85:2e:fb:be:97:24:08:3d:06:e7:19:
                    ff:07:9b:ec:4b:7d:31:d6:81:be:49:6c:50:51:2c:
                    40:3d:13:99:3b:20:0e:07:5f:0f:6e:9c:68:23:b0:
                    82:2f:3b:b7:92:15:54:ef:99:0e:46:13:31:ff:50:
                    fd:d7:b1:30:83:9f:da:c2:7a:78:0f:64:90:3a:b8:
                    3a:bb:43:a9:93:b1:fd:09:7c:c1:21:23:5a:7d:c2:
                    a2:d1:12:c8:cf:33:5e:b5:3f:b5:b2:90:ed:7e:61:
                    d1:88:e4:8b:e8:5c:74:02:e7:58:3c:b3:d1:f8:87:
                    1a:29:ec:6a:5c:f0:bc:3e:c1:98:ce:4e:d6:fa:08:
                    d8:5a:6b:10:05:f2:20:c5:0a:89:6e:35:f0:d5:4b:
                    7e:b5:ee:7e:54:29:54:2d:78:73:03:d1:20:47:d7:
                    7a:bb:0e:09:2c:2c:f3:26:20:5d:0a:92:d5:bb:88:
                    32:d0:09:ff:5d:e8:a3:20:e5:2c:25:c7:f2:e7:1a:
                    81:26:b2:27:ed:49:e8:e1:41:e5:db:78:4a:82:ba:
                    3d:4a:11:0f:62:65:cb:b4:ee:95:2c:30:d6:2f:ad:
                    cf:e7:d1:eb:00:01:69:f9:45:cc:ad:85:c3:13:dc:
                    a6:aa:5e:7b:3a:82:01:54:d1:36:39:e8:9b:8b:83:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:77:89:E5:36:36:27:C2:F9:C9:4B:33:7E:22:B3:7C:2E:F1:AE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131663a3a2f34382d3438203d3e20313431333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:c6:e3:15:b1:0e:c5:c1:ea:0b:77:96:79:cc:72:57:48:
         b8:ef:07:ef:ff:54:8b:7e:f3:08:99:77:60:97:61:31:c5:44:
         95:8d:08:51:5e:a8:5c:62:dd:b9:db:ed:64:f9:d3:71:95:36:
         9b:f1:4b:02:9f:69:d1:f7:7b:f9:30:85:7d:c6:c8:e4:a7:bd:
         39:fb:e2:81:b9:92:6b:bc:73:bc:41:12:c7:83:38:5d:e3:dc:
         97:ac:bb:ee:68:fd:ed:52:e6:e2:13:3b:96:fc:78:c8:6a:61:
         b3:7d:6d:9e:47:4d:be:1f:a5:b8:b4:00:a6:39:56:0d:ca:fd:
         d0:df:ad:a1:25:36:b7:b1:a3:bd:ca:77:05:2a:92:ec:13:30:
         14:0a:f0:73:a7:63:82:71:7e:33:c1:16:ee:21:5d:20:20:21:
         94:df:4e:84:fb:60:46:b0:1b:2f:a1:77:9a:f5:6e:15:74:cf:
         e9:30:67:10:6c:7c:7f:49:c3:7d:79:c1:1e:fa:c8:52:18:89:
         2d:9d:78:29:6b:0a:86:5a:f3:d0:0f:9b:b7:53:54:21:39:bb:
         42:2e:6c:1a:21:12:94:a7:2f:4a:1c:61:75:ad:b1:35:b4:1e:
         84:2b:b5:b8:60:a7:03:b8:ad:9d:1f:24:d6:37:31:c8:53:a3:
         3b:6b:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org