Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          COSnTQ1rplvlyoeCFdnvCwTHuF2yeJz+zAKJlMHvqWs=
Subject key identifier:   5A:56:CE:29:CE:A9:F9:B8:E4:8E:32:F8:AB:93:FB:3C:19:05:87:6E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5224FCAFE829D5F839C3CAA6D2CF13AE77AC3C09
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:19 +0000
ROA not before:           Thu 16 Dec 2021 03:21:19 +0000
ROA not after:            Thu 15 Dec 2022 03:26:19 +0000
asID:                     53356
IP address blocks:        2602:fed2:730b::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:24:fc:af:e8:29:d5:f8:39:c3:ca:a6:d2:cf:13:ae:77:ac:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:19 2021 GMT
            Not After : Dec 15 03:26:19 2022 GMT
        Subject: CN=5A56CE29CEA9F9B8E48E32F8AB93FB3C1905876E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:c2:76:02:9a:d5:11:d3:cf:1e:44:be:75:
                    b8:e0:98:7e:d3:d9:e7:b8:45:cb:1e:f2:d2:6c:b3:
                    ff:6f:e1:5c:c9:c5:b5:1b:a2:11:12:c1:f9:d3:ac:
                    f0:6f:7c:85:73:ab:1d:91:86:27:0f:60:09:8b:e7:
                    e1:f5:05:f0:ae:d4:72:d2:49:9d:de:e3:2d:cb:0c:
                    d3:64:4e:37:52:77:08:bb:bd:e9:14:a3:1d:dd:5e:
                    7f:87:f6:6d:79:60:4f:83:15:9d:b4:f2:2a:ef:9f:
                    e1:20:cb:bf:16:9b:44:22:45:5c:31:c5:1e:41:23:
                    e2:60:74:04:1e:bd:d6:1f:6c:c0:d5:53:30:05:d2:
                    22:63:82:26:bd:a3:3f:1c:16:2a:33:02:b3:1d:b0:
                    c4:c0:82:34:0a:c5:b0:26:cc:a1:4c:7c:66:c5:63:
                    d3:cd:50:04:1f:4a:8b:44:93:3d:2e:23:3d:ed:64:
                    4a:fa:a0:c7:02:82:ad:d9:c2:b6:c5:6f:0e:f6:5f:
                    f0:b1:d2:9b:6e:1f:17:5e:ca:ab:1d:0b:ff:e0:d4:
                    4a:f5:0b:5a:4c:17:9b:38:ca:4d:8d:26:36:b2:ee:
                    cd:03:fa:32:99:9d:56:e9:c7:d9:25:7c:9d:6b:84:
                    f0:da:97:d6:1b:70:69:66:13:c4:00:4b:32:c9:58:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:CE:29:CE:A9:F9:B8:E4:8E:32:F8:AB:93:FB:3C:19:05:87:6E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:730b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:df:9c:39:dc:bc:29:2c:a5:b9:8a:8b:dc:27:5c:ac:9c:
         41:9f:0d:58:86:a7:80:51:57:58:ac:80:28:6a:3b:9f:1c:34:
         cc:d6:96:f3:11:9e:b7:14:83:14:bc:4f:53:ff:ed:72:6b:e7:
         55:80:72:f5:96:3c:b1:2f:ef:78:67:4b:42:23:45:68:e7:04:
         0d:9a:aa:6b:9e:77:90:d9:94:be:c3:93:89:54:06:1c:19:d3:
         4d:d3:ab:5d:87:cf:17:79:ef:cf:36:c3:f9:05:5d:6b:e2:fc:
         89:9a:06:91:d1:d1:c8:e3:55:03:46:b0:56:3c:ae:c3:a1:85:
         b4:db:da:85:35:14:4e:19:f9:43:1c:60:b7:73:14:69:dd:cf:
         aa:90:da:e9:29:1f:85:4a:72:f6:41:00:da:2b:98:36:d9:16:
         18:13:4f:93:27:79:0c:66:25:ca:95:74:fe:ec:d8:25:b0:b5:
         e1:3c:ab:4a:23:7d:34:17:70:4a:32:18:be:1e:94:df:cf:60:
         39:a1:f6:40:72:24:2b:37:21:6f:7e:f5:b2:f8:cf:d5:5e:4b:
         03:37:09:2f:9e:da:9a:de:07:b0:f9:77:b9:0d:e3:78:ee:27:
         73:8c:fe:ac:aa:e2:bb:b6:f0:dd:4f:61:71:76:6c:c6:65:43:
         de:67:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:10 2025 by rpki-client