Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331393a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373331393a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          kzYPe2VPDQQRqny39AZqLsJmwJthYbjT78bGEQSeH30=
Subject key identifier:   30:06:2F:77:FE:04:A2:BD:40:62:63:95:75:76:42:BE:95:85:53:C5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1D523871A6904F3E2972B37C77464A5A6F35B014
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331393a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:28 +0000
ROA not before:           Thu 16 Dec 2021 03:21:28 +0000
ROA not after:            Thu 15 Dec 2022 03:26:28 +0000
asID:                     53356
IP address blocks:        2602:fed2:7319::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:52:38:71:a6:90:4f:3e:29:72:b3:7c:77:46:4a:5a:6f:35:b0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:28 2021 GMT
            Not After : Dec 15 03:26:28 2022 GMT
        Subject: CN=30062F77FE04A2BD40626395757642BE958553C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:09:e0:9c:3e:53:34:c0:01:87:96:b1:f6:
                    e5:17:5f:b0:1d:b1:a7:ec:2f:32:83:d0:3b:11:0a:
                    15:c8:83:9a:2e:76:b1:47:d8:bc:f2:98:ae:9d:c7:
                    d4:2d:49:bb:f0:47:01:1a:72:b0:5e:e2:fd:68:bb:
                    a6:b1:f7:d6:b6:61:18:11:df:fb:86:5a:ef:ca:b2:
                    3f:90:ee:0e:e1:f1:ae:0d:1a:5f:36:f8:c0:4a:f4:
                    dd:8b:4f:47:60:44:50:24:be:4a:f8:26:e3:22:7b:
                    ae:fb:f0:9e:d2:0c:a8:21:41:03:dc:75:1b:99:a3:
                    81:a7:48:fb:e8:aa:28:cf:0b:55:34:2d:f7:d5:d3:
                    a2:74:b4:14:98:08:52:eb:58:cc:a9:c1:b1:6e:67:
                    c1:9e:72:1e:ea:f8:ae:f4:03:b8:bb:f5:97:3d:7d:
                    28:41:2c:3d:b6:8a:dc:9b:26:2e:57:d0:3b:8f:94:
                    ac:c1:49:bc:fc:39:52:35:58:ab:16:0c:fa:bc:16:
                    44:40:65:c7:e2:b7:23:ef:b6:48:3c:c6:e3:7c:d3:
                    2a:59:ac:61:e3:e7:34:29:41:6e:04:4d:e3:30:83:
                    81:0c:0a:be:41:46:09:44:eb:57:28:da:0c:2a:66:
                    90:6e:f3:f2:d6:46:8b:58:90:8c:6b:5f:8d:2f:cb:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:06:2F:77:FE:04:A2:BD:40:62:63:95:75:76:42:BE:95:85:53:C5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331393a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7319::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:cf:6f:a4:c1:6a:5e:38:72:38:d2:18:ea:32:0f:d9:9d:
         66:4a:de:0f:58:09:3d:bc:4d:fb:44:b1:3b:b3:28:e6:f3:aa:
         f0:69:be:f9:d8:38:3f:c4:99:1e:f5:f6:31:fe:10:3a:85:3f:
         60:7a:9c:d9:d8:71:d6:bc:c0:27:04:46:9a:ee:72:b4:45:47:
         60:79:6b:c1:df:3e:5d:5a:39:6a:97:26:b7:ac:3e:82:a8:c0:
         6e:7c:89:b6:85:96:ed:5f:24:38:21:36:8a:92:fe:7e:d0:cd:
         53:ec:c6:a8:83:60:c7:7a:5a:c1:65:40:2b:85:63:58:f7:aa:
         23:8a:88:af:ef:16:cd:dd:8b:2b:0e:93:6d:74:46:b2:ab:0e:
         2f:d7:f8:51:50:4b:fa:b5:9a:b8:d2:d9:f6:ef:f1:6e:aa:8d:
         3c:f1:ee:cb:d7:b7:1b:5d:58:47:36:4d:e5:30:4a:7b:f5:ad:
         8f:1e:de:d0:8a:7f:e6:6c:fe:33:1e:9f:49:b9:cb:ac:67:43:
         d1:86:63:d6:2e:24:4e:f3:da:bd:e8:95:88:06:91:32:32:ee:
         ab:93:df:8d:e8:85:7a:3d:cb:4c:c8:e1:d6:a9:03:b6:23:ae:
         f8:61:b4:f8:b8:b4:dc:c1:2b:e4:29:d8:b7:0d:ed:c6:94:bc:
         30:15:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org