Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373630303a3a2f34302d3430203d3e2031323339.roa
File:                     323630323a666564323a373630303a3a2f34302d3430203d3e2031323339.roa (raw, json)
Hash identifier:          8mfYeMgdW1qkoRUx5PigaqkwERfGfTOhAZxYkxaFImQ=
Subject key identifier:   F4:64:4F:50:98:60:13:16:EA:B2:A7:52:AB:E5:72:59:FE:51:9F:C2
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       13D10EE63FE9BED5E3FEB951FAA4D8DBA074FCCE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373630303a3a2f34302d3430203d3e2031323339.roa
Signing time:             Sat 08 Jan 2022 03:30:05 +0000
ROA not before:           Sat 08 Jan 2022 03:25:05 +0000
ROA not after:            Sat 07 Jan 2023 03:30:05 +0000
asID:                     1239
IP address blocks:        2602:fed2:7600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d1:0e:e6:3f:e9:be:d5:e3:fe:b9:51:fa:a4:d8:db:a0:74:fc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan  8 03:25:05 2022 GMT
            Not After : Jan  7 03:30:05 2023 GMT
        Subject: CN=F4644F5098601316EAB2A752ABE57259FE519FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:86:a8:94:39:d0:8e:42:6c:0f:a4:2e:69:
                    db:8d:e8:51:bb:65:0a:4b:2e:94:79:27:4a:35:e3:
                    42:ac:f9:d0:54:d6:eb:48:6f:8f:53:db:8c:f1:59:
                    55:4b:28:2c:33:32:a7:e7:69:bc:17:a6:90:06:59:
                    0f:a1:ad:39:bc:26:28:1b:75:0d:55:ae:a3:49:e3:
                    da:2f:b6:9b:e8:44:83:4c:23:f5:df:f3:82:26:65:
                    be:54:bf:c0:dc:fe:98:1f:75:42:aa:62:db:5f:6e:
                    fb:b2:a7:14:bf:41:d2:be:78:a3:ae:53:d3:ea:58:
                    3b:ce:eb:57:e3:bf:ce:e4:cf:60:4f:b1:af:54:ec:
                    b7:99:b6:08:f3:ee:9a:7e:80:2a:08:2b:8d:14:fe:
                    e0:9c:46:9c:be:a5:af:d6:d1:a4:62:d5:eb:37:23:
                    d1:58:92:bc:b0:1a:d0:ed:10:7b:83:2d:97:54:13:
                    c8:d5:f4:4f:ad:7d:95:0b:c6:4b:84:a9:b2:f3:da:
                    c8:67:99:5b:2c:b2:2f:7d:c1:f0:b0:3b:ea:d4:c7:
                    d5:b9:91:d8:8a:93:81:81:5a:12:99:c3:d4:5a:61:
                    48:9b:08:75:5c:31:4f:61:d0:48:47:af:0f:da:96:
                    07:6a:8f:eb:bb:55:94:36:5b:e5:03:d3:00:2d:42:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:64:4F:50:98:60:13:16:EA:B2:A7:52:AB:E5:72:59:FE:51:9F:C2
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373630303a3a2f34302d3430203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:41:44:36:ad:47:2b:97:5b:f3:07:de:22:f0:07:f6:ff:d5:
         dc:68:4f:00:af:06:01:7b:77:25:86:6d:d8:40:7f:bb:01:6f:
         d9:92:96:d2:4a:72:8c:df:da:8c:76:b5:47:b4:a1:f8:e1:43:
         3a:fd:5d:b9:4d:19:ff:ef:e6:bc:7a:9f:4b:a2:4a:d2:51:99:
         29:d6:e8:28:da:fd:f7:6c:cb:f5:31:b7:a5:4b:5f:a2:6c:81:
         2f:eb:13:aa:bd:a0:f1:96:48:df:f2:1f:a8:b9:6f:38:60:11:
         aa:d0:9e:e5:38:0d:1f:35:c9:55:89:1e:ba:f0:78:72:87:07:
         03:21:cb:57:7b:68:07:9e:2e:fe:0a:83:4a:b5:8d:b5:64:f1:
         5b:c7:02:4d:fa:ba:c6:76:c8:86:70:05:f9:dd:2b:d5:49:1c:
         14:3b:12:1e:d9:3e:0f:27:79:7b:f1:6c:0e:7d:ca:16:b2:a7:
         96:26:dd:9f:de:62:f4:b8:f8:3d:97:60:57:84:36:66:ce:98:
         37:ab:37:7a:4f:8a:54:26:f7:c0:f9:c1:59:23:3e:06:38:fc:
         b2:b8:1b:81:19:da:dc:37:e7:07:bc:e5:89:8b:75:37:ab:fa:
         1c:94:63:a8:91:3c:e8:c0:4f:d1:29:54:e5:02:e0:ae:15:1c:
         64:74:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org