Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS1239.roa
File:                     AS1239.roa (raw, json)
Hash identifier:          0k35jXk4dHiQGeGfi9dpEhgDsHf4fgbdLvNFKtaf17g=
Subject key identifier:   22:5E:DD:76:06:3E:9F:A4:F8:FD:2D:AA:E0:EF:3F:16:64:D2:96:03
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7D67C29218ACD3C637876B07A139C6F9C85352DD
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS1239.roa
Signing time:             Mon 31 Jan 2022 19:26:54 +0000
ROA not before:           Mon 31 Jan 2022 19:21:54 +0000
ROA not after:            Mon 30 Jan 2023 19:26:54 +0000
asID:                     1239
IP address blocks:        2602:fed2:7600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:c2:92:18:ac:d3:c6:37:87:6b:07:a1:39:c6:f9:c8:53:52:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 31 19:21:54 2022 GMT
            Not After : Jan 30 19:26:54 2023 GMT
        Subject: CN=225EDD76063E9FA4F8FD2DAAE0EF3F1664D29603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:27:68:a2:14:39:6e:e6:62:8b:cc:db:f9:
                    e7:7f:33:d1:a5:6e:f9:db:61:71:f7:52:a5:cf:4b:
                    ab:96:cf:8c:ec:c9:25:55:3c:bb:9c:7c:3a:38:c1:
                    d8:8b:78:ed:99:10:82:dc:91:ca:99:67:a5:fd:e7:
                    60:de:7e:82:d5:cb:28:0d:82:b9:3a:05:83:92:f1:
                    2c:c4:e1:0e:42:ad:3e:77:2a:fe:36:a6:6e:6d:77:
                    b7:0c:3c:5c:77:26:b2:7c:13:38:67:08:34:d4:28:
                    6d:1e:f1:c5:09:fb:74:fb:31:a4:ff:02:f4:a1:a6:
                    90:25:8b:b9:6d:ce:3d:57:fd:7b:3f:7e:1f:ea:57:
                    82:65:70:f4:b4:29:bd:45:b0:05:e3:22:5c:68:2f:
                    aa:a0:42:b7:3f:81:bf:a7:55:fd:36:9f:78:81:42:
                    81:c6:47:a4:84:44:5c:4f:51:5a:84:d6:db:c5:08:
                    50:8e:5f:c4:0c:05:ee:a5:63:52:9f:63:11:85:43:
                    5c:a8:35:9b:d5:36:91:0e:e4:8d:51:1c:08:65:82:
                    c1:8b:dd:48:1b:08:66:50:bb:9a:28:95:6c:ae:35:
                    08:f4:c3:4f:ff:d5:b5:62:04:e2:a8:40:1c:5d:7b:
                    1f:38:5b:24:fd:41:b8:32:a3:fd:37:c6:bd:8f:13:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5E:DD:76:06:3E:9F:A4:F8:FD:2D:AA:E0:EF:3F:16:64:D2:96:03
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS1239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:74:e4:87:08:e1:4d:ab:52:73:d3:ca:d3:07:46:2e:68:f4:
         b4:1c:fb:e5:80:c5:2a:a7:96:83:45:53:8f:77:db:8f:7e:9b:
         eb:25:43:49:6d:81:39:ed:f8:b7:83:cc:07:4c:d1:91:73:63:
         54:33:d4:98:c5:d4:7e:0d:87:00:6c:77:90:c9:f0:68:41:e7:
         7a:02:27:63:51:5e:03:d8:1e:ba:03:99:ab:c5:8b:ea:26:85:
         ad:e8:84:a8:f9:6c:c7:a3:0a:99:45:ab:ef:c8:ce:b1:f6:09:
         69:6d:ef:21:9e:f7:77:b4:f5:73:03:4b:5e:01:ac:a5:f9:f3:
         bd:a3:e5:f1:7e:37:1d:a9:10:75:91:2b:46:58:0f:05:1f:b7:
         f4:ce:41:3e:d7:d8:19:4f:36:94:2b:ea:58:07:79:92:f1:48:
         c8:de:bb:32:68:32:fc:4a:6f:6f:34:61:c1:09:7d:44:f6:de:
         c9:e3:f5:c9:d5:49:cb:44:d4:aa:f8:5d:92:71:5c:f2:d9:38:
         f2:eb:75:73:06:79:a7:59:ad:8f:4a:b2:a1:5e:0c:1c:da:a9:
         19:b1:26:6a:0c:82:3d:c0:4f:40:af:a4:c6:54:14:a7:d4:dd:
         95:51:ff:bf:00:45:a7:d6:c9:9a:f8:40:6d:f3:dd:94:2f:0c:
         e7:44:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org