Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142158.roa
File:                     AS142158.roa (raw, json)
Hash identifier:          Sb1njtfJ1rjqJqdD1yj0ueax537rX2JqjsfetBMw8uI=
Subject key identifier:   53:86:68:24:AF:33:5B:AB:7B:49:37:88:AA:B1:17:CF:47:71:08:AF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0616750452B40BF195D697BC1CEF904D95F7310E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142158.roa
Signing time:             Thu 03 Mar 2022 11:39:39 +0000
ROA not before:           Thu 03 Mar 2022 11:34:39 +0000
ROA not after:            Thu 02 Mar 2023 11:39:39 +0000
asID:                     142158
IP address blocks:        2602:fed2:7312::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:75:04:52:b4:0b:f1:95:d6:97:bc:1c:ef:90:4d:95:f7:31:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  3 11:34:39 2022 GMT
            Not After : Mar  2 11:39:39 2023 GMT
        Subject: CN=53866824AF335BAB7B493788AAB117CF477108AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:72:cf:0c:05:4e:ec:c2:f4:ea:3c:37:c6:
                    f8:8d:93:d2:3b:9a:8d:64:23:fb:cf:0d:0a:70:b9:
                    3b:07:d6:40:87:9a:39:be:24:b8:55:09:7b:96:fc:
                    ab:78:6b:2e:78:c8:23:2e:5c:07:3a:c7:fa:ca:c2:
                    db:19:52:13:ab:c9:13:ab:48:d2:4d:5d:6e:cb:07:
                    18:2a:4d:ca:20:5a:c6:92:a5:37:11:c8:5e:57:e3:
                    ba:40:98:ac:9d:21:be:c2:32:73:3a:7d:c6:59:c0:
                    ff:16:38:e5:ed:ec:62:42:82:7c:9c:be:d3:6b:d6:
                    36:1e:58:67:78:2b:01:0d:04:27:fc:3c:76:78:0b:
                    51:19:23:3d:9b:a8:2f:eb:23:85:c4:fa:86:af:f0:
                    20:21:89:9f:8c:4c:34:66:0a:5a:26:6f:1e:09:41:
                    eb:3c:7a:be:34:7a:67:88:99:0a:ca:b0:0c:e2:19:
                    ee:76:b2:57:96:08:5b:31:c5:44:1d:95:d0:3b:7a:
                    eb:d3:98:3c:9e:1c:91:ac:57:fa:8d:c9:2f:e4:12:
                    b3:73:8a:74:8f:9c:94:65:5f:a2:e8:77:f7:84:9f:
                    6d:4e:a7:3d:0a:46:c6:24:eb:69:05:1f:34:a5:04:
                    8e:a8:18:f7:0a:67:1b:a4:b0:19:f9:13:ef:da:10:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:86:68:24:AF:33:5B:AB:7B:49:37:88:AA:B1:17:CF:47:71:08:AF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142158.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7312::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:f0:33:92:3f:9d:20:28:50:ac:0c:32:64:a7:bf:7f:4b:
         ef:e0:52:c0:10:39:25:fc:44:e8:26:00:70:d8:3b:c5:60:d7:
         af:37:3c:93:85:71:81:93:ff:78:da:3e:84:e7:39:0c:2b:cf:
         f0:d2:4d:43:9e:3c:cb:c1:26:7b:d1:01:51:fe:ca:41:20:4a:
         3b:05:cd:90:4f:5f:92:44:18:2a:81:80:58:fa:a2:b6:91:07:
         e1:50:47:0b:b9:f1:04:b3:3b:25:70:bb:68:12:a1:7d:73:3a:
         a6:22:d2:97:5b:bb:6c:b3:2b:45:c0:56:a1:5f:82:2c:54:bd:
         16:1a:e5:8c:af:94:57:d4:cd:a4:00:71:0a:b0:b7:e7:89:f6:
         dc:86:5b:6f:e0:d4:fc:83:66:e9:61:ea:67:3b:91:44:24:ed:
         0a:f7:26:f5:ff:d1:56:cb:ce:f3:fc:5a:17:87:32:a1:0f:9c:
         f0:e1:7a:53:ff:8b:65:f5:65:cc:6f:b7:c1:29:e7:66:9d:c3:
         15:a8:4c:5d:c9:fc:c4:e3:d9:89:2a:53:a9:07:9c:4c:78:68:
         e0:68:a6:b3:e2:88:f3:5f:3c:05:5e:d1:3a:41:1e:23:aa:1a:
         f1:39:54:c2:d7:3c:df:bc:f3:e9:6b:19:f1:5e:6e:a2:87:91:
         8a:42:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org