Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142635.roa
File:                     AS142635.roa (raw, json)
Hash identifier:          7dlo3z0oyTrG7fZ3crdgsKGxQ0Q4LJMGb43/Crp/H6w=
Subject key identifier:   6E:37:21:C9:6C:0C:0C:AC:DF:11:01:BD:17:DB:02:57:AB:3C:49:2E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1923B838ECA73EB4C9E5AEB07C1D50448ECACE46
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142635.roa
Signing time:             Tue 13 Sep 2022 01:20:21 +0000
ROA not before:           Tue 13 Sep 2022 01:15:21 +0000
ROA not after:            Tue 12 Sep 2023 01:20:21 +0000
asID:                     142635
IP address blocks:        2602:fed2:731b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:23:b8:38:ec:a7:3e:b4:c9:e5:ae:b0:7c:1d:50:44:8e:ca:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 13 01:15:21 2022 GMT
            Not After : Sep 12 01:20:21 2023 GMT
        Subject: CN=6E3721C96C0C0CACDF1101BD17DB0257AB3C492E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:2f:f4:64:22:24:6f:91:1b:e3:64:a1:58:
                    8c:58:16:e1:3c:75:0e:7b:db:f9:d2:d4:b2:25:14:
                    d6:8d:21:ed:0f:e6:50:9b:07:eb:8d:b1:24:e3:1e:
                    8a:c8:af:78:b0:98:64:75:cc:55:7c:a5:87:5c:7d:
                    69:7f:28:f0:6c:34:fb:c3:f1:4f:9a:bc:34:df:f6:
                    a5:36:c4:57:31:d7:24:64:a5:7b:eb:5d:59:c6:f4:
                    15:b5:24:92:dc:2f:10:55:96:da:4c:5a:1e:ef:91:
                    ef:d5:3a:f1:71:b0:b7:a6:5b:b3:f9:e6:8f:93:36:
                    fa:c5:f1:ed:d0:c7:32:fb:32:c8:f8:41:e6:f1:73:
                    da:fb:31:d3:13:2f:0a:46:9e:70:39:44:1a:9d:3b:
                    ae:c1:ed:fb:ba:30:d4:bc:ef:71:3f:05:37:22:e8:
                    b6:b1:2f:3b:6e:ab:27:34:07:ba:54:f4:65:7c:03:
                    08:5a:2b:93:19:1d:b3:59:7b:af:58:a9:36:34:c3:
                    bf:56:11:3a:e6:3f:5f:0e:be:1a:11:6f:87:0f:e2:
                    91:54:11:28:ed:e5:bb:6d:77:57:85:e4:5d:e9:ed:
                    20:7a:8f:55:95:d1:44:e6:87:7f:d9:62:94:11:c7:
                    86:72:14:0b:2b:2c:e3:60:7e:5f:39:b9:96:c7:5f:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:21:C9:6C:0C:0C:AC:DF:11:01:BD:17:DB:02:57:AB:3C:49:2E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS142635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731b::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:f0:d2:28:7e:81:8f:06:ea:ae:e6:10:fe:79:71:b6:4f:
         05:2f:04:b8:e8:d2:c0:b7:49:3f:53:49:b2:2c:77:fc:0a:e1:
         2f:1a:73:57:9d:44:5e:b2:89:a1:9e:2d:2e:56:62:f8:43:0d:
         69:fc:97:de:60:58:a3:2f:0c:50:8f:40:ca:ec:80:ee:b7:dd:
         5a:63:e9:ab:35:f0:a6:66:30:0c:ce:d1:92:c7:4e:26:ce:67:
         15:35:b0:4c:e3:e5:8a:70:d3:da:e4:27:af:aa:d2:13:de:26:
         56:4a:f0:ef:78:8b:ec:ce:33:b2:f1:44:98:b6:ca:24:75:05:
         64:4a:14:9a:d0:d0:73:7f:42:46:3d:59:95:25:66:6a:73:b4:
         a0:a9:f8:8c:21:73:bc:cc:00:3c:b6:e5:ac:56:7b:a0:f1:c4:
         e3:a0:c8:ab:fe:f0:dd:40:a6:c3:c5:f9:74:15:bf:be:a8:73:
         b2:36:bc:82:40:7a:2f:83:59:d2:fb:c1:a0:c1:a7:ba:7f:9f:
         80:99:09:f0:79:72:bd:b8:52:83:fe:b8:f5:de:da:c8:2a:9d:
         4b:06:cd:f6:e0:c4:f3:27:2b:94:6a:e1:a1:ef:2c:91:92:01:
         13:e7:d1:61:1c:d0:32:f7:09:ae:27:fc:dc:af:c0:08:9a:35:
         49:74:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org