Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          TrXIid5F3vqByXx9UjougxPbloE7enq9973a8dxveTI=
Subject key identifier:   7A:BA:7C:51:1E:79:32:63:28:67:D7:A8:6E:4F:F6:7B:91:91:DC:DE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2685A350027CC56D40F08CE45D91AB834BAB90D1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16509.roa
Signing time:             Tue 13 Sep 2022 01:20:17 +0000
ROA not before:           Tue 13 Sep 2022 01:15:17 +0000
ROA not after:            Tue 12 Sep 2023 01:20:17 +0000
asID:                     16509
IP address blocks:        167.88.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:85:a3:50:02:7c:c5:6d:40:f0:8c:e4:5d:91:ab:83:4b:ab:90:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 13 01:15:17 2022 GMT
            Not After : Sep 12 01:20:17 2023 GMT
        Subject: CN=7ABA7C511E7932632867D7A86E4FF67B9191DCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:23:64:2b:9a:f9:38:4a:46:09:06:e6:94:
                    2e:34:e9:ef:17:fc:de:85:17:04:ef:63:b7:92:46:
                    ee:9f:5d:30:a7:37:56:f3:bc:1d:d1:bf:73:99:60:
                    f5:8d:6b:33:14:38:03:6d:2b:13:2e:7c:f3:e8:0e:
                    21:a6:ae:1c:d9:b6:3f:5e:ae:7d:1c:ee:49:c9:ee:
                    17:6a:5a:fb:98:87:95:30:6b:d0:c8:bc:db:99:c7:
                    59:da:dd:8c:20:06:ca:6d:38:20:1a:72:cc:bb:f1:
                    b1:2f:26:69:fe:79:66:79:ec:3c:27:01:10:57:d0:
                    ae:a5:54:68:32:19:5b:3c:26:60:a0:51:69:33:0b:
                    9b:c2:33:20:fd:c7:aa:1b:6d:e8:4f:60:99:de:01:
                    ef:35:7d:59:f2:9f:70:5b:06:72:5a:35:cf:9d:db:
                    01:32:5f:83:72:2e:25:b0:9b:53:ee:a3:82:46:2f:
                    90:1e:48:ee:93:77:09:57:78:a9:42:6b:f3:e7:3f:
                    ff:39:8b:d3:56:bc:37:a9:ed:46:d5:9e:1a:eb:76:
                    76:79:a7:42:aa:64:23:91:24:c5:f6:cf:8c:ee:f3:
                    59:dc:66:ab:88:5c:0f:41:0f:bc:78:7b:72:f6:88:
                    e8:42:d4:2f:03:84:11:fe:7c:3f:97:3f:66:d6:47:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BA:7C:51:1E:79:32:63:28:67:D7:A8:6E:4F:F6:7B:91:91:DC:DE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:b4:42:ca:02:ee:b9:1d:17:70:f0:cb:a1:0c:38:a5:a7:
         18:e5:17:60:7f:5d:94:47:0f:a1:c8:62:ab:d7:d2:c3:3a:6c:
         cb:0d:03:0f:fc:d2:c2:bd:1c:3e:35:7e:bb:32:a9:a0:9f:0b:
         2a:c9:e8:25:b2:cd:59:5f:02:77:20:72:c1:a7:53:83:c6:52:
         15:30:ae:62:36:41:ac:c0:0f:66:d6:9c:d5:0b:bf:83:35:94:
         8a:9b:56:ed:5b:eb:c7:38:09:4e:ec:8e:08:b7:48:ce:93:25:
         7b:eb:13:d3:2b:f4:e1:4a:24:17:df:2a:ed:65:84:13:e9:79:
         96:8f:b4:48:b7:bb:b8:61:a4:a8:62:b0:00:85:8f:77:ee:94:
         9f:7f:dd:9a:60:d0:b3:88:a7:e8:b6:9d:fc:b9:1e:6f:77:6f:
         31:da:17:84:19:da:17:f3:87:6e:87:3b:2f:45:44:06:a7:bb:
         a8:be:c0:85:03:d6:20:44:bf:30:7a:b8:9d:a7:1a:f3:90:d1:
         41:25:10:2c:a1:ff:b2:91:e3:4d:d6:82:9b:27:53:bf:2b:ee:
         23:a1:d2:8a:89:77:0c:13:fe:a9:a5:7c:5a:8b:2a:67:af:f2:
         4a:0a:f7:de:e7:19:53:45:55:65:32:f4:96:2d:03:5a:73:02:
         b8:2b:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org