Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33693.roa
File:                     AS33693.roa (raw, json)
Hash identifier:          ZBMYMsakZC0Ms1qR0KsSQLoRS312QsrYYCDBr9s0eTw=
Subject key identifier:   0D:02:16:20:A4:F3:BB:96:EB:6C:C7:2F:CD:F1:F1:1B:AE:81:A8:0D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       45CD66EF7A2145A4983D22F92F660568E57D1EEC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33693.roa
Signing time:             Mon 31 Jan 2022 19:26:54 +0000
ROA not before:           Mon 31 Jan 2022 19:21:54 +0000
ROA not after:            Mon 30 Jan 2023 19:26:54 +0000
asID:                     33693
IP address blocks:        2602:fed2:7307::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:66:ef:7a:21:45:a4:98:3d:22:f9:2f:66:05:68:e5:7d:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 31 19:21:54 2022 GMT
            Not After : Jan 30 19:26:54 2023 GMT
        Subject: CN=0D021620A4F3BB96EB6CC72FCDF1F11BAE81A80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:bc:d8:ee:75:32:00:69:56:6f:ce:02:44:
                    02:66:9e:66:5b:c2:d2:63:f6:d6:90:fb:e3:5a:a8:
                    ec:06:54:f7:02:a6:7f:52:76:44:5c:07:70:c4:24:
                    d7:be:55:3d:09:fa:25:3a:46:a5:b8:26:d1:33:31:
                    4a:67:05:7b:76:7e:7f:d9:9e:e9:6b:05:c9:33:30:
                    8f:1a:02:6f:b0:46:09:82:a3:8a:f3:a0:f6:0a:f1:
                    8c:99:09:1f:42:b1:7d:c4:0c:7e:f9:b0:eb:a7:de:
                    5d:e8:4e:1b:cd:2c:1b:c4:8c:15:17:38:17:92:0f:
                    65:e5:67:96:f6:27:cb:fb:0a:ff:0a:25:da:ac:37:
                    14:b7:5e:4b:d4:23:fe:02:d6:f6:c4:19:0e:47:9a:
                    ba:03:29:78:b5:07:95:b4:f9:53:74:42:f9:78:4f:
                    8f:75:a4:9a:32:bd:3d:87:80:f7:eb:ae:88:d9:9f:
                    62:13:e9:87:59:be:7b:a7:ca:7b:b7:fc:24:4f:d6:
                    78:66:8b:8c:f3:8b:b7:66:47:79:6f:e6:99:bb:51:
                    1d:74:60:9f:7c:b2:3f:47:97:62:56:31:04:fb:db:
                    ae:28:fc:7c:a7:a1:8e:0b:ea:05:bf:30:e0:07:ef:
                    af:9e:ba:b9:ba:50:55:63:97:fa:47:7a:7b:1c:52:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:16:20:A4:F3:BB:96:EB:6C:C7:2F:CD:F1:F1:1B:AE:81:A8:0D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7307::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:9f:9d:1e:c0:be:c4:e6:d9:aa:23:68:b6:fd:8f:d0:38:d0:
         53:70:5e:64:07:27:db:62:74:67:15:ca:23:f8:b4:28:44:bf:
         d3:a5:79:45:3e:4d:e9:53:c2:fc:e1:00:ee:6e:ea:29:41:33:
         7c:bc:c1:3d:22:84:ef:50:a1:9b:8c:d4:0c:3f:36:3b:e5:8d:
         5c:37:a0:ff:a7:6c:f2:98:91:c7:84:5b:02:4a:52:28:fe:fa:
         95:55:85:f9:84:e9:6d:14:c7:b0:65:ee:16:97:6f:f9:50:88:
         26:98:2a:52:1d:08:18:6e:7e:28:01:67:7d:fd:29:77:35:d6:
         12:40:c4:c9:61:2e:d2:53:de:66:0a:27:dd:b1:29:24:31:e3:
         7f:32:86:f3:50:76:ff:57:87:c1:09:00:43:f1:5e:50:e3:11:
         c6:63:66:fa:03:7c:99:b4:00:ce:ca:92:d9:1c:a5:2a:c9:25:
         dd:1d:50:1e:1f:4a:16:41:4c:82:f4:7c:f0:bc:04:0b:0e:dc:
         ea:ee:cf:07:a8:c6:62:64:38:4e:ec:3b:a3:b4:a6:ce:bc:1d:
         ac:1b:4e:3d:41:4e:fb:ac:57:6c:2c:62:c5:39:9d:3d:d5:09:
         7d:95:83:d3:62:d8:3c:c3:f9:d2:3d:e2:db:7f:f6:8c:e2:9c:
         44:a9:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-ams.rpki-client.org