Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40065.roa
File:                     AS40065.roa (raw, json)
Hash identifier:          p0mXoNQwCbht0MabSb34ATgp74zZypqE69AI3gi+fB8=
Subject key identifier:   2C:AB:56:E1:05:EC:1F:97:36:D2:4F:06:2B:94:69:AE:6A:F9:F1:60
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       44820705F992407238C7827E35D95743239EBA0F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40065.roa
Signing time:             Fri 16 Sep 2022 15:26:11 +0000
ROA not before:           Fri 16 Sep 2022 15:21:11 +0000
ROA not after:            Fri 15 Sep 2023 15:26:11 +0000
asID:                     40065
IP address blocks:        161.129.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:07:05:f9:92:40:72:38:c7:82:7e:35:d9:57:43:23:9e:ba:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 16 15:21:11 2022 GMT
            Not After : Sep 15 15:26:11 2023 GMT
        Subject: CN=2CAB56E105EC1F9736D24F062B9469AE6AF9F160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:ea:cc:f5:d1:fb:19:e3:58:99:af:00:f3:
                    24:16:b0:98:cd:4d:2b:8d:99:56:3b:b0:cb:82:00:
                    88:c6:14:1f:f6:82:32:55:2c:8a:5e:d6:b8:15:80:
                    7d:fa:82:ce:82:be:d5:58:ff:df:09:56:06:ea:fd:
                    39:e2:54:51:35:c3:90:d4:fb:7b:8e:b9:c1:86:8e:
                    e8:26:5f:f7:95:87:51:76:5c:0f:da:53:28:a0:6c:
                    73:ed:2b:2f:53:2f:6e:a9:de:bb:88:33:bf:37:1f:
                    6c:09:14:cc:1b:ae:29:aa:21:f5:3c:b9:2c:54:d0:
                    8b:79:c6:2c:dc:d0:54:9c:2a:d2:07:82:6a:28:52:
                    02:12:6e:e1:de:4e:fa:6b:74:12:54:8d:d0:08:56:
                    60:18:c2:da:19:18:bf:3b:1a:3f:93:91:c7:31:97:
                    f6:dc:35:eb:15:89:cd:81:99:c9:ca:9b:c9:fd:5d:
                    44:2b:2d:39:a9:ab:74:bf:da:13:eb:2f:65:b0:6d:
                    bc:ca:d1:0d:90:f2:e1:c9:8c:ac:65:d4:63:e8:5f:
                    d8:df:4a:01:fd:76:10:5f:50:04:43:d6:4d:80:4b:
                    ce:e0:20:c9:8d:2b:f3:19:de:d2:31:ec:69:f8:c0:
                    4c:d2:e9:e0:0e:88:21:8d:c8:d0:f4:66:fe:db:7a:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:56:E1:05:EC:1F:97:36:D2:4F:06:2B:94:69:AE:6A:F9:F1:60
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS40065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:30:2e:f5:09:12:a9:25:dc:a0:a2:aa:70:a5:0a:7a:cb:5c:
         7f:b8:16:28:dd:5c:76:da:53:6a:6c:d8:b4:96:9a:b7:4b:76:
         c7:9c:f0:2c:44:fa:62:d7:75:68:58:8b:f7:d9:4c:e1:95:a9:
         c3:d5:61:20:80:34:a3:e1:06:5e:08:f5:2f:75:58:f6:82:0c:
         e7:bc:be:db:08:35:eb:b2:59:cc:68:68:47:c1:bf:6a:e7:f3:
         ea:58:ae:3f:2c:f1:44:a6:c4:b2:e8:2f:98:91:98:3c:bd:9e:
         f3:ad:2b:9d:42:61:a9:8b:d4:b8:42:e3:09:e3:49:ba:1a:b9:
         bb:21:42:f0:d0:9f:2f:37:50:9f:52:8e:34:61:65:b2:98:6f:
         40:84:d7:62:25:8f:12:f4:67:0a:86:7b:30:c0:7d:01:41:aa:
         7f:ba:a2:cb:fc:df:a4:ab:42:fd:1d:81:28:29:09:05:20:b5:
         0b:44:3c:29:b6:bd:11:9a:7b:24:0d:6d:78:f9:ce:f1:1b:7f:
         69:2f:f9:91:9c:df:3a:fa:43:63:2d:73:8f:16:60:e8:71:47:
         e0:e0:c1:02:9a:c1:dc:bc:75:7b:fa:0a:fe:6c:61:66:33:82:
         5d:95:4a:b4:4f:a2:0f:8e:0f:cf:8a:6c:ff:74:c9:72:d7:67:
         a0:d6:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org