Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS51649.roa
File:                     AS51649.roa (raw, json)
Hash identifier:          xF7ya7kFo+lZRHA0DrdKBl2F9iU6fAmgtylhJcmf7p4=
Subject key identifier:   61:88:7A:EC:99:D5:BD:01:81:93:E2:A4:72:D3:71:85:D5:4F:CD:6E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       306521F1763699FEEE3A30E5AEBF2BFFA148B7A8
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS51649.roa
Signing time:             Mon 31 Jan 2022 19:26:54 +0000
ROA not before:           Mon 31 Jan 2022 19:21:54 +0000
ROA not after:            Mon 30 Jan 2023 19:26:54 +0000
asID:                     51649
IP address blocks:        2602:fed2:7124::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:21:f1:76:36:99:fe:ee:3a:30:e5:ae:bf:2b:ff:a1:48:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 31 19:21:54 2022 GMT
            Not After : Jan 30 19:26:54 2023 GMT
        Subject: CN=61887AEC99D5BD018193E2A472D37185D54FCD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:fe:cc:15:b2:d0:48:35:15:74:0c:c3:b0:
                    f6:d5:5e:82:6b:67:fa:9b:81:62:31:0b:63:88:ec:
                    e6:19:d3:7a:de:5d:68:3e:cf:88:3b:fb:d7:5f:f2:
                    94:cd:a6:96:2a:c3:f9:58:77:59:0a:29:15:2e:2d:
                    77:75:24:8a:6c:13:f6:79:a8:75:dc:ea:07:48:dd:
                    3e:5d:f4:be:03:2a:c5:0d:bb:87:40:37:ef:d8:37:
                    fe:5d:a4:d9:74:73:ec:bd:23:81:e1:7d:20:6d:b0:
                    8c:81:7f:d1:e4:87:cc:f8:51:de:62:7a:17:1c:f4:
                    29:1b:56:e1:9a:7d:8f:14:7e:43:10:1e:13:6e:e6:
                    eb:e9:e5:0d:13:94:26:0f:04:48:a1:59:97:ee:22:
                    00:da:d1:0d:80:4e:08:82:54:7f:22:ee:49:21:62:
                    09:ed:fc:f7:5f:d0:3e:fb:54:d9:16:51:d8:d1:9f:
                    d1:9c:58:f9:a9:10:db:97:c3:ed:26:b5:9b:63:9e:
                    a6:bd:3a:89:e8:09:f6:45:1b:f3:60:99:51:78:b6:
                    6d:17:15:f6:bf:40:2b:d6:96:26:6f:fa:d2:00:df:
                    1c:40:a4:1f:86:3f:ad:ed:c9:c9:b1:f9:5b:b1:6a:
                    03:61:8a:77:78:ff:18:f1:76:f1:b2:ee:63:08:34:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:88:7A:EC:99:D5:BD:01:81:93:E2:A4:72:D3:71:85:D5:4F:CD:6E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS51649.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7124::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:63:9b:b4:2d:1e:fd:c7:61:84:89:5c:04:47:5d:63:ee:ff:
         d2:3a:d4:92:c6:00:0b:80:88:cc:dd:1a:e1:16:f5:a8:83:d0:
         f0:93:77:c3:73:46:f5:8a:a7:47:c8:ae:17:f6:d8:e2:62:3d:
         ef:87:34:b1:aa:aa:64:c3:b4:92:a6:51:48:54:21:bb:61:ea:
         66:bb:fe:27:f6:50:a7:ae:a1:ed:98:4d:83:45:63:f8:f8:99:
         f8:94:01:f4:0a:b3:84:86:04:4f:12:cd:9f:89:ba:f4:1e:ab:
         f7:4f:d2:73:02:7e:f7:72:0b:2f:ab:89:63:f9:01:eb:33:a2:
         4c:ee:c8:bf:fd:f7:fe:66:6b:db:bb:ce:7a:ca:2b:0c:06:c3:
         c9:fe:b2:ed:a6:a0:2a:2f:59:34:ac:3e:3b:f1:ad:3d:55:e4:
         52:52:fe:f7:a8:30:fe:b7:7b:aa:4e:72:4a:92:80:ca:3b:13:
         be:0d:64:50:a0:0a:87:f9:ef:19:9d:9b:da:1f:8e:93:f3:bf:
         91:38:99:5c:00:f2:06:0a:27:9b:3d:9e:8a:f5:4d:8a:eb:7b:
         17:51:32:cc:a0:2d:02:3f:25:9b:63:b2:ba:d9:ce:24:b4:5c:
         01:4b:d9:a7:9f:c4:04:f7:05:fd:a1:f4:b2:7f:99:55:b4:70:
         19:92:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org