Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          tpcXgcsNasFQeBSXVscDJtT3ueEO5Wp9hBLLrcLBBpE=
Subject key identifier:   1C:56:62:74:2D:11:A2:B4:C2:76:F7:42:7B:C1:A8:43:62:30:F3:75
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       025560DC8CF014C7A37306A98BE3FB6ED62D883D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62240.roa
Signing time:             Tue 13 Sep 2022 01:20:18 +0000
ROA not before:           Tue 13 Sep 2022 01:15:18 +0000
ROA not after:            Tue 12 Sep 2023 01:20:18 +0000
asID:                     62240
IP address blocks:        2602:fed2:7800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:60:dc:8c:f0:14:c7:a3:73:06:a9:8b:e3:fb:6e:d6:2d:88:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 13 01:15:18 2022 GMT
            Not After : Sep 12 01:20:18 2023 GMT
        Subject: CN=1C5662742D11A2B4C276F7427BC1A8436230F375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:9e:6c:6f:25:db:e3:35:aa:a2:70:97:81:
                    42:b1:9d:8e:77:62:32:f5:12:ff:c4:35:3f:1b:fb:
                    3f:91:5d:0f:92:b7:3c:6e:5e:e9:6d:2d:f6:f4:ba:
                    89:69:ad:11:1a:66:07:16:4a:a4:be:c4:1a:c1:3f:
                    7e:3e:42:9c:2d:6f:ae:c4:3e:05:86:33:85:8e:75:
                    21:71:9e:8c:7e:33:4a:58:23:de:93:a8:e7:61:81:
                    2e:96:14:09:94:06:e3:e7:dc:89:f0:11:e3:75:91:
                    36:bb:1b:6a:c1:88:7d:25:80:f0:89:4f:d2:71:79:
                    8c:a4:f8:ea:24:99:37:25:d1:73:ec:7c:80:2f:b9:
                    af:fc:dd:b8:a0:81:3c:ad:fb:51:c8:76:4f:0c:24:
                    96:2b:87:bd:89:8e:40:6a:11:85:7c:30:b7:f2:4a:
                    2c:df:b1:f4:14:3c:ff:ad:45:d7:cf:b8:7a:85:a6:
                    fd:98:fe:2a:de:ef:20:43:4e:39:cd:02:c0:cd:48:
                    9a:84:bd:99:a5:20:76:42:00:df:6a:14:54:18:c1:
                    6d:50:71:7a:5c:af:f2:61:97:2a:29:da:a5:92:18:
                    d6:73:8b:11:5d:b6:6c:16:b4:72:b8:fa:52:03:43:
                    17:a6:f0:28:3d:99:f2:f0:d9:1a:e4:1f:eb:29:29:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:62:74:2D:11:A2:B4:C2:76:F7:42:7B:C1:A8:43:62:30:F3:75
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:fb:cd:b3:55:1c:d2:ec:86:7b:27:26:a0:39:13:b0:be:4b:
         ac:64:3a:1d:fc:c8:d0:37:8b:d8:bc:d7:b2:af:27:d5:97:a2:
         ff:ff:d4:56:7b:00:d6:bc:d4:26:f0:ed:0c:17:03:1f:21:5e:
         c6:39:4c:82:a6:c7:9d:8e:97:83:51:7c:e1:69:42:26:4a:4e:
         97:78:fd:b3:fe:38:8b:79:25:8b:34:4f:e7:0e:6e:68:93:23:
         19:9b:50:65:c5:96:4b:a7:50:af:72:90:c7:63:6f:83:0a:df:
         71:7c:0d:68:78:e0:9a:07:62:67:c2:18:f5:86:b4:8f:c2:ee:
         6b:ef:08:bc:4e:9f:67:d2:36:32:95:c8:0b:47:72:7c:11:4f:
         22:ea:35:97:eb:d7:8f:6e:51:e3:9a:99:48:46:30:5f:bc:38:
         07:48:14:2a:e8:44:79:2c:92:54:08:e8:d0:33:a7:6c:4c:91:
         7e:18:4d:b4:83:ce:f1:17:e0:e3:f1:3b:1b:4b:a8:3e:ab:24:
         55:41:74:f2:b5:7c:5a:d0:54:ce:69:c1:c1:7b:c7:a1:8c:16:
         67:11:2b:37:6f:b0:54:e7:cf:17:97:09:67:75:5e:39:e7:01:
         34:4e:3e:91:8f:db:35:49:72:11:36:05:78:ce:1a:60:7f:86:
         e0:80:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org