Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207740.roa
File:                     AS207740.roa (raw, json)
Hash identifier:          NMDE9syZht8nkhsLJYiSLP7OscvY6LH4/beH3RLttR0=
Subject key identifier:   93:18:6C:F9:3A:C9:9A:EC:14:98:52:05:9B:3D:D2:2C:6D:31:C3:06
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       147614C4D17E83D8B62971AC87C21BE2E6A013CF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207740.roa
Signing time:             Thu 26 May 2022 09:28:49 +0000
ROA not before:           Thu 26 May 2022 09:23:49 +0000
ROA not after:            Thu 25 May 2023 09:28:49 +0000
asID:                     207740
IP address blocks:        2a0f:9400:700b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:76:14:c4:d1:7e:83:d8:b6:29:71:ac:87:c2:1b:e2:e6:a0:13:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: May 26 09:23:49 2022 GMT
            Not After : May 25 09:28:49 2023 GMT
        Subject: CN=93186CF93AC99AEC149852059B3DD22C6D31C306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:da:de:dc:1e:0f:fc:67:f4:7c:a0:ab:03:
                    69:5a:ba:09:9a:6a:78:47:7d:a9:30:20:ce:f0:82:
                    a0:58:46:ad:87:06:2a:90:09:4f:52:76:cf:0f:92:
                    c8:1b:fd:b2:2a:95:68:60:57:8a:55:44:bd:52:97:
                    69:2f:06:6d:18:c8:8f:a3:74:2c:53:81:19:61:70:
                    73:3a:64:d4:b1:93:64:a7:c0:fd:ae:86:79:eb:95:
                    c9:18:48:11:d2:dd:4e:6e:ac:cf:ca:3f:a7:5f:1f:
                    1d:2d:5d:7c:04:38:6a:9f:eb:78:a0:94:1e:79:b7:
                    18:ec:ea:a2:6f:c4:c2:9e:11:9a:ac:3f:b5:8f:eb:
                    41:a3:be:7f:c3:ef:42:dc:84:12:38:f4:3c:36:0a:
                    5e:e0:70:3c:c3:40:9f:3e:54:95:c2:cb:ee:0a:64:
                    64:a0:03:2c:1a:9d:9e:86:1d:f6:95:d3:6c:ad:e1:
                    2b:40:b5:07:58:50:e8:a4:bc:58:4c:33:bd:be:d2:
                    a9:84:0b:88:12:18:15:b8:ce:b1:42:c7:a6:69:07:
                    f3:31:95:d4:74:44:ef:6a:cb:79:4c:90:17:d4:98:
                    82:7f:56:ca:28:f5:9b:3b:03:6b:bb:78:45:c9:93:
                    b6:4d:44:41:14:91:28:ca:d1:77:92:d8:15:ff:1e:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:6C:F9:3A:C9:9A:EC:14:98:52:05:9B:3D:D2:2C:6D:31:C3:06
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207740.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:700b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:fa:1f:4e:e9:ce:90:41:0e:09:b4:b3:3d:2d:05:03:07:
         20:a7:62:9a:0a:32:63:8c:88:4a:0f:11:8b:a8:51:5d:f5:91:
         4a:b3:c4:96:1e:48:7d:62:2a:5d:f5:38:fa:4a:af:fa:c4:6f:
         70:af:db:ee:44:16:17:42:a0:dd:75:fc:f6:a2:2e:82:d2:b6:
         2e:93:b0:e9:d9:c9:9f:61:3b:8e:dc:9a:3e:7a:06:87:3c:05:
         2e:07:ed:00:fa:af:13:72:99:c9:08:ba:0b:d5:c7:46:d9:b7:
         08:d5:fa:32:f2:01:db:28:ea:a7:f1:d9:59:67:d9:ec:71:e2:
         ab:fe:e8:d5:02:bf:ee:80:06:d8:5b:cb:6f:71:8c:65:b8:6d:
         e1:74:96:1a:6f:ba:15:e5:ac:83:2b:4f:09:88:3c:ac:57:07:
         e2:42:a3:7b:43:ff:b1:77:53:fd:d8:38:b0:c1:34:3b:c6:52:
         a2:75:dd:d7:10:05:3c:34:a9:d3:44:38:b7:b4:49:55:0d:18:
         84:98:fa:de:20:51:24:1d:98:c0:13:e2:0a:78:a2:35:92:89:
         6d:c9:8d:07:c2:42:e1:77:bb:9d:7e:e1:21:4c:36:c7:4f:06:
         57:e6:48:c4:ab:5e:d5:e5:53:54:5f:69:c3:93:e1:9d:6c:a0:
         0d:e4:9f:33
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUFHYUxNF+g9i2KXGsh8Ib4uagE88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMjA1MjYwOTIzNDlaFw0yMzA1MjUwOTI4NDlaMDMxMTAvBgNV
BAMTKDkzMTg2Q0Y5M0FDOTlBRUMxNDk4NTIwNTlCM0REMjJDNkQzMUMzMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E9re3B4P/Gf0fKCrA2laugma
anhHfakwIM7wgqBYRq2HBiqQCU9Sds8Pksgb/bIqlWhgV4pVRL1Sl2kvBm0YyI+j
dCxTgRlhcHM6ZNSxk2SnwP2uhnnrlckYSBHS3U5urM/KP6dfHx0tXXwEOGqf63ig
lB55txjs6qJvxMKeEZqsP7WP60Gjvn/D70LchBI49Dw2Cl7gcDzDQJ8+VJXCy+4K
ZGSgAywanZ6GHfaV02yt4StAtQdYUOikvFhMM72+0qmEC4gSGBW4zrFCx6ZpB/Mx
ldR0RO9qy3lMkBfUmIJ/Vsoo9Zs7A2u7eEXJk7ZNREEUkSjK0XeS2BX/HgBhAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUkxhs+TrJmuwUmFIFmz3SLG0xwwYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNzc0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABwCzANBgkqhkiG9w0BAQsFAAOC
AQEAwez6H07pzpBBDgm0sz0tBQMHIKdimgoyY4yISg8Ri6hRXfWRSrPElh5IfWIq
XfU4+kqv+sRvcK/b7kQWF0Kg3XX89qIugtK2LpOw6dnJn2E7jtyaPnoGhzwFLgft
APqvE3KZyQi6C9XHRtm3CNX6MvIB2yjqp/HZWWfZ7HHiq/7o1QK/7oAG2FvLb3GM
Zbht4XSWGm+6FeWsgytPCYg8rFcH4kKje0P/sXdT/dg4sME0O8ZSonXd1xAFPDSp
00Q4t7RJVQ0YhJj63iBRJB2YwBPiCniiNZKJbcmNB8JC4Xe7nX7hIUw2x08GV+ZI
xKte1eVTVF9pw5PhnWygDeSfMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org