Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa
File:                     AS206729.roa (raw, json)
Hash identifier:          4m/IXgCJrtqaWD4ojTMkEM/yHV7hTmLsiHiC96gfUdU=
Subject key identifier:   19:5F:8C:65:7B:94:DA:8C:D7:20:CF:B7:F0:67:34:06:68:E1:DD:EF
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       0C35EF0119E91255C2C70407DF4B3E2A69C16EFB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa
Signing time:             Wed 08 Feb 2023 07:09:12 +0000
ROA not before:           Wed 08 Feb 2023 07:04:12 +0000
ROA not after:            Wed 07 Feb 2024 07:09:12 +0000
asID:                     206729
IP address blocks:        2a0f:9400:6907::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:35:ef:01:19:e9:12:55:c2:c7:04:07:df:4b:3e:2a:69:c1:6e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Feb  8 07:04:12 2023 GMT
            Not After : Feb  7 07:09:12 2024 GMT
        Subject: CN=195F8C657B94DA8CD720CFB7F067340668E1DDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:d4:c8:ea:42:69:8f:fe:21:13:f5:52:d1:
                    88:ea:fb:01:f8:d7:60:a1:b9:9c:06:41:ba:b8:06:
                    05:e1:37:a5:93:6b:85:6a:ee:d8:46:53:22:e2:a7:
                    2a:42:d1:a2:b3:f2:ba:e5:e3:4a:51:74:6b:7e:ec:
                    67:1a:18:b7:77:e1:04:46:87:5c:5e:e0:0a:68:32:
                    fc:2e:9f:e7:45:5a:5a:48:f4:9d:3d:d3:b2:7f:73:
                    52:38:0c:0f:25:4a:d0:ad:d4:f7:79:2b:11:3d:96:
                    12:24:3b:fe:ae:ce:90:74:08:94:d9:b8:16:67:fb:
                    21:7b:f7:6b:34:75:c5:8a:76:e2:1a:c2:09:e7:aa:
                    5c:9f:cb:b7:74:dc:7f:bf:65:d3:ea:27:f6:d2:28:
                    b9:82:4b:db:aa:bd:b5:fb:3b:61:bf:48:62:18:64:
                    66:fb:25:1c:0d:65:3f:46:45:c1:18:6d:1e:77:59:
                    34:d9:5f:d2:76:a8:39:a3:a6:a6:bd:8b:78:84:e4:
                    3e:5b:3f:b3:46:8e:f5:f1:f7:29:40:dc:7b:3d:57:
                    2e:c6:94:82:43:48:46:16:8d:33:a7:c5:a7:76:20:
                    fc:28:18:cc:17:f2:45:b4:bb:4f:07:6a:80:92:74:
                    c2:ca:ad:3f:dd:14:10:b2:e2:4b:f4:82:c4:a6:6b:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:8C:65:7B:94:DA:8C:D7:20:CF:B7:F0:67:34:06:68:E1:DD:EF
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS206729.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6907::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:6d:ec:fa:7b:bd:fe:71:60:18:53:7d:8d:0f:c7:61:00:
         fb:7b:50:70:98:e5:3f:8a:c4:99:60:19:28:10:0c:62:21:dd:
         51:94:f4:1a:95:ec:f4:d5:5b:04:59:3d:b0:ec:c9:89:f5:ed:
         fc:d6:02:3a:ab:04:0f:7a:ea:f8:fe:64:9d:a1:9e:22:e1:6c:
         65:02:a0:9a:f0:f5:1a:cd:75:31:8a:27:de:49:05:f5:d0:af:
         6b:cb:12:cf:26:93:c1:a8:3c:7a:52:3d:d5:76:70:72:03:2d:
         5e:3c:5f:22:dc:0f:5e:8e:e3:40:b1:da:22:42:bf:5b:de:b5:
         aa:50:dd:18:5f:48:a4:69:fe:90:38:e6:6c:43:e2:00:ba:ec:
         32:76:5b:83:f8:95:ea:7b:6c:6b:31:d5:2b:c6:0c:fd:6b:26:
         e7:81:94:ca:f1:52:86:1d:1c:48:93:e2:c5:b1:ff:7b:59:26:
         7e:db:63:e7:70:d3:0a:b1:0d:68:32:ac:f4:8f:4c:d5:76:1c:
         ed:5d:77:bf:93:01:e0:57:aa:34:84:8a:e2:88:c1:24:00:81:
         8f:7e:6f:72:21:05:1e:90:bc:ff:c4:ec:cd:a6:ce:1f:e1:73:
         8e:3a:c4:44:a2:2c:06:76:9d:3c:5e:e3:01:6f:46:a4:f2:d8:
         46:5b:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----