Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207455.roa
File:                     AS207455.roa (raw, json)
Hash identifier:          oY9JtuLSGUFyHYSkRSl5pRzfOu98Uy+kJoYzQlM1xOk=
Subject key identifier:   A3:23:FA:F6:B3:B0:79:47:96:DD:0A:F3:9A:66:12:0B:35:4F:D6:E0
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       077ADBB58B310412EF48428DF26A77CAE7E6F73D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207455.roa
Signing time:             Tue 30 Apr 2024 22:53:27 +0000
ROA not before:           Tue 30 Apr 2024 22:48:27 +0000
ROA not after:            Tue 29 Apr 2025 22:53:27 +0000
asID:                     207455
IP address blocks:        2a0f:9400:8011::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 01 May 2024 02:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7a:db:b5:8b:31:04:12:ef:48:42:8d:f2:6a:77:ca:e7:e6:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Apr 30 22:48:27 2024 GMT
            Not After : Apr 29 22:53:27 2025 GMT
        Subject: CN=A323FAF6B3B0794796DD0AF39A66120B354FD6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:60:81:36:fa:98:1d:a5:da:fa:d6:be:9e:
                    e4:ea:54:99:32:fd:72:35:09:f9:22:98:ed:08:d9:
                    cb:9d:57:e0:5c:a4:9d:84:dc:e0:e8:3c:21:af:f2:
                    70:53:e5:3d:ea:6f:91:39:da:48:2f:ed:04:16:1a:
                    35:d9:81:55:4a:e5:8f:45:03:e6:b1:99:95:cd:50:
                    9c:e8:17:da:5b:a4:42:2d:11:97:91:3f:ef:4e:6f:
                    b6:30:c4:ca:91:e1:64:c8:c7:5f:ae:e3:8a:ba:ea:
                    53:69:ab:7c:15:26:15:0e:fe:2e:6f:85:6b:7c:31:
                    3b:b9:0a:85:63:14:04:f0:38:54:80:8d:97:ec:b2:
                    93:42:98:6a:9c:8e:7d:c1:7a:9d:14:34:33:5a:5f:
                    e5:fe:ce:7d:69:2e:1b:8d:5d:f5:ef:98:aa:e6:d6:
                    c2:05:ee:53:83:d2:f5:43:f0:6d:97:42:d0:d3:0f:
                    3e:c9:59:87:eb:9c:d3:e1:da:92:1f:a4:42:6e:e9:
                    72:4b:f2:34:74:1c:59:15:c2:ad:d9:6b:43:88:e8:
                    89:af:e5:19:7b:8b:6d:92:2c:84:5c:85:b5:84:a8:
                    99:d0:cb:6e:24:bd:0c:06:9f:09:87:fe:34:eb:b0:
                    89:3c:e4:d6:9d:0a:6f:48:de:02:17:f6:d1:32:00:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:FA:F6:B3:B0:79:47:96:DD:0A:F3:9A:66:12:0B:35:4F:D6:E0
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:8011::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:42:75:a9:05:9d:77:43:64:48:be:40:4a:b9:06:d7:2b:
         b5:71:5b:05:f7:32:d6:2b:b6:da:4f:37:a9:12:84:35:bb:ff:
         60:cb:d3:74:21:5b:3f:e7:82:8a:10:d7:72:21:91:d7:90:a9:
         83:b3:de:c5:6d:74:d4:60:0f:ed:7d:dd:65:4e:db:35:ed:ef:
         d9:ed:8a:55:d3:99:27:ff:52:14:d0:ea:53:0b:3a:b3:ce:9a:
         ac:f4:4f:e0:c1:07:2f:a0:aa:88:cc:32:49:e5:8a:5c:45:25:
         51:c7:93:32:b9:d6:fa:ed:ae:24:b5:d4:d0:1c:06:14:4b:e8:
         99:6d:98:86:da:6c:46:f9:20:c8:af:e1:1b:6d:c7:ef:ef:e4:
         75:e1:45:de:a3:10:2d:0f:6c:17:6f:0d:b3:2a:33:12:c9:80:
         e7:b9:98:e4:60:8f:89:e8:f9:9d:51:ce:34:3d:2c:c1:76:88:
         58:5a:1a:5a:3d:f6:29:0f:57:94:82:6d:ec:35:d4:92:27:09:
         a5:c8:bf:1b:a9:29:20:f1:7f:c7:4f:ce:63:db:20:a6:ee:b3:
         81:fb:0f:ae:4e:de:ec:61:c1:42:0e:6a:5f:56:11:dd:d3:b0:
         76:3d:ab:49:3b:0a:62:d8:3b:ae:4d:9e:72:a2:eb:fa:5f:eb:
         6d:23:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org