Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213007.roa
File:                     AS213007.roa (raw, json)
Hash identifier:          djzCFE+BDgI525iC01CjQ7kXHzttvMvAoHvFms+IfO0=
Subject key identifier:   5E:8D:C9:E3:65:E2:57:EC:C3:3A:0E:8E:E0:3C:BB:D6:43:94:F4:83
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       769BFC63D3C1DDB170FB0AFB148079B22B7DEB36
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213007.roa
Signing time:             Tue 15 Aug 2023 02:00:27 +0000
ROA not before:           Tue 15 Aug 2023 01:55:27 +0000
ROA not after:            Tue 13 Aug 2024 02:00:27 +0000
asID:                     213007
IP address blocks:        2a0f:9400:8003::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 28 Sep 2023 22:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9b:fc:63:d3:c1:dd:b1:70:fb:0a:fb:14:80:79:b2:2b:7d:eb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Aug 15 01:55:27 2023 GMT
            Not After : Aug 13 02:00:27 2024 GMT
        Subject: CN=5E8DC9E365E257ECC33A0E8EE03CBBD64394F483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:53:88:72:0c:44:05:9b:aa:f3:eb:d9:c5:
                    55:0e:f2:46:4c:53:60:f4:09:01:44:eb:da:15:df:
                    9e:f0:8d:0a:68:d5:04:eb:73:35:f2:02:d5:44:8d:
                    84:68:cd:48:fe:f2:23:e1:84:bc:d6:33:56:89:ca:
                    eb:21:d5:13:d9:25:17:dd:20:7c:1c:c9:e3:e3:74:
                    1e:0e:af:c7:68:24:4c:2c:c2:36:bc:c8:c9:e9:57:
                    5d:a4:52:cd:cf:73:b1:bc:c3:c6:5d:41:3a:11:72:
                    f8:b0:87:90:6d:81:4d:a6:50:47:6d:56:13:4f:75:
                    47:13:13:1d:28:aa:e5:37:63:4a:4d:a6:8f:b1:af:
                    38:aa:bd:44:13:93:af:20:30:f7:e9:e9:36:d2:47:
                    60:3e:10:ab:ae:86:e3:e2:47:a8:c5:d4:e2:d9:4c:
                    6b:b2:69:75:94:1c:c0:98:3c:1f:55:26:80:37:6e:
                    da:fe:b9:77:38:8b:93:84:f6:03:0a:1b:b8:97:b1:
                    80:3e:4c:4c:55:1f:2a:d8:66:72:43:e2:5a:24:99:
                    80:b1:b7:0e:f9:a0:d9:29:12:54:b3:33:b5:2e:b2:
                    04:e7:63:7a:b2:72:3d:b2:0c:00:62:5e:9a:f5:4a:
                    e5:d5:a1:87:72:47:ee:75:43:bf:b3:3e:7d:72:01:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8D:C9:E3:65:E2:57:EC:C3:3A:0E:8E:E0:3C:BB:D6:43:94:F4:83
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213007.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:91:e2:68:26:6e:3a:d8:f2:7a:08:95:88:45:2d:99:63:68:
         09:19:03:3b:fd:a7:45:af:f8:77:a2:60:d5:84:21:92:b8:ac:
         ec:95:ec:c2:65:0f:2e:bc:26:c2:4a:d7:84:70:b9:a4:e2:76:
         ef:3a:62:e4:59:35:69:5f:70:24:7d:0e:84:c5:67:30:bc:1b:
         70:5b:f6:d3:fb:0a:e4:b5:d6:86:20:d4:5d:ae:5d:d6:c9:82:
         fd:c9:24:8b:82:0b:d7:26:89:cd:de:91:2a:52:fa:02:c0:f0:
         d2:1f:09:51:b3:db:df:b8:1c:09:d5:ed:00:68:b9:89:c4:fc:
         98:00:a2:19:bf:ee:b5:d0:fe:4b:00:bc:22:bd:6b:58:ba:d7:
         1a:1a:dc:90:c6:3a:d2:1a:3c:1e:42:42:99:cb:2b:b2:09:d9:
         d3:f4:6d:41:a9:26:72:da:78:f0:8e:56:e5:cb:d6:1e:c7:30:
         01:a8:bd:3e:d4:3d:87:5e:90:5f:7d:d2:aa:7c:e6:c5:6f:22:
         2e:73:0a:15:f2:73:f8:9b:d5:eb:da:b9:3c:65:dd:e3:07:a4:
         58:31:d8:8c:63:89:6e:30:a7:c8:27:58:d6:a4:b7:8d:8b:80:
         30:41:b7:98:7a:21:6a:f0:02:33:3b:85:64:fe:ad:f5:ed:a2:
         5c:cb:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org