Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215617.roa
File:                     AS215617.roa (raw, json)
Hash identifier:          di6GHrND1lBdm0iCs8g5m+sItrGTLsdg7U5T2s+VWP8=
Subject key identifier:   C6:FD:D9:10:9F:EC:0E:7C:56:B9:8F:10:F3:1C:96:28:A8:09:5A:64
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       42B73D4F7902D39EA4736E1801DE16AE9CEE49ED
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215617.roa
Signing time:             Wed 31 Jan 2024 14:30:01 +0000
ROA not before:           Wed 31 Jan 2024 14:25:01 +0000
ROA not after:            Wed 29 Jan 2025 14:30:01 +0000
asID:                     215617
IP address blocks:        2a0f:9400:6115::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 03:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b7:3d:4f:79:02:d3:9e:a4:73:6e:18:01:de:16:ae:9c:ee:49:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Jan 31 14:25:01 2024 GMT
            Not After : Jan 29 14:30:01 2025 GMT
        Subject: CN=C6FDD9109FEC0E7C56B98F10F31C9628A8095A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:e7:66:1a:49:e7:ff:15:3a:b2:42:4c:dc:
                    a6:82:62:f0:21:91:b7:a1:9f:db:9d:c1:7e:1b:cc:
                    b2:5f:b9:13:3b:86:48:3b:1a:f9:bc:ec:9b:b8:d5:
                    1b:74:bd:5e:56:6f:ce:d9:bf:ce:ac:bb:88:4b:05:
                    1a:69:11:c6:03:17:a1:91:91:cc:73:bd:3d:94:fb:
                    ff:9c:ee:ec:35:8d:b8:a3:3e:68:2c:fb:55:a3:f1:
                    cb:d6:00:b1:04:e5:b9:5a:42:72:96:5d:d1:d7:39:
                    e3:a0:98:20:eb:44:9f:e2:8c:39:f9:22:bb:95:14:
                    42:b4:6f:d5:e8:66:18:e1:39:0a:b9:38:cb:e7:74:
                    08:8d:bf:a1:5a:46:a7:45:d7:76:a2:0a:72:3a:be:
                    36:11:f3:6c:d1:5b:00:b3:9a:f1:24:5d:18:2d:d7:
                    d7:59:d6:05:ac:f2:d2:79:0d:7e:07:ff:0a:f0:78:
                    dc:14:e8:96:38:d3:2d:bc:ca:64:88:e6:5c:bd:a5:
                    ee:cb:cc:82:58:6e:bf:f8:9b:71:61:84:b3:05:a8:
                    65:c8:55:1d:9f:3f:49:5b:52:f1:f3:63:cc:1a:4c:
                    17:1f:b7:9e:58:25:fd:8b:1f:5a:d7:f7:d0:54:a8:
                    96:ac:cc:77:8c:cd:12:07:9c:0b:d8:fe:0a:90:94:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:D9:10:9F:EC:0E:7C:56:B9:8F:10:F3:1C:96:28:A8:09:5A:64
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215617.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6115::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:7b:41:1b:1f:29:a3:e6:47:94:bf:ea:9f:0f:45:d8:48:
         77:ef:90:52:72:bd:63:86:13:b4:23:de:93:37:a6:a5:90:a3:
         a7:b4:31:6f:ec:82:29:49:2c:ce:7b:8d:25:ec:5f:ea:0f:2f:
         2f:07:2f:3b:14:66:21:59:61:65:e2:38:74:ac:5d:74:ff:49:
         ae:de:4d:97:31:5e:5b:f0:c8:d9:74:4c:02:31:49:cb:00:ef:
         3f:62:05:fc:5d:05:7c:f2:fe:47:1a:7d:87:ba:77:65:e7:a0:
         3a:e9:74:6a:cd:0a:b2:cd:6d:3c:fb:3a:cb:72:2a:e8:d6:61:
         9c:8a:91:d7:2e:61:4e:1c:71:f4:1c:b8:a6:59:aa:3b:48:10:
         b4:f6:b1:91:c8:75:ab:8e:f2:0e:3a:0a:e6:2e:79:cd:68:f6:
         68:81:1b:ca:c6:b2:53:62:6a:79:2f:63:11:92:e2:e2:0b:bd:
         a4:44:7f:b4:09:a8:a0:bd:e8:df:db:a5:32:71:85:69:c9:a3:
         8a:f2:82:0d:0d:2d:47:7e:b9:45:1e:66:c4:67:05:43:13:44:
         e0:be:6c:4a:9d:93:11:eb:28:2d:ef:f4:42:02:36:5d:43:57:
         44:27:2e:85:ba:c7:dc:b8:69:8f:d4:ad:e0:f0:a0:15:0a:1b:
         75:ea:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org