Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa
File:                     AS139677.roa (raw, json)
Hash identifier:          ffsi5KHLNbvnHOOeTl9HOATvS7WQ5CLOfaQUVL8FKS0=
Subject key identifier:   18:7A:7D:D5:C9:0B:FE:AA:74:CF:D8:44:A5:A2:E9:5F:7F:AC:D0:EC
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4EB519EB112F05E74B0AD150905FBB5F6BEF0E6E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     139677
IP address blocks:        2602:fed2:7110::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 18:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b5:19:eb:11:2f:05:e7:4b:0a:d1:50:90:5f:bb:5f:6b:ef:0e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=187A7DD5C90BFEAA74CFD844A5A2E95F7FACD0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:cb:16:66:74:cc:ff:28:31:fc:c8:98:dc:
                    1f:86:c2:0e:fe:7e:1b:bf:39:05:ef:5d:ff:6e:ad:
                    97:9b:d3:8a:30:ab:7c:e9:55:05:98:d7:89:80:6d:
                    71:fe:ae:fc:94:6c:0d:87:c0:70:e8:c6:56:04:77:
                    19:18:d9:bb:58:48:25:be:c7:42:fb:f4:38:d5:73:
                    87:e1:a6:ee:8d:1f:1d:60:80:a3:45:19:c8:e7:98:
                    f6:3b:ce:1a:cf:40:bb:19:24:60:3c:7f:71:d9:bc:
                    e2:20:98:91:34:20:6f:a6:ee:a0:99:69:22:93:72:
                    5b:c1:f1:bc:1d:ed:e4:c8:fe:94:2e:25:a7:4f:c5:
                    2a:4a:9d:8b:7c:d9:1c:30:f9:de:c8:b2:66:d5:23:
                    a2:e2:5b:5d:81:be:aa:31:56:a4:f5:54:01:51:c1:
                    fd:c1:41:31:61:75:cb:ad:ba:49:85:23:94:23:54:
                    bc:3b:b2:45:21:00:e6:51:b2:5b:5e:0c:87:ef:5e:
                    65:59:73:c4:ee:ef:8e:e4:83:3a:f4:fa:5c:4f:91:
                    75:6a:58:6f:e5:70:42:73:c7:32:a9:0b:63:6c:ad:
                    2f:f9:d8:2c:43:e0:fd:7d:ea:a3:f1:da:4f:fa:9d:
                    ab:f9:51:2d:ca:6c:95:34:29:9a:79:04:69:8e:79:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:7D:D5:C9:0B:FE:AA:74:CF:D8:44:A5:A2:E9:5F:7F:AC:D0:EC
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7110::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:f2:fd:2c:03:59:06:62:8e:a9:1a:3e:26:8f:7a:1f:35:
         5d:c7:eb:81:b2:8f:7f:27:0f:94:9c:82:81:89:9a:09:ed:b6:
         0f:ff:16:51:35:64:64:d6:3d:c4:df:72:38:83:08:ed:47:56:
         39:36:e2:b3:c6:76:63:e7:b5:36:36:b7:1e:56:c3:ac:2d:7a:
         a1:98:32:d6:4a:9a:8d:b0:8b:8d:ce:44:ad:1c:a6:35:7f:4f:
         26:8e:59:47:bf:e5:fc:37:a2:f3:7b:c6:58:f4:9e:11:84:74:
         b9:ae:88:db:fa:42:55:d7:d4:95:66:9d:02:5b:9c:23:1a:1a:
         72:73:c0:38:4f:fb:a4:e8:7d:44:5d:4e:b5:45:0f:04:e0:c1:
         36:0c:80:78:01:73:bd:47:84:78:9a:1f:a7:6e:00:3e:dc:b6:
         15:36:79:84:98:09:94:7a:59:67:4e:18:92:8f:a5:91:bb:05:
         eb:e5:94:0b:05:2b:5e:d9:49:da:a8:71:63:92:20:fd:4d:d1:
         7d:94:0f:1f:51:52:a6:a9:03:6d:40:c1:08:fa:1f:3c:7a:9d:
         52:50:a2:57:d3:4a:27:e7:e9:6f:9e:b7:f3:6e:e3:bd:cc:c2:
         b9:57:68:cf:48:0e:e9:58:ae:ee:b2:bc:e1:5f:48:31:bc:9e:
         81:6c:0a:44
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUTrUZ6xEvBedLCtFQkF+7X2vvDm4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI3WhcNMjUwNzE1MDI0MjI3
WjAzMTEwLwYDVQQDEygxODdBN0RENUM5MEJGRUFBNzRDRkQ4NDRBNUEyRTk1RjdG
QUNEMEVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7rLFmZ0zP8o
MfzImNwfhsIO/n4bvzkF713/bq2Xm9OKMKt86VUFmNeJgG1x/q78lGwNh8Bw6MZW
BHcZGNm7WEglvsdC+/Q41XOH4abujR8dYICjRRnI55j2O84az0C7GSRgPH9x2bzi
IJiRNCBvpu6gmWkik3JbwfG8He3kyP6ULiWnT8UqSp2LfNkcMPneyLJm1SOi4ltd
gb6qMVak9VQBUcH9wUExYXXLrbpJhSOUI1S8O7JFIQDmUbJbXgyH715lWXPE7u+O
5IM69PpcT5F1alhv5XBCc8cyqQtjbK0v+dgsQ+D9feqj8dpP+p2r+VEtymyVNCma
eQRpjnlpKQIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFBh6fdXJC/6qdM/YRKWi6V9/
rNDsMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMxMzk2Nzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScRAwDQYJKoZI
hvcNAQELBQADggEBAHan8v0sA1kGYo6pGj4mj3ofNV3H64Gyj38nD5ScgoGJmgnt
tg//FlE1ZGTWPcTfcjiDCO1HVjk24rPGdmPntTY2tx5Ww6wteqGYMtZKmo2wi43O
RK0cpjV/TyaOWUe/5fw3ovN7xlj0nhGEdLmuiNv6QlXX1JVmnQJbnCMaGnJzwDhP
+6TofURdTrVFDwTgwTYMgHgBc71HhHiaH6duAD7cthU2eYSYCZR6WWdOGJKPpZG7
BevllAsFK17ZSdqocWOSIP1N0X2UDx9RUqapA21AwQj6Hzx6nVJQolfTSifn6W+e
t/Nu473MwrlXaM9IDulYru6yvOFfSDG8noFsCkQ=
-----END CERTIFICATE-----
Generated at Wed Sep 4 19:21:40 2024 by rpki-client on console-fra.rpki-client.org