Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212349.roa
File:                     AS212349.roa (raw, json)
Hash identifier:          4sbQZ+Ub56K4vlaMpEYUNUlXYU3mpUCqGgIEU6nmw5I=
Subject key identifier:   43:BD:AD:CA:14:97:E4:79:6B:4D:CB:0C:1F:8E:91:2C:7A:FC:10:C0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7D12E640C874E32D2E5C3C6BF93919997FE39694
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212349.roa
Signing time:             Sun 09 Jun 2024 04:12:00 +0000
ROA not before:           Sun 09 Jun 2024 04:07:00 +0000
ROA not after:            Sun 08 Jun 2025 04:12:00 +0000
asID:                     212349
IP address blocks:        2602:fed2:7043::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 06:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:e6:40:c8:74:e3:2d:2e:5c:3c:6b:f9:39:19:99:7f:e3:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jun  9 04:07:00 2024 GMT
            Not After : Jun  8 04:12:00 2025 GMT
        Subject: CN=43BDADCA1497E4796B4DCB0C1F8E912C7AFC10C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:a5:d9:6d:88:5f:f6:ba:14:ae:a5:45:ea:
                    97:a1:d7:ee:5a:98:96:29:67:ff:ab:94:99:2d:40:
                    90:a0:96:79:4e:96:d5:e8:2e:9b:de:b1:3c:16:73:
                    10:ea:0e:1b:73:a1:23:b1:a8:c6:48:02:82:29:60:
                    8d:39:6f:c3:34:bd:fc:33:0b:24:3b:c0:83:99:93:
                    c1:00:8f:ab:8c:0a:39:b5:41:67:3d:26:3f:92:f3:
                    3d:75:57:64:4d:0c:2a:f4:5d:fd:b1:53:93:5d:ec:
                    59:08:43:11:3c:5c:9c:31:38:25:52:09:69:81:ca:
                    8d:0c:b9:29:4e:44:0b:06:f9:39:8e:40:82:34:05:
                    8e:38:0a:30:42:da:0c:db:37:cf:85:37:0c:bb:73:
                    f6:24:02:c9:ff:40:28:49:19:cd:7e:d0:a5:20:79:
                    d2:11:f6:ba:ed:b4:05:6c:dd:8f:83:6e:bd:81:a2:
                    fd:07:ec:94:74:16:b6:ea:88:05:07:ee:6d:8f:53:
                    6a:62:c5:64:cb:67:6b:5a:ba:9b:a6:05:bb:14:7e:
                    c6:c1:3b:e5:4e:b0:fd:a6:59:95:d1:9d:1e:cc:05:
                    6c:21:d5:5a:c2:49:2e:3d:25:6b:ae:2a:23:36:f5:
                    e4:e0:dd:f6:77:f9:00:52:30:e4:8d:b9:1a:fc:6b:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:AD:CA:14:97:E4:79:6B:4D:CB:0C:1F:8E:91:2C:7A:FC:10:C0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7043::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:52:bf:85:8b:63:12:a0:4a:d5:a9:e8:41:03:e4:4e:fd:
         68:ba:f5:ff:f8:c8:06:e0:0d:c7:15:56:bd:ce:6e:75:13:7b:
         fa:c1:d3:59:ee:1d:8c:48:3c:57:66:c8:bb:0f:c4:75:89:3e:
         04:59:a3:b5:43:93:ce:47:93:d8:6f:02:fe:0c:d5:cd:63:a0:
         7c:d9:38:f5:42:5e:ea:bc:21:90:b6:8c:68:f8:6d:3e:c0:c6:
         d3:a0:cb:bd:61:90:38:6b:f8:aa:86:4c:8e:d4:a6:9e:78:17:
         1c:4a:10:a9:68:b1:a2:ee:64:82:56:fc:0b:62:7e:c7:c2:f0:
         ae:65:86:99:88:0d:0d:d6:94:ff:6d:1f:66:79:41:0a:66:9d:
         77:12:ed:b9:0c:d0:b9:74:a9:1f:d6:d1:8d:e1:15:31:e1:2c:
         71:0f:47:25:f0:03:44:bd:d6:6d:22:e2:f9:2e:20:a5:4f:e0:
         31:e8:32:d3:0e:ee:97:ed:35:5f:ce:2d:50:b5:6e:da:fe:49:
         e5:3b:f4:3f:44:9c:f9:37:b5:59:1b:60:66:8a:ac:c4:59:e2:
         44:ec:12:86:fc:31:3b:c5:95:28:70:40:f2:9c:04:22:29:e7:
         eb:5b:ea:a9:12:20:0e:3e:1b:fe:33:24:6d:62:04:4f:f6:7d:
         b4:f1:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 08:01:10 2024 by rpki-client on console-fra.rpki-client.org