Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212618.roa
File:                     AS212618.roa (raw, json)
Hash identifier:          uO6VKH2RGIRyntoIh6MSyWNDu3mSqkYd/eLARTet2V8=
Subject key identifier:   B3:CD:76:87:A0:B5:B5:04:4B:52:DF:39:6B:3F:3A:10:1B:73:03:08
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       32611CC5CBCF34A7AD4DC89F44A6EB222D348816
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212618.roa
Signing time:             Mon 11 Sep 2023 20:18:00 +0000
ROA not before:           Mon 11 Sep 2023 20:13:00 +0000
ROA not after:            Mon 09 Sep 2024 20:18:00 +0000
asID:                     212618
IP address blocks:        2602:fed2:719e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 05:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:61:1c:c5:cb:cf:34:a7:ad:4d:c8:9f:44:a6:eb:22:2d:34:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Sep 11 20:13:00 2023 GMT
            Not After : Sep  9 20:18:00 2024 GMT
        Subject: CN=B3CD7687A0B5B5044B52DF396B3F3A101B730308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:37:ed:75:c8:d7:f9:09:8d:2d:b0:e6:03:
                    26:37:aa:f6:0f:b6:ca:8d:45:4d:f5:fc:43:d6:04:
                    16:56:27:36:0f:96:9e:f8:74:d2:ce:58:cc:6d:fc:
                    d0:44:42:ef:39:3b:97:96:5a:0b:b2:5b:4f:3e:e7:
                    66:91:ba:14:27:da:83:d9:dd:bb:68:ba:0f:36:39:
                    d9:73:cf:d0:22:f4:49:92:df:51:81:10:75:e1:97:
                    c2:be:22:d2:0a:6d:b2:cc:fd:b6:d9:95:a8:5f:b1:
                    58:e2:ba:df:c6:f8:46:16:fc:af:dd:74:6d:b5:c2:
                    f4:b1:67:00:da:ef:ff:8f:a5:31:6e:a8:e7:e4:04:
                    44:e1:e5:04:b8:a5:51:b7:5e:15:bc:df:d4:69:3a:
                    21:07:9a:05:58:bd:6a:7c:03:10:62:d1:42:9f:93:
                    78:7d:c3:3d:8b:fe:36:73:ea:c2:81:91:cc:cf:41:
                    2f:10:f6:f1:f5:08:d0:ee:c1:a4:e6:5d:9e:49:74:
                    0e:61:47:50:c1:a3:0e:b1:f1:7a:a0:5e:48:32:01:
                    4a:e2:90:61:fe:1b:10:44:80:32:95:0a:7f:8b:bf:
                    56:57:56:72:73:17:65:4b:ad:dc:71:f7:3d:52:1a:
                    7b:1b:b5:3d:93:e5:93:30:bd:33:b4:7c:86:60:98:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CD:76:87:A0:B5:B5:04:4B:52:DF:39:6B:3F:3A:10:1B:73:03:08
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS212618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:719e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:32:1b:35:d0:71:08:37:cf:bc:d9:4a:98:2b:75:1b:53:
         a9:ed:2a:00:35:60:f4:ad:33:99:fe:28:7c:a7:c7:65:ca:d0:
         c8:d1:9e:c0:31:f8:7e:df:3c:da:76:b7:75:d9:36:6e:2b:c1:
         e0:00:ca:4b:d7:c1:b0:4d:7c:0c:94:d2:0c:10:b2:57:a4:3a:
         98:b0:f2:8b:f1:0d:d4:4b:1b:e0:e7:39:79:02:36:95:85:2f:
         de:7f:b1:51:bf:16:0d:3a:f6:b7:05:e4:cb:13:03:93:dd:7f:
         7a:5e:bc:b6:24:d5:69:69:11:61:e1:cf:73:3f:59:e5:83:23:
         b9:08:82:7f:0a:ec:82:41:b7:b2:65:af:4f:f7:f5:23:b4:11:
         dd:5b:d5:c4:c4:6a:3d:d7:be:6f:28:46:bb:e1:c5:ac:fd:61:
         8d:2a:d3:d7:48:16:fe:e5:42:fb:c1:40:42:63:c4:76:24:62:
         fe:24:02:46:92:a6:6b:b0:80:d3:ba:94:c8:f8:12:7c:91:fa:
         f4:e5:18:27:bf:42:6a:f2:ca:7a:ae:13:77:0c:ea:d3:2e:02:
         07:10:6e:50:02:b3:a1:42:04:c1:40:27:89:7b:bb:b2:83:89:
         7e:9e:0a:bd:e8:7a:6b:ad:ee:d5:b1:a6:a8:8e:6b:d3:95:5f:
         e4:92:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org