Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa
File:                     AS28045.roa (raw, json)
Hash identifier:          juNT5vzeeOlD7njO3MMSq2xqlUqowmQJPfBwNAkgC3I=
Subject key identifier:   30:99:B7:B0:00:79:80:88:10:1B:96:34:09:7A:CB:9D:F4:9E:C1:FF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2C473D58211FDCCF9781F417C30E9B7C7A19E76F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa
Signing time:             Tue 16 Jul 2024 02:42:26 +0000
ROA not before:           Tue 16 Jul 2024 02:37:26 +0000
ROA not after:            Tue 15 Jul 2025 02:42:26 +0000
asID:                     28045
IP address blocks:        2602:fed2:7198::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 11:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:3d:58:21:1f:dc:cf:97:81:f4:17:c3:0e:9b:7c:7a:19:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:26 2024 GMT
            Not After : Jul 15 02:42:26 2025 GMT
        Subject: CN=3099B7B000798088101B9634097ACB9DF49EC1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:57:6d:21:38:9b:76:25:4e:69:c1:cd:35:
                    7a:8c:43:fc:cd:97:9d:2b:5d:d2:a0:ee:35:a8:d3:
                    31:33:88:3d:cb:17:e1:d8:a4:cd:a1:79:62:23:a1:
                    0a:4a:02:59:66:e4:a9:4f:52:ba:92:c5:38:99:27:
                    c6:58:3d:ba:bc:05:7d:f0:db:11:93:b1:e1:2c:78:
                    c8:7b:93:70:e4:73:9e:df:a3:e0:69:5a:b1:5c:1c:
                    59:c6:32:a4:52:d3:30:7c:de:b7:56:ae:a5:35:8e:
                    51:31:94:63:14:79:74:dc:13:d2:56:57:5b:81:cb:
                    53:74:30:2d:a7:b4:5c:ae:92:da:bc:e5:2d:e6:ee:
                    56:c5:45:31:71:18:cf:a4:ce:24:8d:c5:97:67:d8:
                    a0:2c:1a:a0:4c:48:f6:82:b4:aa:ee:7c:a6:d9:55:
                    e0:ec:14:4c:f3:57:8b:4f:a3:6e:f7:df:01:2d:f8:
                    1a:ff:68:21:93:e5:c4:ec:b9:59:b0:58:e7:a9:f5:
                    4e:d0:af:ed:74:57:29:20:8f:ca:23:2e:c3:13:f2:
                    b5:2b:f2:db:6a:89:7a:e0:55:ee:7f:87:bd:40:e2:
                    49:b2:4e:28:1a:b7:a8:f2:a1:79:32:15:a6:a0:f5:
                    ed:e9:e3:9a:b4:32:17:bf:0d:09:ab:99:46:d3:15:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:B7:B0:00:79:80:88:10:1B:96:34:09:7A:CB:9D:F4:9E:C1:FF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS28045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7198::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:3f:76:a7:a7:c3:f7:84:98:9e:16:15:8b:04:41:14:01:
         65:5c:6e:bf:0f:92:d7:8b:a0:dd:01:c1:6e:51:ed:2f:41:cd:
         ac:63:b2:53:d2:2c:0f:e5:ed:0e:82:45:4c:1d:94:59:d3:3f:
         a3:38:ba:a0:a6:1b:07:9d:e9:2c:e0:58:9a:70:f6:15:a5:28:
         ab:56:0e:c4:46:2f:6a:c7:21:f4:98:6c:27:7d:32:b7:35:ee:
         82:25:d8:0a:3d:e2:7c:bc:b0:a2:7b:25:c9:7b:6b:64:ad:ca:
         bb:e3:21:30:8e:ec:d5:4d:01:ec:95:39:48:18:a1:81:43:ce:
         90:51:c5:3f:1d:07:95:96:1d:3a:be:cd:b5:1f:86:cd:6c:30:
         56:76:ea:51:0c:ff:ea:15:9c:66:ee:87:5e:98:cd:44:1b:53:
         b7:98:82:79:8c:c2:ab:ed:95:59:fb:dc:29:e3:9c:22:25:64:
         04:40:77:bb:1e:51:b2:1c:cf:44:1b:46:e3:00:83:71:b7:ca:
         bf:13:36:4d:70:43:dc:a2:5d:7e:80:7b:35:ec:45:3e:72:f3:
         83:6d:2d:d2:88:30:3b:c2:04:23:30:6a:e9:7f:ef:de:4d:8b:
         58:6e:7f:dd:c4:1a:81:cc:cc:44:c6:d6:04:1d:38:68:1b:1b:
         ab:b1:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org