Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa
File:                     AS31786.roa (raw, json)
Hash identifier:          9OewbrKIW6w0dfYQMHaXexHCNt02kvlSJ+mUyWpzO4w=
Subject key identifier:   C5:70:37:57:F9:4A:00:05:94:29:39:FF:03:93:F0:05:8D:6F:3C:AE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       73A22C1C85CECDA50117E5D2D9E7A49504F4D09C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa
Signing time:             Tue 16 Jul 2024 02:42:27 +0000
ROA not before:           Tue 16 Jul 2024 02:37:27 +0000
ROA not after:            Tue 15 Jul 2025 02:42:27 +0000
asID:                     31786
IP address blocks:        2602:fed2:7130::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 13:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a2:2c:1c:85:ce:cd:a5:01:17:e5:d2:d9:e7:a4:95:04:f4:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jul 16 02:37:27 2024 GMT
            Not After : Jul 15 02:42:27 2025 GMT
        Subject: CN=C5703757F94A0005942939FF0393F0058D6F3CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:2d:46:57:5b:7d:c7:ed:67:8e:ed:97:39:
                    f1:bf:ea:0d:de:49:0e:af:85:ca:8b:6c:0a:a3:34:
                    ab:2e:9f:a8:86:fc:fa:ca:2b:67:ed:89:f8:fb:47:
                    24:85:25:71:f4:50:cd:87:e0:97:70:2b:ad:29:ec:
                    88:77:2e:86:bc:10:f8:65:b6:32:d9:33:0a:b2:a9:
                    70:bb:c0:98:59:43:55:c7:b9:3a:e2:a1:8e:d0:73:
                    c8:b4:6f:38:0b:e3:a0:07:17:16:3c:ea:84:34:14:
                    ff:8c:7d:4f:06:94:82:f0:fc:03:15:9c:2f:ff:a9:
                    ca:1c:50:b5:5b:9d:32:b7:17:72:39:5e:9f:00:ae:
                    33:c6:31:4a:56:ae:b5:73:ae:21:bd:7b:43:88:a1:
                    1a:f1:41:3d:28:5b:1b:17:34:c2:fa:18:21:1d:f6:
                    56:ca:e5:3b:0b:f9:c6:f8:56:56:10:ad:98:bf:79:
                    01:1e:49:c8:fc:b2:dc:d9:2c:70:1f:d0:52:0f:da:
                    d9:d7:aa:46:fe:e8:f5:36:25:f3:4f:9b:ec:62:d2:
                    c8:67:56:24:00:91:bb:05:49:a0:b9:ee:73:75:0a:
                    00:d8:6e:d6:79:ab:0d:47:39:0a:7d:da:60:ec:3f:
                    9a:0b:54:44:9a:b3:96:d6:c2:66:5d:da:c9:2e:0a:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:37:57:F9:4A:00:05:94:29:39:FF:03:93:F0:05:8D:6F:3C:AE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS31786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7130::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:9b:f6:76:38:89:bd:f0:48:b9:67:77:76:50:d9:b6:cd:
         73:ce:b9:e3:eb:a2:d6:d5:70:70:f6:88:77:54:a7:d7:98:38:
         e9:9d:2c:fe:72:81:b6:dd:67:4e:30:b6:1d:47:46:53:63:7f:
         eb:00:3a:6a:f2:4b:b0:72:20:bf:78:6a:6f:0e:45:fc:85:4a:
         34:58:a5:ec:9b:ca:65:95:97:60:82:38:1a:ac:99:8f:a6:ca:
         96:85:d7:3c:5a:1d:1a:50:3e:70:85:98:89:99:ee:1a:e4:23:
         60:72:87:20:9d:08:6e:c7:f6:e1:2b:b0:8a:01:d6:f0:72:00:
         02:aa:cb:9f:10:a4:f7:ad:a4:96:1f:9b:c7:04:fe:99:f2:15:
         e2:62:44:75:d9:4e:48:c2:87:ba:fa:a2:c5:c6:1f:2f:d6:0d:
         80:9a:2f:5f:02:2a:3f:e4:7c:6e:04:2f:56:39:2b:45:50:2c:
         c3:57:f2:b5:3f:5d:c8:02:a9:6a:4c:9f:69:d1:7f:f7:e2:ea:
         8b:17:80:14:67:13:8e:0e:16:37:13:a6:ac:3e:bb:4c:2a:46:
         83:14:a3:38:a7:f3:0e:5e:b6:ff:03:66:fc:73:97:e1:23:3c:
         51:a3:33:f5:b0:5f:ff:1e:34:c3:a2:b3:ad:d2:d3:4f:9d:24:
         c9:9b:89:ae
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUc6IsHIXOzaUBF+XS2eeklQT00JwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjQwNzE2MDIzNzI3WhcNMjUwNzE1MDI0MjI3
WjAzMTEwLwYDVQQDEyhDNTcwMzc1N0Y5NEEwMDA1OTQyOTM5RkYwMzkzRjAwNThE
NkYzQ0FFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1otRldbfcft
Z47tlznxv+oN3kkOr4XKi2wKozSrLp+ohvz6yitn7Yn4+0ckhSVx9FDNh+CXcCut
KeyIdy6GvBD4ZbYy2TMKsqlwu8CYWUNVx7k64qGO0HPItG84C+OgBxcWPOqENBT/
jH1PBpSC8PwDFZwv/6nKHFC1W50ytxdyOV6fAK4zxjFKVq61c64hvXtDiKEa8UE9
KFsbFzTC+hghHfZWyuU7C/nG+FZWEK2Yv3kBHknI/LLc2SxwH9BSD9rZ16pG/uj1
NiXzT5vsYtLIZ1YkAJG7BUmgue5zdQoA2G7WeasNRzkKfdpg7D+aC1REmrOW1sJm
XdrJLgqRwwIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFMVwN1f5SgAFlCk5/wOT8AWN
bzyuMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMzMTc4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/tJxMDANBgkqhkiG
9w0BAQsFAAOCAQEAHWab9nY4ib3wSLlnd3ZQ2bbNc8654+ui1tVwcPaId1Sn15g4
6Z0s/nKBtt1nTjC2HUdGU2N/6wA6avJLsHIgv3hqbw5F/IVKNFil7JvKZZWXYII4
GqyZj6bKloXXPFodGlA+cIWYiZnuGuQjYHKHIJ0Ibsf24SuwigHW8HIAAqrLnxCk
962klh+bxwT+mfIV4mJEddlOSMKHuvqixcYfL9YNgJovXwIqP+R8bgQvVjkrRVAs
w1fytT9dyAKpakyfadF/9+LqixeAFGcTjg4WNxOmrD67TCpGgxSjOKfzDl62/wNm
/HOX4SM8UaMz9bBf/x40w6KzrdLTT50kyZuJrg==
-----END CERTIFICATE-----
Generated at Thu Aug 8 14:53:11 2024 by rpki-client on console-fra.rpki-client.org