Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e203230343733.roa
File:                     323630323a666531333a3261613a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          tNkMPgD54OMeVvjlQc85bnM2+dHqGERuSN3m004N1ww=
Subject key identifier:   F5:BE:7A:44:20:D1:56:6D:01:D9:70:F7:18:E9:B7:41:7F:D7:EA:90
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       50EDB1F5900825C70869DF8D5C7A61D0618DF3CF
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e203230343733.roa
Signing time:             Sun 18 Feb 2024 05:08:25 +0000
ROA not before:           Sun 18 Feb 2024 05:03:25 +0000
ROA not after:            Sun 16 Feb 2025 05:08:25 +0000
asID:                     20473
IP address blocks:        2602:fe13:2aa::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 03:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ed:b1:f5:90:08:25:c7:08:69:df:8d:5c:7a:61:d0:61:8d:f3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Feb 18 05:03:25 2024 GMT
            Not After : Feb 16 05:08:25 2025 GMT
        Subject: CN=F5BE7A4420D1566D01D970F718E9B7417FD7EA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:7a:3e:5b:ae:0e:c7:cf:b5:ca:21:7a:3f:
                    eb:c7:a9:45:e0:06:86:89:cb:bb:38:bf:fc:fe:7c:
                    0c:9e:26:66:18:4d:9b:f8:c5:e2:e2:e6:58:95:30:
                    b7:ed:aa:9a:32:3b:49:d1:4b:02:70:f9:fa:bd:8f:
                    ed:29:88:5f:22:df:5c:14:1e:fa:c1:c2:c5:e6:c3:
                    37:35:f6:98:18:0f:64:0c:16:54:dc:42:8c:ec:f3:
                    5d:5f:b0:d0:96:89:20:39:cf:ae:2d:cf:64:8a:35:
                    fb:1e:a1:cb:ef:62:16:3b:61:d6:bb:d3:95:0d:2b:
                    c6:36:c0:72:53:c6:8d:fe:6a:f3:8b:93:3c:f3:d9:
                    72:cb:30:6b:cd:bd:bd:b6:b8:9b:2f:5e:56:7c:11:
                    81:1f:30:2b:08:aa:c1:03:f3:99:1c:05:b2:35:02:
                    55:93:dc:c3:20:c8:72:5d:a4:09:a4:0b:b4:3c:5c:
                    13:24:44:37:44:d7:72:06:d0:22:92:12:0c:81:91:
                    2b:38:44:62:20:40:33:13:3f:e5:28:1f:aa:2a:92:
                    ff:7f:5a:85:f7:30:be:ee:8c:5a:1e:7f:13:aa:f8:
                    82:2d:19:71:b7:48:aa:5c:e8:5e:01:3f:74:05:5a:
                    9e:af:1b:8a:1e:de:97:14:f4:3b:45:c3:12:98:f0:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:7A:44:20:D1:56:6D:01:D9:70:F7:18:E9:B7:41:7F:D7:EA:90
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:d0:49:7a:83:55:3e:59:b9:74:77:d4:89:39:56:28:41:
         e4:fa:b0:1c:a1:ae:35:57:75:9f:c1:52:6d:f0:41:38:db:55:
         43:fb:98:52:95:4c:5c:e3:2f:e2:45:ed:ae:5f:b9:67:35:ca:
         42:1a:bd:0d:fa:5d:16:a6:bf:33:e1:05:c6:88:25:a9:32:1f:
         0f:56:1d:a5:4c:11:1e:1e:2c:f2:ca:57:ac:9a:50:26:fc:45:
         84:d3:4b:ea:ef:bd:71:83:38:ec:9c:de:98:e5:eb:11:82:92:
         27:52:4b:2d:06:ac:1a:ce:a2:c2:ba:89:d6:f7:6c:4b:e7:3f:
         25:e2:8c:46:4f:38:42:28:6f:a1:51:53:b6:04:f6:29:b5:98:
         c6:e1:b8:ce:98:d9:4c:d7:27:30:4d:30:a4:d0:7f:dd:09:89:
         f7:da:89:14:e2:d1:21:3e:c2:fb:23:c7:23:c3:d4:5d:38:63:
         ee:6e:a4:9f:d9:79:51:8c:00:cb:39:39:60:81:76:d6:21:51:
         a5:ee:3a:1a:e2:c8:01:a9:8c:e8:2d:b9:c7:d4:45:66:2c:3a:
         75:2f:c1:30:f2:11:e8:18:87:0b:fb:e1:85:70:90:c6:4f:bc:
         e7:87:ff:a2:7f:dd:51:fe:37:2e:dd:f7:22:40:c0:60:5a:ae:
         f4:54:79:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----