Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3434203d3e20313734.roa
File:                     323630323a666531333a3264303a3a2f34342d3434203d3e20313734.roa (raw, json)
Hash identifier:          EFNy9TTB7GGTWgO5kwFMWrphmRL0Zo+pKAnUojYohcM=
Subject key identifier:   01:6E:35:EA:B8:65:C8:F3:B4:10:52:C7:F4:A9:B9:4F:BE:4B:97:99
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       0F8350D75CBB124BD3E0E74AC4A571C5A9B905DC
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3434203d3e20313734.roa
Signing time:             Mon 05 Aug 2024 04:41:57 +0000
ROA not before:           Mon 05 Aug 2024 04:36:57 +0000
ROA not after:            Mon 04 Aug 2025 04:41:57 +0000
asID:                     174
IP address blocks:        2602:fe13:2d0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 09 Aug 2024 03:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:83:50:d7:5c:bb:12:4b:d3:e0:e7:4a:c4:a5:71:c5:a9:b9:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug  5 04:36:57 2024 GMT
            Not After : Aug  4 04:41:57 2025 GMT
        Subject: CN=016E35EAB865C8F3B41052C7F4A9B94FBE4B9799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:c1:31:dc:1c:1a:fa:d6:8e:90:86:37:be:
                    2d:3e:2c:c6:6f:6e:c8:7f:83:f5:c8:7e:06:a7:da:
                    93:fe:74:86:c3:7a:93:d5:5e:58:c1:62:0b:cd:0c:
                    f0:29:8e:13:ab:3d:17:0a:40:83:8a:f5:23:6a:44:
                    5b:da:04:97:65:83:fc:29:57:64:14:c1:49:19:ca:
                    ee:d5:eb:4f:d5:7e:6c:50:4c:9a:a3:ba:75:90:c2:
                    53:a9:76:85:d5:b4:9a:37:b3:c8:32:f1:35:70:3e:
                    bc:ae:e9:11:77:49:32:6d:5b:92:52:3e:00:7b:88:
                    d5:98:4d:b1:9c:e2:d3:1a:b5:bb:27:b4:4b:93:7d:
                    85:28:e8:e7:3a:d8:e4:db:b3:77:4f:13:2d:92:f9:
                    de:73:b6:6e:9d:f9:ff:d6:1b:f4:88:1c:79:db:84:
                    f7:6c:23:be:36:11:ce:0d:83:6a:75:1b:bf:1a:06:
                    2f:1c:11:91:53:0f:62:fd:ab:d9:05:64:2b:3c:e9:
                    d6:ef:f4:00:0f:cd:4e:ea:d1:e8:84:fa:e1:be:6a:
                    49:30:19:c0:4d:48:71:6d:5d:1f:f8:f6:8a:e2:ba:
                    21:0a:cd:7b:fb:78:c7:fd:af:95:57:38:f8:6e:6e:
                    9f:23:ad:b6:81:e3:4b:72:dc:25:9c:c9:a0:cb:db:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6E:35:EA:B8:65:C8:F3:B4:10:52:C7:F4:A9:B9:4F:BE:4B:97:99
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3434203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:9c:14:b7:23:21:12:b5:fb:4d:59:b2:d5:25:78:b8:f2:
         68:90:fd:5c:45:1a:47:51:c2:ee:89:24:6f:ac:7f:30:bb:0c:
         46:2b:8c:92:70:b5:b2:c3:54:7d:de:77:18:45:95:ee:7c:58:
         79:dd:76:51:7b:57:f7:e3:0a:fd:e3:d0:fe:70:70:f7:e2:9d:
         4e:95:07:2b:3a:8e:e6:5e:69:49:b4:57:67:d1:29:cf:a3:22:
         dd:3e:4a:2c:63:b8:69:8c:1e:68:3e:a5:f2:a1:44:4d:38:22:
         af:78:c9:2d:56:6c:4e:82:01:c1:1c:98:0f:be:8e:77:ad:e2:
         5d:11:63:c9:6a:d5:f1:ea:06:ca:bb:12:36:b7:f5:94:67:94:
         32:1e:ee:d9:48:cb:3f:be:2d:35:6d:84:6e:9d:82:f3:87:a7:
         01:b0:10:17:16:2b:5b:83:cb:df:ab:9f:16:25:d0:6d:b9:88:
         23:5a:92:ea:db:75:f8:d7:8a:e7:0b:4f:60:77:14:e6:46:d3:
         38:fd:95:8d:ed:63:23:ee:83:5b:7c:c7:69:7c:f1:81:f3:ec:
         0f:c9:69:9f:de:54:06:b0:b7:74:b6:7e:23:79:0d:1f:ed:78:
         52:3a:fa:56:fc:0a:6a:ce:26:88:93:a6:39:b1:d3:d2:6b:4f:
         07:93:6e:12
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUD4NQ11y7EkvT4OdKxKVxxam5BdwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjQwODA1MDQzNjU3WhcNMjUwODA0MDQ0MTU3
WjAzMTEwLwYDVQQDEygwMTZFMzVFQUI4NjVDOEYzQjQxMDUyQzdGNEE5Qjk0RkJF
NEI5Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/BMdwcGvrW
jpCGN74tPizGb27If4P1yH4Gp9qT/nSGw3qT1V5YwWILzQzwKY4Tqz0XCkCDivUj
akRb2gSXZYP8KVdkFMFJGcru1etP1X5sUEyao7p1kMJTqXaF1bSaN7PIMvE1cD68
rukRd0kybVuSUj4Ae4jVmE2xnOLTGrW7J7RLk32FKOjnOtjk27N3TxMtkvnec7Zu
nfn/1hv0iBx524T3bCO+NhHODYNqdRu/GgYvHBGRUw9i/avZBWQrPOnW7/QAD81O
6tHohPrhvmpJMBnATUhxbV0f+PaK4rohCs17+3jH/a+VVzj4bm6fI622geNLctwl
nMmgy9vMDQIDAQABo4ICizCCAocwHQYDVR0OBBYEFAFuNeq4ZcjztBBSx/SpuU++
S5eZMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgY0GCCsGAQUFBwELBIGAMH4w
fAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvMy8zMjM2MzAzMjNhNjY2NTMxMzMzYTMyNjQzMDNhM2Ey
ZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMC0DANBgkq
hkiG9w0BAQsFAAOCAQEApuecFLcjIRK1+01ZstUleLjyaJD9XEUaR1HC7okkb6x/
MLsMRiuMknC1ssNUfd53GEWV7nxYed12UXtX9+MK/ePQ/nBw9+KdTpUHKzqO5l5p
SbRXZ9Epz6Mi3T5KLGO4aYweaD6l8qFETTgir3jJLVZsToIBwRyYD76Od63iXRFj
yWrV8eoGyrsSNrf1lGeUMh7u2UjLP74tNW2Ebp2C84enAbAQFxYrW4PL36ufFiXQ
bbmII1qS6tt1+NeK5wtPYHcU5kbTOP2Vje1jI+6DW3zHaXzxgfPsD8lpn95UBrC3
dLZ+I3kNH+14Ujr6VvwKas4miJOmObHT0mtPB5NuEg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:43 2025 by rpki-client