Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3438203d3e203534313333.roa
File:                     323630323a666531333a3264303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier:          t8PPivoNla0M1IZlcoTTVJkRe40G4PnSd8jwHxb0P/g=
Subject key identifier:   A9:C3:D0:0C:22:90:67:E4:D3:DC:16:2F:86:9E:C0:3F:AF:0C:40:88
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       2C14583B3A80F5B035989A03D012D3DBA8210A1C
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3438203d3e203534313333.roa
Signing time:             Thu 25 Jul 2024 00:19:39 +0000
ROA not before:           Thu 25 Jul 2024 00:14:39 +0000
ROA not after:            Thu 24 Jul 2025 00:19:39 +0000
asID:                     54133
IP address blocks:        2602:fe13:2d0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 04:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:14:58:3b:3a:80:f5:b0:35:98:9a:03:d0:12:d3:db:a8:21:0a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jul 25 00:14:39 2024 GMT
            Not After : Jul 24 00:19:39 2025 GMT
        Subject: CN=A9C3D00C229067E4D3DC162F869EC03FAF0C4088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:90:a1:c5:0d:94:23:81:17:21:64:88:0f:
                    fd:cd:c3:ba:52:35:ff:77:0a:8b:81:da:16:84:ab:
                    46:7a:fe:e2:bd:2a:ee:b4:9e:bf:c2:74:9f:39:d7:
                    28:35:c9:cc:59:07:af:50:d0:f9:8a:21:b3:35:8d:
                    58:ff:e8:68:94:cf:d1:6f:fc:9f:31:4f:b0:ee:a5:
                    98:15:5e:47:f4:6e:c3:db:6c:f6:10:3d:2d:b7:25:
                    22:c6:e8:9d:47:44:c2:91:b7:16:44:ec:76:dd:27:
                    f4:0b:8a:8f:a8:27:e8:0a:9b:01:2c:d1:c5:d3:a3:
                    61:a4:07:bc:4e:73:f6:89:7d:96:1b:0d:7e:8b:56:
                    6b:80:cb:9e:3d:9a:ce:e2:7e:c7:c7:81:f5:94:35:
                    1f:ea:c6:58:51:ca:f3:69:e4:8a:2f:1c:c2:8e:d2:
                    e0:e1:5a:77:d7:22:4d:82:57:25:d4:c9:31:8c:f2:
                    0c:bf:eb:e1:28:63:37:20:7f:c1:80:4d:e3:3e:ef:
                    6b:d8:6b:5f:9a:9c:9c:12:85:44:5d:19:eb:4d:42:
                    ec:4d:56:df:d2:db:e9:12:93:30:20:c4:07:bf:20:
                    8a:86:a8:da:33:70:81:9d:ae:ca:22:13:b5:7b:4d:
                    e9:78:96:15:9b:57:21:26:fa:b9:17:fa:5f:6b:4c:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:D0:0C:22:90:67:E4:D3:DC:16:2F:86:9E:C0:3F:AF:0C:40:88
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264303a3a2f34342d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:5b:c0:51:9c:89:66:e7:92:55:f7:f3:e4:cd:11:cd:7d:49:
         bf:8c:a5:d8:f9:68:c2:fa:79:de:94:d1:f0:44:2d:1a:af:b9:
         2a:a3:d5:1c:75:61:c2:54:56:f9:78:c2:c8:98:0d:82:66:0f:
         37:fc:c8:22:04:4d:e0:71:25:f3:a3:8d:62:d1:4f:ad:47:cb:
         d1:d5:a2:6a:cc:4c:64:58:e3:3c:dc:d6:b2:78:c6:f6:bc:08:
         50:58:38:a8:43:4b:c3:d5:31:eb:f3:91:87:04:f9:34:0f:01:
         90:87:77:1b:83:f6:ff:4e:73:79:4f:65:c3:dc:38:cc:ed:5a:
         46:c6:57:57:57:a5:f5:74:e8:0c:08:c5:bf:cb:48:f7:82:11:
         01:25:b3:f5:fa:21:3e:80:9e:9b:41:df:d7:cf:e5:fe:b6:20:
         13:b3:ff:65:89:4d:5c:16:1a:7d:36:ed:22:79:aa:69:73:8d:
         f8:24:b8:e6:c6:50:68:68:70:0a:a2:ac:94:ec:2f:ad:09:e1:
         c0:45:2b:23:9c:5e:91:66:3c:18:f8:58:18:cf:a9:9a:26:02:
         22:46:ea:68:ce:36:de:eb:2b:82:1e:d1:85:51:8c:35:f6:16:
         d8:4f:ef:33:0d:60:f9:0a:eb:bd:f1:57:99:56:d7:a5:cf:87:
         f6:25:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----