Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264313a3a2f34382d3438203d3e203236303432.roa
File:                     323630323a666531333a3264313a3a2f34382d3438203d3e203236303432.roa (raw, json)
Hash identifier:          bMePLXXjezzgpYXQHi3htc01R6a3rWOJ1l5ki15eAcE=
Subject key identifier:   B8:20:4B:C4:4E:95:91:99:26:CA:E4:AE:95:C4:0A:FB:A4:C9:F4:B9
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       062B91CB1004DA8E00AA62A081D3F56B8C8BB4BB
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264313a3a2f34382d3438203d3e203236303432.roa
Signing time:             Thu 29 Aug 2024 04:18:03 +0000
ROA not before:           Thu 29 Aug 2024 04:13:03 +0000
ROA not after:            Thu 28 Aug 2025 04:18:03 +0000
asID:                     26042
IP address blocks:        2602:fe13:2d1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 02:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2b:91:cb:10:04:da:8e:00:aa:62:a0:81:d3:f5:6b:8c:8b:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug 29 04:13:03 2024 GMT
            Not After : Aug 28 04:18:03 2025 GMT
        Subject: CN=B8204BC44E95919926CAE4AE95C40AFBA4C9F4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:af:c1:fe:99:39:c8:c0:48:4d:74:ee:9a:
                    a3:87:b1:6a:ce:ea:78:19:92:ff:3b:5b:c9:fa:64:
                    bb:6b:fd:d7:fc:37:5f:16:c7:36:2f:ab:3c:23:b9:
                    5e:8a:6e:66:6a:40:c5:e8:81:65:71:bf:6f:01:6c:
                    96:f9:cd:c6:8c:06:9c:77:31:ae:b0:9a:b4:b7:73:
                    fe:08:2c:a9:23:67:39:71:b6:90:16:2b:07:47:ba:
                    da:ed:10:eb:a6:79:05:73:7a:49:a5:f6:2c:4e:eb:
                    e1:47:43:30:40:2e:3f:17:09:da:8b:25:82:50:f1:
                    e8:f6:1d:3a:8e:9a:07:c6:31:4e:2c:a6:51:57:c5:
                    3e:37:1d:66:f3:f6:f8:f1:c4:6a:31:2b:29:7e:54:
                    a9:40:cd:22:3f:11:61:d2:48:97:e3:51:88:39:55:
                    8d:3b:07:a8:ca:69:46:10:8d:dc:29:ee:73:84:b9:
                    c6:92:34:79:c8:e8:dc:d9:9d:73:0b:ba:f9:d1:0b:
                    8d:0c:c0:a5:63:d4:5f:f3:33:fb:20:07:cf:ca:67:
                    d0:ba:14:db:09:d4:bc:6a:fb:8d:d8:ff:68:99:d0:
                    c6:75:a9:10:bd:62:3d:b0:fc:b5:a0:c2:38:65:71:
                    3a:67:17:f5:4f:ea:7e:3e:3d:90:23:6e:fb:4d:aa:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:4B:C4:4E:95:91:99:26:CA:E4:AE:95:C4:0A:FB:A4:C9:F4:B9
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3264313a3a2f34382d3438203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:79:8c:46:26:f3:4f:48:26:99:9e:10:9d:95:c0:20:fb:
         a0:61:70:de:57:5c:e8:8b:c6:d6:31:da:32:38:6b:3e:a7:06:
         da:6c:7b:2a:ce:0f:33:cd:85:90:34:e2:86:6c:05:3a:e1:3b:
         99:6a:26:17:d9:44:2c:ab:74:fc:78:fd:42:c8:51:87:9d:2b:
         f4:74:ef:82:05:6f:3a:ee:e2:dd:10:b3:f4:de:d2:c0:18:36:
         50:0b:e1:e0:d6:c9:91:29:65:1d:d1:ee:58:d6:a3:07:d7:19:
         8b:93:0c:6b:2c:67:53:61:0b:59:fa:52:e2:5d:c4:32:72:2e:
         42:4e:1a:c1:50:73:67:73:41:ea:20:94:27:ac:e3:84:7a:2c:
         38:70:31:9f:0a:05:64:ac:38:8b:f1:ca:27:06:a7:93:ac:cb:
         43:b9:3a:1c:01:ff:38:5c:bd:13:09:37:c0:08:75:5b:07:fa:
         86:51:9d:a0:56:3f:9e:1c:69:54:cc:73:27:1c:33:42:2c:f6:
         1a:82:25:d7:64:7e:40:0f:92:e8:33:e4:6f:83:f0:ac:f6:e7:
         70:89:8c:32:33:41:fb:3e:36:8b:32:0c:a7:ad:4a:3f:a7:77:
         dd:cd:4f:ae:c4:bf:35:ae:d9:90:99:65:8a:e8:20:64:91:25:
         2d:58:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----