Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3438203d3e203236303432.roa
File:                     323630323a666531333a3265303a3a2f34342d3438203d3e203236303432.roa (raw, json)
Hash identifier:          DEr1Z7YKt0GLsc5BwvQgg0GJLq8+cXNyYXv5qRHAYFQ=
Subject key identifier:   36:C0:D0:5D:A7:44:44:14:8B:07:70:B4:F0:7B:0F:E9:F2:30:0B:BF
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1DD5C8C937D7449DEB0058D58F4819B71BD3CD5B
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3438203d3e203236303432.roa
Signing time:             Thu 29 Aug 2024 04:20:27 +0000
ROA not before:           Thu 29 Aug 2024 04:15:27 +0000
ROA not after:            Thu 28 Aug 2025 04:20:27 +0000
asID:                     26042
IP address blocks:        2602:fe13:2e0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 01:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:c8:c9:37:d7:44:9d:eb:00:58:d5:8f:48:19:b7:1b:d3:cd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug 29 04:15:27 2024 GMT
            Not After : Aug 28 04:20:27 2025 GMT
        Subject: CN=36C0D05DA74444148B0770B4F07B0FE9F2300BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:c4:da:59:47:77:0a:87:84:c8:53:64:4a:
                    df:a7:2e:4c:e3:67:9f:4a:85:20:5a:f1:f4:dc:51:
                    22:c7:c2:67:2b:83:ad:0e:c4:fb:c2:56:2a:1d:a9:
                    a3:df:7b:48:3d:1e:20:00:67:df:4c:e8:c9:85:83:
                    06:df:da:45:c6:e0:7b:08:59:40:34:be:2a:8d:8f:
                    b5:ab:05:aa:e1:59:1a:8b:f6:65:58:26:3f:78:9a:
                    3e:b6:ad:42:31:37:3b:14:1c:ea:5e:69:57:48:f9:
                    21:48:c6:4c:af:b8:c2:5e:29:eb:7c:84:f1:e2:2a:
                    89:64:27:66:20:65:ab:54:20:25:d5:75:b7:5d:a4:
                    9c:ee:28:79:fd:3c:9b:c3:b6:6a:cc:75:ff:e0:ae:
                    05:f5:38:32:78:d4:e7:7c:72:fd:99:86:f2:ee:73:
                    7a:58:fd:0d:39:6f:4d:12:73:6c:6f:f8:6f:4d:b8:
                    77:88:dd:e7:d1:3b:03:c1:8b:4d:b3:98:80:bc:6f:
                    8b:1b:3e:4e:79:17:91:51:64:4f:39:a7:47:c2:06:
                    ef:93:02:1c:2b:1c:01:2c:c7:9d:c0:3e:62:45:90:
                    14:9e:98:bd:59:7d:07:f7:c6:8c:72:2d:59:bb:74:
                    93:73:83:dd:eb:89:9b:e3:b2:38:3a:70:53:d7:c7:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:D0:5D:A7:44:44:14:8B:07:70:B4:F0:7B:0F:E9:F2:30:0B:BF
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3438203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:ec:e9:fd:42:ec:c9:b9:93:9f:ca:2b:4b:9d:dc:19:d9:
         0e:25:16:59:16:3a:dd:86:8d:8c:1d:2f:4d:3d:d6:ce:ec:a1:
         97:17:f1:7c:fe:bc:ff:24:d7:9c:f8:7a:04:34:1b:3f:80:01:
         01:ae:53:be:58:78:16:3e:a3:c3:39:13:8e:ba:cf:71:c5:46:
         a1:0c:76:8f:e8:42:1a:9b:19:74:74:a2:6f:ea:94:c0:b5:73:
         81:22:a1:c3:27:14:bb:b6:85:b6:e5:e8:a7:20:78:7a:13:d3:
         57:f6:56:43:fe:16:a9:d0:18:f0:a1:7a:4d:a1:dd:eb:ec:df:
         0e:7e:1c:e7:a1:04:f8:19:9b:07:ae:7d:5a:69:e5:e3:23:fe:
         6e:2f:d2:19:21:a7:35:60:87:e8:53:e8:e5:52:76:15:06:06:
         b1:6e:ea:96:0a:3b:08:ce:79:0e:8f:47:9b:1a:92:63:86:d8:
         27:f5:be:2a:a3:9f:f8:89:23:0c:e6:1f:44:79:b9:e2:68:a9:
         4a:c7:e8:b8:a5:1c:cb:1a:a7:9e:4e:07:5e:ad:1e:61:9d:a1:
         9a:24:7c:dc:1b:67:67:0f:c4:a0:ca:bf:bf:87:5b:c1:64:18:
         31:77:8f:a1:78:02:20:15:48:52:d7:4b:0d:fb:db:14:b1:9c:
         33:5e:72:c1
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUHdXIyTfXRJ3rAFjVj0gZtxvTzVswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjQwODI5MDQxNTI3WhcNMjUwODI4MDQyMDI3
WjAzMTEwLwYDVQQDEygzNkMwRDA1REE3NDQ0NDE0OEIwNzcwQjRGMDdCMEZFOUYy
MzAwQkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2svE2llHdwqH
hMhTZErfpy5M42efSoUgWvH03FEix8JnK4OtDsT7wlYqHamj33tIPR4gAGffTOjJ
hYMG39pFxuB7CFlANL4qjY+1qwWq4Vkai/ZlWCY/eJo+tq1CMTc7FBzqXmlXSPkh
SMZMr7jCXinrfITx4iqJZCdmIGWrVCAl1XW3XaSc7ih5/Tybw7ZqzHX/4K4F9Tgy
eNTnfHL9mYby7nN6WP0NOW9NEnNsb/hvTbh3iN3n0TsDwYtNs5iAvG+LGz5OeReR
UWRPOadHwgbvkwIcKxwBLMedwD5iRZAUnpi9WX0H98aMci1Zu3STc4Pd64mb47I4
OnBT18dIkQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFDbA0F2nREQUiwdwtPB7D+ny
MAu/MB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzI2NTMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzNjMwMzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMC
4DANBgkqhkiG9w0BAQsFAAOCAQEAPSrs6f1C7Mm5k5/KK0ud3BnZDiUWWRY63YaN
jB0vTT3WzuyhlxfxfP68/yTXnPh6BDQbP4ABAa5Tvlh4Fj6jwzkTjrrPccVGoQx2
j+hCGpsZdHSib+qUwLVzgSKhwycUu7aFtuXopyB4ehPTV/ZWQ/4WqdAY8KF6TaHd
6+zfDn4c56EE+BmbB659Wmnl4yP+bi/SGSGnNWCH6FPo5VJ2FQYGsW7qlgo7CM55
Do9HmxqSY4bYJ/W+KqOf+IkjDOYfRHm54mipSsfouKUcyxqnnk4HXq0eYZ2hmiR8
3BtnZw/EoMq/v4dbwWQYMXePoXgCIBVIUtdLDfvbFLGcM15ywQ==
-----END CERTIFICATE-----