Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          ThsnPNEwKrqE7EGR2a9OSbbxwLR2aWyGxdpYvMY/ovU=
Subject key identifier:   5B:BF:12:AE:AF:0A:18:5D:12:F5:BC:0C:B6:56:D2:5E:93:B8:BF:48
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1C2E9D37BF457D232E786B376C2EC3329EF5A168
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 14 Sep 2023 02:12:47 +0000
ROA not before:           Thu 14 Sep 2023 02:07:47 +0000
ROA not after:            Thu 12 Sep 2024 02:12:47 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 01:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:9d:37:bf:45:7d:23:2e:78:6b:37:6c:2e:c3:32:9e:f5:a1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Sep 14 02:07:47 2023 GMT
            Not After : Sep 12 02:12:47 2024 GMT
        Subject: CN=5BBF12AEAF0A185D12F5BC0CB656D25E93B8BF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:3d:97:f0:65:b3:7b:8b:6f:a1:c4:2e:9b:
                    0a:29:1c:52:c9:c5:bf:07:ba:9b:b9:7c:be:48:be:
                    ea:2c:cc:a9:d8:54:97:09:a0:a1:1c:88:f5:1c:4e:
                    44:e0:18:bb:3f:3d:59:b2:56:dd:47:87:4d:84:04:
                    1f:18:78:40:b9:1a:5f:eb:d9:74:0c:fe:64:09:25:
                    df:e2:af:1c:95:71:a7:19:95:83:13:c6:7e:52:fe:
                    8b:55:6c:9e:c1:01:ff:56:3c:ce:ff:a9:d4:23:21:
                    37:85:a9:bf:58:75:82:88:14:66:0a:a7:26:70:4b:
                    55:df:c2:3c:18:8b:cb:63:cf:a4:ec:02:1c:0e:41:
                    4a:b4:d6:48:fc:53:74:65:fb:dd:f5:95:9c:68:66:
                    c8:65:f6:fc:ac:76:06:11:38:68:9c:e4:70:56:85:
                    9e:3a:50:ca:0a:26:06:5a:8b:d4:de:db:0e:93:e2:
                    56:ac:b0:16:57:19:71:17:5f:98:2d:15:2b:39:d3:
                    e9:7c:b0:09:67:f9:10:7b:e9:10:03:65:ed:3c:dd:
                    c2:c6:50:26:76:d2:6e:f5:de:7a:2e:dd:0f:00:49:
                    eb:0f:45:9d:19:98:27:5e:b6:d2:f5:8f:36:03:0c:
                    2d:1d:af:e6:e5:1a:11:13:77:25:c4:eb:6d:cb:8a:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:12:AE:AF:0A:18:5D:12:F5:BC:0C:B6:56:D2:5E:93:B8:BF:48
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:93:91:f0:d7:fd:20:73:27:85:89:59:f0:b2:f4:00:a5:7c:
         3c:1c:be:a2:5f:9f:8f:3c:db:18:13:13:5d:7a:28:e7:db:a5:
         0c:25:ea:e0:1d:46:fa:d8:0b:20:5c:51:30:1b:f4:a7:58:4e:
         f3:0e:5e:6d:24:cd:be:9d:ef:40:6c:1b:72:5a:ab:e2:60:c3:
         fc:03:c0:7d:ab:22:f2:11:f0:d6:19:4f:49:c2:c3:01:bd:8f:
         66:c3:1f:0c:c3:73:ef:90:71:a0:a4:75:18:3e:6d:12:75:6e:
         a2:db:a7:70:28:89:4d:23:6d:d2:5d:45:ef:ce:99:bf:45:82:
         74:f2:91:99:a0:ae:ad:70:fa:76:d1:15:b0:6f:e0:78:45:a6:
         cb:1d:25:c1:91:b9:0d:9e:52:59:9c:9d:0f:3b:dd:2e:fb:f9:
         9d:d2:bd:49:2f:93:2a:ba:9b:63:d4:71:0a:ae:29:08:d3:ad:
         1b:1e:c8:c5:de:8a:c9:5f:0a:08:dd:16:8e:80:ce:3d:e5:fd:
         32:b9:e9:72:d0:d7:56:13:f8:4b:43:ea:1b:1b:d3:1f:f1:50:
         47:80:f5:89:26:04:18:22:6c:81:aa:97:cb:82:5d:be:97:9c:
         49:87:cf:58:83:3f:69:cd:a7:92:8f:99:69:73:83:8a:76:c9:
         47:74:19:14
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUHC6dN79FfSMueGs3bC7DMp71oWgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjMwOTE0MDIwNzQ3WhcNMjQwOTEyMDIxMjQ3
WjAzMTEwLwYDVQQDEyg1QkJGMTJBRUFGMEExODVEMTJGNUJDMENCNjU2RDI1RTkz
QjhCRjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ49l/Bls3uL
b6HELpsKKRxSycW/B7qbuXy+SL7qLMyp2FSXCaChHIj1HE5E4Bi7Pz1ZslbdR4dN
hAQfGHhAuRpf69l0DP5kCSXf4q8clXGnGZWDE8Z+Uv6LVWyewQH/VjzO/6nUIyE3
ham/WHWCiBRmCqcmcEtV38I8GIvLY8+k7AIcDkFKtNZI/FN0Zfvd9ZWcaGbIZfb8
rHYGEThonORwVoWeOlDKCiYGWovU3tsOk+JWrLAWVxlxF1+YLRUrOdPpfLAJZ/kQ
e+kQA2XtPN3CxlAmdtJu9d56Lt0PAEnrD0WdGZgnXrbS9Y82AwwtHa/m5RoRE3cl
xOtty4pR/wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFFu/Eq6vChhdEvW8DLZW0l6T
uL9IMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2MzMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/hMP
wTANBgkqhkiG9w0BAQsFAAOCAQEAkZOR8Nf9IHMnhYlZ8LL0AKV8PBy+ol+fjzzb
GBMTXXoo59ulDCXq4B1G+tgLIFxRMBv0p1hO8w5ebSTNvp3vQGwbclqr4mDD/APA
fasi8hHw1hlPScLDAb2PZsMfDMNz75BxoKR1GD5tEnVuotuncCiJTSNt0l1F786Z
v0WCdPKRmaCurXD6dtEVsG/geEWmyx0lwZG5DZ5SWZydDzvdLvv5ndK9SS+TKrqb
Y9RxCq4pCNOtGx7Ixd6KyV8KCN0WjoDOPeX9MrnpctDXVhP4S0PqGxvTH/FQR4D1
iSYEGCJsgaqXy4JdvpecSYfPWIM/ac2nko+ZaXODinbJR3QZFA==
-----END CERTIFICATE-----