Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202340.roa
File:                     AS202340.roa (raw, json)
Hash identifier:          xggqxNnL9cTkYN4tdADRtRBCQgSC38S81+RTYZSTqzU=
Subject key identifier:   59:6A:EB:FF:B5:C1:85:A2:D3:AA:D9:BC:70:46:5A:64:EE:D2:0D:9A
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       64FF6811075DC74D67E5BAE548440B777A062109
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202340.roa
Signing time:             Sat 11 Nov 2023 01:52:08 +0000
ROA not before:           Sat 11 Nov 2023 01:47:08 +0000
ROA not after:            Sat 09 Nov 2024 01:52:08 +0000
asID:                     202340
IP address blocks:        2a0f:9400:6115::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 21:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:68:11:07:5d:c7:4d:67:e5:ba:e5:48:44:0b:77:7a:06:21:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Nov 11 01:47:08 2023 GMT
            Not After : Nov  9 01:52:08 2024 GMT
        Subject: CN=596AEBFFB5C185A2D3AAD9BC70465A64EED20D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:4d:86:23:1e:16:94:d5:e3:de:b6:8c:41:
                    42:0b:88:03:fe:4d:5e:ea:c3:65:2e:59:6b:83:33:
                    aa:c1:75:73:c0:9c:67:ae:f4:d2:38:5f:45:ff:bc:
                    dc:0c:83:26:8f:d7:50:d0:57:74:2b:c6:2f:70:4f:
                    0e:53:00:08:9d:0d:74:74:47:da:90:33:d2:01:ea:
                    13:a8:8b:df:ac:53:4f:51:00:ba:ff:4d:a6:18:c7:
                    6f:6c:d4:b8:86:d3:7c:32:42:5e:91:39:3b:ce:98:
                    f5:de:54:25:d5:16:b6:71:ff:ce:c5:f3:75:1f:92:
                    7c:0c:73:ea:0b:56:47:b9:2e:57:45:ec:11:f8:2f:
                    9b:b8:88:9d:2a:12:ac:37:ff:9a:8f:19:53:b8:14:
                    71:46:c4:56:6b:9e:70:61:79:76:8c:e7:02:6c:a4:
                    73:83:cf:80:4c:87:ee:ca:2f:86:c6:9f:b9:5c:08:
                    06:f4:ea:13:90:0a:04:fe:e8:ae:f4:7a:4d:97:c4:
                    a2:94:a3:c7:ce:ce:25:bf:8f:d0:e1:94:5c:a8:1d:
                    59:45:d1:d4:6e:8f:8d:20:ad:28:3d:ed:9e:09:a3:
                    04:27:ff:f2:f9:ee:f9:5c:97:62:97:6e:ea:f0:f4:
                    f1:4f:1c:0a:bd:d9:95:c2:fd:97:42:17:52:f1:de:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6A:EB:FF:B5:C1:85:A2:D3:AA:D9:BC:70:46:5A:64:EE:D2:0D:9A
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6115::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:31:21:fb:bb:1b:c9:94:1d:f9:e1:46:f0:ee:89:bc:ad:2a:
         1f:17:5f:23:84:a8:92:f9:b4:9f:8d:21:dc:64:3b:64:70:b7:
         51:ae:f2:7a:05:e7:6b:61:d0:69:3d:3d:e7:92:ed:14:9f:68:
         08:e6:c8:a4:3e:6a:9c:cf:8c:59:41:51:4c:db:40:23:70:3d:
         0f:bf:94:7c:e3:b2:ea:35:9a:f0:9a:79:50:6e:d7:85:06:87:
         27:00:51:d9:85:ac:58:a2:c5:a5:44:44:9c:f8:c9:16:be:74:
         e7:d4:62:5e:97:65:ca:7d:ea:bb:13:29:88:f3:9e:fc:5d:06:
         7c:6b:3e:8d:8f:05:ff:08:72:c1:6b:b6:27:4d:0f:a4:35:e9:
         fe:62:68:f1:b9:44:eb:94:04:67:e6:9b:c0:be:d4:3e:56:49:
         8c:78:d0:c6:0c:40:b3:53:0c:2c:8f:15:f4:fd:6b:f3:d6:16:
         a6:61:90:ed:90:9f:58:90:cc:77:69:cf:b2:d2:a8:e1:ba:0d:
         5d:37:85:53:03:d6:7a:db:41:11:82:46:8e:ce:eb:c9:bd:eb:
         5e:62:8a:58:a9:16:2e:99:2d:b2:71:25:24:83:11:95:7a:69:
         15:8b:2b:be:ae:9f:9e:86:7b:e0:dc:8c:d0:55:ac:62:97:b6:
         25:7e:1e:ab
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUZP9oEQddx01n5brlSEQLd3oGIQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzExMTEwMTQ3MDhaFw0yNDExMDkwMTUyMDhaMDMxMTAvBgNV
BAMTKDU5NkFFQkZGQjVDMTg1QTJEM0FBRDlCQzcwNDY1QTY0RUVEMjBEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98U2GIx4WlNXj3raMQUILiAP+
TV7qw2UuWWuDM6rBdXPAnGeu9NI4X0X/vNwMgyaP11DQV3Qrxi9wTw5TAAidDXR0
R9qQM9IB6hOoi9+sU09RALr/TaYYx29s1LiG03wyQl6ROTvOmPXeVCXVFrZx/87F
83UfknwMc+oLVke5LldF7BH4L5u4iJ0qEqw3/5qPGVO4FHFGxFZrnnBheXaM5wJs
pHODz4BMh+7KL4bGn7lcCAb06hOQCgT+6K70ek2XxKKUo8fOziW/j9DhlFyoHVlF
0dRuj40grSg97Z4JowQn//L57vlcl2KXburw9PFPHAq92ZXC/ZdCF1Lx3o7RAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUWWrr/7XBhaLTqtm8cEZaZO7SDZowHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMjM0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhFTANBgkqhkiG9w0BAQsFAAOC
AQEAyjEh+7sbyZQd+eFG8O6JvK0qHxdfI4Sokvm0n40h3GQ7ZHC3Ua7yegXna2HQ
aT0955LtFJ9oCObIpD5qnM+MWUFRTNtAI3A9D7+UfOOy6jWa8Jp5UG7XhQaHJwBR
2YWsWKLFpUREnPjJFr5059RiXpdlyn3quxMpiPOe/F0GfGs+jY8F/whywWu2J00P
pDXp/mJo8blE65QEZ+abwL7UPlZJjHjQxgxAs1MMLI8V9P1r89YWpmGQ7ZCfWJDM
d2nPstKo4boNXTeFUwPWettBEYJGjs7ryb3rXmKKWKkWLpktsnElJIMRlXppFYsr
vq6fnoZ74NyM0FWsYpe2JX4eqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:05 2024 by rpki-client on console-fra.rpki-client.org