Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa
File:                     AS213316.roa (raw, json)
Hash identifier:          EKyCd+mxZLFqVSkfTszgfxUbG3PZHz3+mLoZXHH+VEs=
Subject key identifier:   42:66:37:14:56:04:D3:D1:AD:0E:F7:DC:22:84:D1:46:0A:4E:AB:D5
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       19443FE8300FDDCC8F26651EF7CCC75CA2E55BD3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa
Signing time:             Tue 16 Jul 2024 02:42:24 +0000
ROA not before:           Tue 16 Jul 2024 02:37:24 +0000
ROA not after:            Tue 15 Jul 2025 02:42:24 +0000
asID:                     213316
IP address blocks:        2a0f:9400:8018::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 03:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:44:3f:e8:30:0f:dd:cc:8f:26:65:1e:f7:cc:c7:5c:a2:e5:5b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Jul 16 02:37:24 2024 GMT
            Not After : Jul 15 02:42:24 2025 GMT
        Subject: CN=426637145604D3D1AD0EF7DC2284D1460A4EABD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:a6:04:93:65:1e:76:8c:8d:ec:e3:a0:fa:
                    fb:28:77:cc:cf:d1:21:a5:bf:6d:02:b6:bd:e8:43:
                    0e:6f:9d:bb:86:6b:cd:6b:35:a0:31:20:34:7e:c4:
                    78:e0:70:47:2b:5f:ca:ea:00:b3:ba:47:b5:c9:84:
                    6f:45:29:8a:8f:9d:ee:a1:97:70:1c:d4:ca:2d:b3:
                    18:39:8e:d1:f8:e3:f4:aa:c9:bd:40:0f:a5:20:49:
                    e5:20:2a:61:a9:90:af:80:a9:03:00:ab:8d:4e:f0:
                    e5:4c:6e:a7:d9:31:a9:7f:79:22:59:6d:4d:c4:b6:
                    65:5a:7f:e7:f4:7e:28:b6:0f:13:b0:f7:2f:97:b4:
                    c8:21:66:cd:b5:53:71:ec:d9:76:de:56:47:43:61:
                    76:5d:4d:32:c4:f3:89:23:42:f9:68:9a:a8:5d:b3:
                    db:d2:82:01:b5:0c:65:36:61:f3:5a:af:56:a6:94:
                    6a:24:b9:7e:c8:5f:f4:67:a6:02:5b:9e:d1:ae:23:
                    90:75:61:c6:ce:43:49:bc:98:a9:89:09:fa:9d:a4:
                    7f:7b:d1:0f:33:8f:90:96:cc:27:b0:32:a0:cb:0d:
                    a2:59:b9:78:3e:a4:76:6b:73:5b:90:b4:df:cc:f5:
                    6b:e2:dc:7c:a7:cc:77:0b:9f:9a:a1:aa:e6:f4:39:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:37:14:56:04:D3:D1:AD:0E:F7:DC:22:84:D1:46:0A:4E:AB:D5
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:8018::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:6b:2b:5d:33:39:a9:17:eb:3e:5a:49:35:bf:8e:2a:1a:
         87:c4:30:cb:65:28:c2:3c:5c:9e:1d:34:cc:da:cb:39:1b:9c:
         7a:b9:50:95:3d:63:df:64:ae:e8:89:30:87:5b:bd:b8:c0:c2:
         45:67:f3:1a:43:d6:56:f4:ae:c6:64:b8:49:62:ee:69:69:25:
         76:d8:0f:ca:ea:c8:97:c0:94:b6:41:7d:ae:d9:35:48:d9:58:
         da:85:a6:13:98:84:f8:88:11:0b:d3:77:be:f0:69:ae:4e:1a:
         b2:d9:0d:80:c5:d8:b0:1b:06:e5:cb:70:6a:63:97:b7:0b:41:
         c6:19:00:60:40:4e:b0:64:79:35:9f:c9:a3:eb:92:85:93:0b:
         3c:fc:91:c4:60:d9:ba:7e:75:b7:a3:94:50:93:3c:c1:a0:3d:
         81:07:73:d9:7e:b9:22:ac:56:a8:f6:bc:3e:03:79:b6:36:3c:
         52:0d:65:e0:bb:ba:59:59:7e:0a:30:c9:6b:59:6e:bf:a1:34:
         55:9d:65:b8:c3:e6:05:bd:93:7f:a2:ca:41:ba:76:ed:fb:dc:
         8e:28:f6:18:f9:10:3b:01:72:9e:1a:3c:2c:00:d5:da:e3:ad:
         a6:dd:8a:9b:99:f4:7b:55:f6:e4:39:58:7c:28:52:7a:7b:1b:
         bc:0d:e8:5f
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUGUQ/6DAP3cyPJmUe98zHXKLlW9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA3MTYwMjM3MjRaFw0yNTA3MTUwMjQyMjRaMDMxMTAvBgNV
BAMTKDQyNjYzNzE0NTYwNEQzRDFBRDBFRjdEQzIyODREMTQ2MEE0RUFCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2aYEk2UedoyN7OOg+vsod8zP
0SGlv20Ctr3oQw5vnbuGa81rNaAxIDR+xHjgcEcrX8rqALO6R7XJhG9FKYqPne6h
l3Ac1Motsxg5jtH44/Sqyb1AD6UgSeUgKmGpkK+AqQMAq41O8OVMbqfZMal/eSJZ
bU3EtmVaf+f0fii2DxOw9y+XtMghZs21U3Hs2XbeVkdDYXZdTTLE84kjQvlomqhd
s9vSggG1DGU2YfNar1amlGokuX7IX/RnpgJbntGuI5B1YcbOQ0m8mKmJCfqdpH97
0Q8zj5CWzCewMqDLDaJZuXg+pHZrc1uQtN/M9Wvi3HynzHcLn5qhqub0OYozAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUQmY3FFYE09GtDvfcIoTRRgpOq9UwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzMxNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlACAGDANBgkqhkiG9w0BAQsFAAOC
AQEAgm9rK10zOakX6z5aSTW/jioah8Qwy2Uowjxcnh00zNrLORucerlQlT1j32Su
6Ikwh1u9uMDCRWfzGkPWVvSuxmS4SWLuaWkldtgPyurIl8CUtkF9rtk1SNlY2oWm
E5iE+IgRC9N3vvBprk4astkNgMXYsBsG5ctwamOXtwtBxhkAYEBOsGR5NZ/Jo+uS
hZMLPPyRxGDZun51t6OUUJM8waA9gQdz2X65IqxWqPa8PgN5tjY8Ug1l4Lu6WVl+
CjDJa1luv6E0VZ1luMPmBb2Tf6LKQbp27fvcjij2GPkQOwFynho8LADV2uOtpt2K
m5n0e1X25DlYfChSensbvA3oXw==
-----END CERTIFICATE-----
Generated at Sat Oct 26 06:12:37 2024 by rpki-client on console-ams.rpki-client.org