Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216324.roa
File:                     AS216324.roa (raw, json)
Hash identifier:          pF6nAfPXq4dtJEUykU6KgL4bVrP1ZojmPtbspKZaFbQ=
Subject key identifier:   DE:F5:D8:0E:CE:74:9F:DF:CC:58:8C:E4:A7:50:7A:AA:25:37:A5:77
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       5871DD9292B7E3BE07DFA7C3EEA6ABC6FB28C973
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216324.roa
Signing time:             Thu 06 Jun 2024 02:06:00 +0000
ROA not before:           Thu 06 Jun 2024 02:01:00 +0000
ROA not after:            Thu 05 Jun 2025 02:06:00 +0000
asID:                     216324
IP address blocks:        2a0f:9400:6112::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 01:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:dd:92:92:b7:e3:be:07:df:a7:c3:ee:a6:ab:c6:fb:28:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Jun  6 02:01:00 2024 GMT
            Not After : Jun  5 02:06:00 2025 GMT
        Subject: CN=DEF5D80ECE749FDFCC588CE4A7507AAA2537A577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:87:85:7b:b8:63:89:be:e9:80:b2:0c:73:
                    d3:1e:6b:8a:55:85:86:5d:eb:0d:1d:05:e0:f2:70:
                    4b:19:af:a3:f5:fd:73:62:46:5a:bd:c4:54:0c:9a:
                    c8:84:8a:29:95:33:e6:23:a1:34:b3:af:93:aa:00:
                    4d:c7:5c:fa:10:bb:d2:8f:1f:23:b4:43:19:53:c8:
                    3a:5e:e8:93:3e:64:4f:f4:88:11:83:d0:fb:58:9b:
                    c9:8f:39:f1:e9:aa:74:3f:d1:bd:fc:da:7d:a5:f4:
                    a7:53:42:a4:08:17:ad:77:6e:8c:7d:e8:23:0f:8b:
                    f6:54:c0:8d:33:67:62:9b:ea:1a:0b:13:8b:44:0b:
                    19:61:96:44:3e:76:98:d9:86:d5:71:3c:49:5e:dd:
                    f4:4d:6d:60:3a:94:23:f1:9c:eb:36:31:0e:af:2b:
                    fe:6d:f7:2c:68:99:40:3d:41:8a:a6:01:19:a7:d7:
                    38:83:dd:bb:74:b6:11:9f:9d:1d:57:a8:83:3a:bb:
                    9f:19:0b:01:c6:3a:c3:41:d3:c3:f2:5a:9d:6c:66:
                    71:02:1a:22:96:23:88:67:dc:6d:97:a1:b9:94:40:
                    52:38:de:b3:a2:85:95:e1:93:9f:34:d1:de:1d:8d:
                    2b:ba:bb:b1:9f:5b:b2:d0:ba:f7:16:09:6d:a6:a1:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F5:D8:0E:CE:74:9F:DF:CC:58:8C:E4:A7:50:7A:AA:25:37:A5:77
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216324.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6112::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:19:10:ea:01:6b:5c:0f:8c:df:ce:ae:fe:7d:fa:87:50:
         3d:0d:b5:ee:d4:f2:87:5a:4d:a0:cd:87:74:80:42:f2:01:b2:
         7e:9b:a0:5f:2c:c7:aa:76:e3:73:6f:af:3f:7c:f9:a5:9a:38:
         92:0c:31:17:df:7b:47:19:1e:aa:d8:b8:74:e2:e5:d7:03:d8:
         a6:06:65:fe:a1:46:b4:88:8b:75:67:7d:24:4c:29:66:59:38:
         30:f7:61:37:0e:ea:93:b0:c2:c7:3d:38:47:21:da:92:fb:f1:
         5c:cb:b6:fd:8f:e7:ac:52:7a:bd:ed:c8:dc:12:1a:68:58:48:
         61:1f:d2:bf:26:a5:66:c2:e0:c1:c3:99:56:05:08:6e:e3:b5:
         57:89:1d:e4:70:fb:30:a8:25:62:44:b5:bb:c8:68:c2:8a:5b:
         10:2e:cb:ee:24:7c:16:5f:22:c0:c4:a4:5d:67:2b:14:7a:f0:
         12:3d:10:0e:05:0f:bf:61:ab:c6:80:c4:b2:d0:7b:c2:91:bd:
         23:c5:a0:b5:87:fa:09:65:cd:f8:f4:21:4a:c4:5e:b4:14:3f:
         87:3b:f0:4a:6f:98:7f:9a:0b:a6:3e:c6:67:9e:70:f0:2f:d3:
         2e:ea:09:62:36:47:f2:d9:f3:e0:67:41:1d:9c:82:b8:26:f7:
         49:7d:a6:5b
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUWHHdkpK3474H36fD7qarxvsoyXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA2MDYwMjAxMDBaFw0yNTA2MDUwMjA2MDBaMDMxMTAvBgNV
BAMTKERFRjVEODBFQ0U3NDlGREZDQzU4OENFNEE3NTA3QUFBMjUzN0E1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnO4eFe7hjib7pgLIMc9Mea4pV
hYZd6w0dBeDycEsZr6P1/XNiRlq9xFQMmsiEiimVM+YjoTSzr5OqAE3HXPoQu9KP
HyO0QxlTyDpe6JM+ZE/0iBGD0PtYm8mPOfHpqnQ/0b382n2l9KdTQqQIF613box9
6CMPi/ZUwI0zZ2Kb6hoLE4tECxlhlkQ+dpjZhtVxPEle3fRNbWA6lCPxnOs2MQ6v
K/5t9yxomUA9QYqmARmn1ziD3bt0thGfnR1XqIM6u58ZCwHGOsNB08PyWp1sZnEC
GiKWI4hn3G2XobmUQFI43rOihZXhk5800d4djSu6u7GfW7LQuvcWCW2moSFdAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU3vXYDs50n9/MWIzkp1B6qiU3pXcwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNjMyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEjANBgkqhkiG9w0BAQsFAAOC
AQEAH8kZEOoBa1wPjN/Orv59+odQPQ217tTyh1pNoM2HdIBC8gGyfpugXyzHqnbj
c2+vP3z5pZo4kgwxF997Rxkeqti4dOLl1wPYpgZl/qFGtIiLdWd9JEwpZlk4MPdh
Nw7qk7DCxz04RyHakvvxXMu2/Y/nrFJ6ve3I3BIaaFhIYR/SvyalZsLgwcOZVgUI
buO1V4kd5HD7MKglYkS1u8howopbEC7L7iR8Fl8iwMSkXWcrFHrwEj0QDgUPv2Gr
xoDEstB7wpG9I8WgtYf6CWXN+PQhSsRetBQ/hzvwSm+Yf5oLpj7GZ55w8C/TLuoJ
YjZH8tnz4GdBHZyCuCb3SX2mWw==
-----END CERTIFICATE-----
Generated at Thu Jun 27 05:27:50 2024 by rpki-client on console-fra.rpki-client.org