Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58212.roa
File:                     AS58212.roa (raw, json)
Hash identifier:          tIZMi6frrOk099I/W6ibcKW+PqsliR7o5geDpxREur8=
Subject key identifier:   83:83:F8:CC:38:B7:E4:2A:E5:55:BF:15:5A:9D:BB:97:0F:9F:B1:B5
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       546E810D57D1D5452450123A04D5122958B5C51C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58212.roa
Signing time:             Sat 05 Aug 2023 06:04:21 +0000
ROA not before:           Sat 05 Aug 2023 05:59:21 +0000
ROA not after:            Sat 03 Aug 2024 06:04:21 +0000
asID:                     58212
IP address blocks:        2a0f:9400:7389::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 19:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6e:81:0d:57:d1:d5:45:24:50:12:3a:04:d5:12:29:58:b5:c5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Aug  5 05:59:21 2023 GMT
            Not After : Aug  3 06:04:21 2024 GMT
        Subject: CN=8383F8CC38B7E42AE555BF155A9DBB970F9FB1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:01:c3:4c:d5:fd:0c:c2:34:10:47:32:eb:
                    c5:f2:f7:8b:42:c6:9c:04:c0:9d:dd:51:2d:b3:0b:
                    67:54:d1:dd:79:31:08:ff:28:65:1b:8b:08:80:60:
                    b3:42:be:d5:f3:ba:44:90:07:a1:e2:31:59:97:6f:
                    80:30:2a:7d:c6:69:e7:b6:83:14:21:57:ce:90:83:
                    4e:48:81:92:74:9b:40:96:99:b6:ad:a1:2c:3e:64:
                    1f:a5:07:aa:84:13:b8:fb:dc:d9:84:d0:06:a9:6d:
                    f2:47:32:ea:11:50:85:02:29:24:ee:b1:a7:b3:c2:
                    e7:d8:fb:55:c1:47:38:88:26:44:2b:70:db:a7:84:
                    75:a6:f0:47:bc:83:30:a1:f3:a5:f8:6b:60:08:60:
                    2e:d0:a3:28:ee:dd:b3:9e:e3:0e:31:10:c3:45:f0:
                    47:c6:ac:b6:0e:bc:91:bf:27:14:23:f4:0c:15:27:
                    14:4a:a4:b8:e6:27:20:7e:24:fa:a7:38:8e:d6:11:
                    1b:27:22:85:a5:f1:bf:c0:29:c9:5a:f6:c3:84:10:
                    34:04:90:14:bd:4b:1b:03:ea:c4:c5:fd:8d:ba:e1:
                    82:17:96:4d:8b:5f:1c:a0:89:2c:16:92:e3:fc:6f:
                    f2:d6:dc:2d:b0:96:2c:20:49:6d:31:3c:a0:6a:5e:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:F8:CC:38:B7:E4:2A:E5:55:BF:15:5A:9D:BB:97:0F:9F:B1:B5
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:7389::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:10:48:59:3d:d7:1a:44:47:f1:89:be:9f:f0:c8:fb:84:
         71:ff:e9:73:5c:1b:96:ca:e0:e2:d2:ed:17:97:2d:c3:55:f1:
         42:e0:ee:9a:f4:8d:0f:e3:00:1f:ba:f8:c2:05:39:8e:b4:52:
         44:86:67:e7:36:57:42:6a:df:22:fb:12:69:89:d1:68:ee:f5:
         f5:03:8d:32:13:56:24:c5:30:ba:cf:75:8e:a7:fc:4a:a6:89:
         15:b9:62:1b:84:67:a8:fe:aa:ab:f0:74:44:3b:12:d8:48:1b:
         a3:75:fc:b6:43:b1:c4:d4:14:62:55:ce:9a:ae:5f:4f:86:41:
         5c:55:23:ac:87:e4:4f:d0:f0:8c:0d:ab:ea:18:89:69:ba:a5:
         41:1d:29:61:83:7d:b4:6f:8d:21:46:f8:ba:b2:f5:be:fb:7e:
         d0:5f:dc:bc:a7:d5:28:30:94:63:05:87:0b:1a:e1:bb:b3:55:
         7b:43:d6:cf:57:e2:83:99:32:6f:0f:47:3d:dc:db:96:0e:c3:
         a1:01:5d:b9:f0:56:cd:9a:2d:f1:0d:35:9b:c9:cb:92:41:2b:
         ea:d1:6b:d6:2c:e9:0c:f9:61:6f:2e:b2:60:4b:d1:b2:53:22:
         24:42:3f:54:f5:03:fa:3d:ad:6a:3a:3b:f9:f2:3f:ab:9d:f7:
         8d:c7:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org