Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e2030.roa
File:                     326130353a646663313a3430303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier:          lS1PMvGpalrtebtZg6H8f5V3tZ4/aV8XFR5S2aHMCt8=
Subject key identifier:   B5:D0:F4:A2:FC:00:75:20:85:E2:5F:5B:58:69:19:7C:9F:9D:50:30
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       66F6CA547ABF58AAFE78AE03D8B26F256CF7C499
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e2030.roa
Signing time:             Thu 10 Aug 2023 01:10:19 +0000
ROA not before:           Thu 10 Aug 2023 01:05:19 +0000
ROA not after:            Thu 08 Aug 2024 01:10:19 +0000
asID:                     0
IP address blocks:        2a05:dfc1:400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 22:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:ca:54:7a:bf:58:aa:fe:78:ae:03:d8:b2:6f:25:6c:f7:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 01:05:19 2023 GMT
            Not After : Aug  8 01:10:19 2024 GMT
        Subject: CN=B5D0F4A2FC00752085E25F5B5869197C9F9D5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:70:0e:8f:86:f4:da:18:58:7f:25:eb:b6:
                    29:7b:c6:90:dd:f1:2d:ba:ab:b1:ea:54:5e:dc:23:
                    dd:60:bc:62:b6:ec:93:d2:3a:12:13:85:97:04:e5:
                    e5:44:a1:a1:c3:ef:8a:db:8e:57:1a:8b:5a:b3:94:
                    52:e3:08:ae:b1:5e:04:79:43:1a:0d:3b:64:1b:bd:
                    69:a2:fe:46:6d:6a:68:72:13:73:c0:c9:97:4f:78:
                    b7:fe:50:36:6f:1e:a0:ed:d3:ce:ed:0d:e9:ec:55:
                    87:c6:cb:f5:84:9c:48:7c:31:dc:32:97:c5:d1:3c:
                    9d:b0:d0:04:7f:ab:ba:f3:39:d1:6f:77:80:22:21:
                    98:ac:41:6a:6e:a1:30:0f:1a:ca:7a:50:83:c9:28:
                    ec:83:41:30:13:71:89:39:44:a7:9f:c6:77:cc:95:
                    48:31:8d:ec:3d:5e:42:e3:d2:2d:61:f3:60:ed:64:
                    df:39:97:72:2f:ce:43:ac:28:61:c1:ad:01:98:89:
                    e7:73:1c:54:37:15:7a:2a:83:0f:50:72:e9:a6:61:
                    21:57:e8:b7:1f:a4:3d:e6:f5:0c:2b:30:4c:e1:53:
                    8a:79:d0:17:b8:0f:3a:95:4d:59:ff:b5:e4:1e:ae:
                    d6:04:bb:6d:16:6e:5d:28:65:8f:1f:f5:0d:bb:d2:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:F4:A2:FC:00:75:20:85:E2:5F:5B:58:69:19:7C:9F:9D:50:30
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:4c:5c:8a:75:90:b6:64:08:cc:c7:27:28:61:eb:cc:49:
         9d:9c:c4:b9:b9:0c:58:b7:63:33:61:f0:00:ea:fa:61:4d:8d:
         0e:f7:68:21:6f:77:fd:d1:6e:77:e8:36:39:89:6f:d6:04:71:
         9f:88:a8:f5:83:11:0c:a9:6e:48:e6:1e:4e:2b:01:e7:3b:af:
         5b:67:5c:ad:20:f1:9e:33:ea:c6:ab:9b:79:b8:c4:d8:43:92:
         3b:0c:e1:8b:2b:2a:8e:2d:64:c4:1d:38:b0:0f:78:30:90:e8:
         cf:f6:59:10:d1:ee:79:af:cc:51:22:75:47:20:d5:bb:98:27:
         d6:00:d0:09:73:65:98:54:91:26:61:48:5c:b0:b2:82:9e:9b:
         44:e2:2c:33:43:80:b0:19:31:f3:aa:51:e5:5b:dd:b3:09:04:
         39:cc:b7:41:9d:ae:68:e2:45:1f:24:71:16:3b:55:d4:04:cb:
         86:b4:38:85:af:65:56:70:1d:52:99:c0:38:ef:ed:19:e7:b0:
         06:d9:8e:3f:63:c3:5c:88:64:c6:cf:58:c3:cf:2d:86:7c:8e:
         8f:03:9e:69:ca:dd:05:af:c6:1d:11:1f:86:70:d7:a1:6d:27:
         da:ed:aa:d7:f5:7c:5c:2b:5c:c4:9f:b7:6e:8c:78:16:33:36:
         7d:7d:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org