Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          dZnjXwf6ZRfw+2vqRoJ4lCaCRP11x3QNm5zJ9iAZ158=
Subject key identifier:   A2:6D:AC:D4:FA:E0:F9:FC:1E:C3:D5:49:A0:58:BE:12:D4:B4:B7:B3
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       2B1DC9B1E2867AB6A0B43CF1A4BF1A6C3D7619D5
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:39:34 +0000
ROA not before:           Mon 08 May 2023 23:34:34 +0000
ROA not after:            Mon 06 May 2024 23:39:34 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1d:c9:b1:e2:86:7a:b6:a0:b4:3c:f1:a4:bf:1a:6c:3d:76:19:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:34:34 2023 GMT
            Not After : May  6 23:39:34 2024 GMT
        Subject: CN=A26DACD4FAE0F9FC1EC3D549A058BE12D4B4B7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:fb:02:ed:a2:9b:4e:ef:4c:a4:c3:1d:59:
                    71:02:c8:88:fe:5d:ed:b7:3f:d4:be:ef:83:4f:8d:
                    a1:c5:e0:34:62:a8:fc:51:40:9a:94:1b:07:bc:eb:
                    4e:e5:2e:64:1f:00:ae:db:9e:b9:5d:03:aa:55:f0:
                    d1:e3:88:9b:cb:3f:27:68:a5:be:db:e5:81:5e:58:
                    79:e9:09:96:2f:fe:a7:5c:b7:77:87:52:0a:15:34:
                    10:e1:59:ad:23:30:b3:7c:c7:72:b5:3f:1a:b7:4b:
                    14:ec:ee:29:fb:b3:32:4d:b5:d9:6f:d3:2c:f3:a8:
                    1e:af:d7:01:a7:3c:60:6e:1e:32:2b:f3:90:2e:17:
                    aa:6a:23:31:95:36:c4:8a:19:de:50:d2:77:57:bb:
                    02:c0:4f:c0:e3:f1:b2:1f:ac:a6:a4:53:8d:fb:f8:
                    36:ab:65:2b:50:b1:51:fb:b3:ae:19:47:0d:f9:18:
                    f1:61:6a:83:73:5b:03:83:83:a1:54:cb:d6:0f:d6:
                    bd:2e:e1:31:e6:b5:d4:a1:f2:bf:76:52:ff:6d:39:
                    2a:ab:a2:d6:0f:34:1b:17:50:11:6d:9e:5e:f2:cc:
                    a8:c7:d3:62:88:dd:24:2b:2b:c5:70:c2:6e:9a:9b:
                    51:c8:e9:02:66:d6:ce:78:69:a5:b0:7b:33:78:12:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6D:AC:D4:FA:E0:F9:FC:1E:C3:D5:49:A0:58:BE:12:D4:B4:B7:B3
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:02:fe:4f:52:5a:d2:c1:58:19:67:73:86:04:db:6b:e8:
         88:09:01:3d:c4:79:00:bd:9b:24:ac:27:1d:4a:e8:00:10:26:
         86:1a:27:29:6d:d7:ab:c2:54:f8:93:41:27:8a:54:3a:25:5c:
         95:56:b2:35:76:37:51:3c:79:18:bf:bd:50:f9:fd:ee:3b:41:
         bd:31:53:46:c0:9b:01:cc:58:c6:81:7e:31:91:4d:41:3c:57:
         04:f3:46:fb:34:ed:01:2f:3a:1d:ce:37:0a:25:ad:87:95:a2:
         54:7f:2a:3f:b3:3b:a6:16:74:7f:b6:4a:19:28:d0:59:1d:59:
         42:7e:bd:16:58:5b:12:e1:bf:76:cb:9b:73:9e:cd:0a:31:40:
         46:fa:fd:50:5f:50:97:3b:10:d7:5c:65:51:27:a5:33:91:e6:
         30:35:3a:3b:a0:88:be:d0:a6:82:33:2b:ac:2e:72:9f:13:b0:
         96:16:74:9a:cd:1b:e3:96:a3:9f:3a:d9:3e:e2:ba:93:6a:5b:
         d2:b9:11:51:a0:68:4f:d2:a6:d4:73:9c:c2:2a:6b:59:2f:87:
         e7:f3:a2:57:e8:b5:1b:02:d8:37:cc:f4:77:4c:05:83:6d:e8:
         00:63:6b:40:1a:19:1a:ea:27:45:0a:3b:37:77:fc:3c:e5:b7:
         6d:86:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----