Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          OgDwSJvP8qCZppEelMNVsTVqeILIqx5qsqGQiqQ+Bf0=
Subject key identifier:   0F:92:84:76:A7:BA:D5:9A:5C:EE:B6:1A:36:46:1F:51:D9:F3:28:04
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       48B2CFF6887823556BFBC38D5312C6A75AEE3A11
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:44 +0000
ROA not before:           Wed 09 Aug 2023 00:57:44 +0000
ROA not after:            Wed 07 Aug 2024 01:02:44 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:401::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:cf:f6:88:78:23:55:6b:fb:c3:8d:53:12:c6:a7:5a:ee:3a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:44 2023 GMT
            Not After : Aug  7 01:02:44 2024 GMT
        Subject: CN=0F928476A7BAD59A5CEEB61A36461F51D9F32804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:3b:5e:7b:ce:e7:46:56:22:b2:34:b6:08:
                    95:83:a4:43:6d:75:5d:07:81:4f:f7:82:66:76:e5:
                    1b:ce:2e:6e:6a:37:52:51:ee:10:51:d7:2d:36:09:
                    93:a5:99:18:27:43:f3:ae:e1:e8:58:f8:d8:40:08:
                    1e:c0:11:dc:90:b2:dd:d2:1d:4e:0d:48:25:c9:93:
                    5b:98:dd:7f:d8:58:32:1e:bf:e6:dc:f0:3f:c2:98:
                    1d:11:5c:2e:fb:f9:3d:80:89:81:5c:f4:53:e0:26:
                    54:be:0e:28:02:5a:a4:f6:d0:2d:6d:ef:9d:60:38:
                    28:67:0b:34:5f:ab:24:ef:96:6d:61:f2:d5:78:1b:
                    11:fd:a8:89:26:b9:70:c4:44:c7:4f:9f:85:36:82:
                    7d:a6:8c:48:99:a5:06:26:bd:25:d9:ac:52:55:88:
                    63:1c:0c:f0:9f:f5:76:ae:61:1b:76:6d:49:6e:65:
                    5e:6c:90:98:e4:8b:9b:08:13:38:c2:e6:36:5d:a2:
                    b6:19:12:3c:2d:1f:14:44:84:57:73:f3:9d:e9:3d:
                    4f:77:bc:c3:e9:9f:2d:f2:d1:6c:83:f3:8c:44:07:
                    65:9f:1f:7a:71:76:aa:09:7a:72:84:be:b0:d7:e2:
                    78:1c:79:54:cc:66:88:c9:8a:22:19:a1:81:a2:ba:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:84:76:A7:BA:D5:9A:5C:EE:B6:1A:36:46:1F:51:D9:F3:28:04
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:401::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:91:71:86:b1:18:4a:a1:eb:b8:8f:bb:bc:ae:7c:69:98:f0:
         9b:f8:b5:26:1a:2a:c2:c9:ba:a0:bf:29:17:28:95:51:d5:00:
         25:7c:6f:a3:43:16:6a:b0:e8:c5:c0:ce:ad:57:f7:7d:45:a0:
         a0:18:61:91:68:74:9f:6a:73:07:bb:cc:1f:60:3d:70:f2:83:
         09:05:26:23:3e:36:52:04:a4:c1:84:db:63:98:af:39:78:e2:
         e3:7d:da:50:cf:dc:61:7e:15:75:1e:59:bc:b6:63:e8:b2:70:
         d6:bc:02:4b:43:51:df:bf:29:45:45:7c:e2:20:d0:c5:03:9a:
         3e:61:60:c2:36:a7:0b:a6:1f:1a:a3:c0:24:63:c8:de:ba:01:
         f0:fc:f2:28:53:1f:05:b3:3f:94:4c:05:f6:86:fe:f9:8d:e6:
         f3:15:9b:69:86:49:9c:aa:bc:60:ed:89:c7:89:d2:6b:9c:f6:
         c0:7a:85:e6:42:b1:ef:9b:10:10:44:28:2a:e2:04:eb:01:c1:
         a4:43:6e:58:9e:fb:dc:fb:77:44:7d:ad:07:58:05:48:5f:6d:
         c7:9c:08:b0:2f:b0:72:88:0b:88:31:31:72:7e:55:28:71:e5:
         8e:66:78:2e:9d:f2:e7:c0:82:2c:57:ad:ef:9f:4c:90:00:3a:
         92:76:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----