Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          YrrBSljHs6bbzZv/1+/JaXo6+ReiFCOevso4HRL+k5g=
Subject key identifier:   61:BA:9D:0D:AD:01:09:BD:C9:8F:4D:D4:D9:41:35:B5:9F:98:1A:4F
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       0A3125F535D848CA85609882A4265F0AC885DD0B
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:39 +0000
ROA not before:           Wed 09 Aug 2023 00:57:39 +0000
ROA not after:            Wed 07 Aug 2024 01:02:39 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:403::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 22:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:31:25:f5:35:d8:48:ca:85:60:98:82:a4:26:5f:0a:c8:85:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:39 2023 GMT
            Not After : Aug  7 01:02:39 2024 GMT
        Subject: CN=61BA9D0DAD0109BDC98F4DD4D94135B59F981A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:e5:6d:b2:b7:6c:f4:8c:8b:1a:d1:7a:21:
                    26:19:60:2c:29:31:f5:20:f4:fc:49:eb:36:a3:ec:
                    38:87:e8:8a:61:c6:e9:61:f7:be:77:b4:45:16:19:
                    06:40:c9:99:94:b6:34:63:c4:8f:f6:4d:e8:80:0d:
                    e7:76:8c:5c:e3:db:25:0f:0d:cb:13:8d:b0:5f:5c:
                    59:2a:61:24:1d:a0:ad:b8:cc:e2:dd:42:50:55:26:
                    c4:be:61:e1:60:db:a7:a9:f3:92:d9:ad:b8:46:60:
                    7b:22:73:28:fc:6c:e8:32:a8:02:01:49:44:9b:23:
                    18:ff:a2:03:24:4e:08:2d:1b:83:54:a7:66:83:0d:
                    9b:c6:a8:b3:29:30:b4:b0:0d:ec:de:da:92:28:30:
                    27:0b:fa:74:c1:92:85:2d:5a:8d:d6:e1:ff:a0:f5:
                    cc:17:1a:12:5b:44:d1:02:ac:e1:03:72:cb:5d:70:
                    ab:56:40:49:ec:e5:42:3b:d1:8d:36:b9:7b:23:dd:
                    3b:06:21:7d:2e:64:42:4b:d6:78:ee:c9:8d:75:68:
                    8a:eb:54:99:5b:76:82:dd:67:1f:01:f9:92:f9:52:
                    d9:38:2d:d4:2c:cd:91:55:33:5c:89:b6:b3:e7:f5:
                    93:73:0b:8c:bb:7b:bb:5d:ed:4d:f5:34:40:3d:09:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:9D:0D:AD:01:09:BD:C9:8F:4D:D4:D9:41:35:B5:9F:98:1A:4F
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:403::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:a4:ff:7d:30:8f:e1:1f:ab:36:4b:4d:33:1c:76:0e:a8:
         11:fb:f0:40:2a:85:da:7d:ea:37:46:94:1d:c5:89:12:63:3a:
         c0:2c:02:22:36:1e:4a:ea:8c:b0:68:2d:05:85:92:76:c4:80:
         36:90:c1:c7:cb:9e:d9:45:d3:70:fd:b1:e3:74:f8:ae:67:a9:
         d1:16:1d:5b:4b:f4:11:89:6b:cc:96:9e:4e:b0:b2:af:b5:e4:
         c3:50:d7:f8:cd:b7:72:e8:77:38:c3:b9:bc:56:da:30:56:c6:
         45:27:0a:35:9b:3e:e0:00:40:65:6e:fa:27:9d:fc:f6:82:80:
         83:df:d7:bb:48:00:be:7c:04:bb:8d:d2:f9:38:d6:5f:54:ab:
         85:5d:7a:f7:ef:10:14:f9:d0:2c:a9:bb:ad:29:4d:ca:ee:46:
         3b:8d:dc:5f:1a:63:04:07:c1:6c:a4:10:df:2a:20:24:90:72:
         3a:41:54:0e:f0:3f:3e:3a:02:f3:3e:79:31:f1:78:bc:60:b7:
         ac:cc:4d:68:45:82:a5:0f:bc:5c:1a:6a:27:49:8b:fd:df:97:
         b0:52:fe:a7:ad:55:f0:39:e5:51:a1:05:2e:26:2d:a9:01:95:
         56:97:36:13:cc:72:a5:8c:92:a9:35:75:6c:75:dc:f8:38:ee:
         fe:78:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org