Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          rZn4FxWvn+y3lyoQx0uYkXDRiIvngcPhWwkU5ABDTFs=
Subject key identifier:   C8:CB:F2:F4:E9:D3:AC:AD:62:94:AA:A4:C1:68:5B:E8:E4:F3:4C:5B
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       2888D58F845865B0316200B6649FFF6FD2F6D93B
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:40 +0000
ROA not before:           Wed 09 Aug 2023 00:57:40 +0000
ROA not after:            Wed 07 Aug 2024 01:02:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:404::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:88:d5:8f:84:58:65:b0:31:62:00:b6:64:9f:ff:6f:d2:f6:d9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:40 2023 GMT
            Not After : Aug  7 01:02:40 2024 GMT
        Subject: CN=C8CBF2F4E9D3ACAD6294AAA4C1685BE8E4F34C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:af:d9:80:df:dc:52:f0:ad:8a:da:23:a5:
                    ad:b4:d1:cd:ff:3a:a1:1e:8e:b8:c6:9b:d0:f8:7f:
                    b1:9b:da:8e:d4:fb:8e:1a:f1:8c:53:7b:9b:7f:8b:
                    b1:72:06:85:1a:e2:dd:55:90:8b:a3:5d:40:f2:e5:
                    ab:7a:64:36:bf:90:c7:80:d5:41:1b:0b:4b:44:a8:
                    6a:73:fd:fc:4b:c5:a5:13:f4:4f:a8:4d:95:b1:bd:
                    ae:4b:13:c6:da:90:36:41:d8:42:67:4b:ce:0b:7d:
                    60:95:b3:74:59:5c:20:ae:a6:17:15:c5:95:3d:8e:
                    c1:67:bf:21:3d:40:d9:e0:87:e3:2e:3c:3f:36:9c:
                    1e:a6:e6:e0:36:31:73:39:50:62:f9:bf:05:61:3c:
                    a6:83:a4:da:8d:36:f9:cf:f3:98:48:19:98:b5:ee:
                    0e:a9:0c:7d:ce:23:29:cd:52:59:93:40:21:d1:b3:
                    36:c9:c7:d4:0a:62:a8:dc:de:29:1e:2e:e8:60:19:
                    86:b9:4f:5b:ad:c4:4b:6f:e9:25:44:3c:ba:1d:e8:
                    0d:f8:e8:92:27:4a:2a:23:4d:bb:76:b9:98:57:dc:
                    99:28:51:73:2b:a1:78:a8:b3:60:e1:29:ee:34:b6:
                    08:83:8a:66:0a:e4:bd:c3:0d:9a:12:c6:06:ad:15:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:F2:F4:E9:D3:AC:AD:62:94:AA:A4:C1:68:5B:E8:E4:F3:4C:5B
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:404::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:e4:9e:26:9b:1b:a7:ef:75:4f:23:f0:b2:bc:1e:be:14:1a:
         d6:de:57:e1:8f:a0:3e:00:16:d1:ac:ba:cc:48:c2:a6:db:75:
         cb:6b:5e:ac:d1:49:d6:1f:f5:a4:9d:35:96:1f:e8:2e:37:cd:
         2b:86:48:8a:c9:81:b5:87:7e:e3:f2:eb:68:ae:12:ec:35:ef:
         aa:4f:ea:6b:1e:e1:83:17:90:64:5e:4d:fa:61:36:da:a0:48:
         0c:2b:4c:f5:4b:2c:74:83:e2:29:4a:3e:82:3c:8f:c5:32:c9:
         19:fb:92:c7:fc:18:f8:cc:dd:5a:25:98:8d:93:e4:28:62:65:
         58:b7:4c:6a:62:e1:66:c5:97:6e:1a:17:86:bf:fa:3a:d8:cd:
         5c:06:fc:b7:f1:45:1b:14:71:65:f5:39:96:5a:82:55:c1:81:
         0a:4e:56:f0:19:14:b4:3e:71:67:f8:8d:2d:42:c6:95:09:44:
         b3:9c:64:a0:10:e3:ff:db:1c:72:26:5f:84:5e:66:1a:68:ec:
         ff:2a:15:bc:61:86:f8:fb:9d:49:6d:aa:7a:2d:eb:f1:10:e7:
         91:43:db:d5:42:b4:9f:e4:6a:19:26:68:3f:9a:24:df:c3:46:
         01:30:5a:e2:d3:b5:b2:b8:5b:19:22:07:02:06:b8:01:d8:9e:
         1c:fc:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----