Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430363a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430363a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          rRPmZsG95vcOGoqfvr0laqHTIvqWanGf+p7B7P5p+0g=
Subject key identifier:   7E:AD:00:0F:F0:12:19:B4:C1:21:D7:1D:61:85:6D:D6:9B:1C:47:EC
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       26C422DA6822C1472905A930790A9D0548FB009A
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430363a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:42 +0000
ROA not before:           Wed 09 Aug 2023 00:57:42 +0000
ROA not after:            Wed 07 Aug 2024 01:02:42 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:406::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c4:22:da:68:22:c1:47:29:05:a9:30:79:0a:9d:05:48:fb:00:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:42 2023 GMT
            Not After : Aug  7 01:02:42 2024 GMT
        Subject: CN=7EAD000FF01219B4C121D71D61856DD69B1C47EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:39:e5:da:33:0f:30:5d:f5:90:9f:f4:f7:
                    5e:f3:10:f1:7c:d3:14:80:b4:5f:b3:13:21:70:7b:
                    9b:88:46:50:1b:3f:ae:24:16:c7:40:d8:32:2c:4e:
                    92:7d:bd:dc:1b:02:bd:6a:5c:15:ff:ba:f4:4d:5d:
                    12:94:80:c1:44:d8:f0:56:98:1f:13:15:cf:4d:0c:
                    91:26:d3:82:64:a2:8e:20:c2:0c:43:45:eb:ec:54:
                    0b:9e:1b:9a:2e:09:7e:6c:fe:0b:75:80:55:bf:32:
                    9c:ad:d7:5d:de:b4:4f:90:4b:bd:0b:9f:8e:87:be:
                    b9:1f:2c:fc:9e:7c:d2:c8:0d:49:b9:76:19:97:5e:
                    ef:c0:4e:ca:98:6e:01:83:52:cf:19:8d:91:dc:05:
                    3a:30:39:b1:d7:37:a6:dc:bb:93:d7:c7:a5:03:be:
                    f8:a1:0c:68:29:44:80:63:88:a7:69:18:29:78:cd:
                    6f:62:cf:94:20:21:d6:5b:ab:69:6f:76:37:ef:56:
                    9c:69:a8:94:20:16:38:94:6e:a8:d6:b2:b0:ac:a5:
                    a4:43:4c:c5:2a:dd:68:93:ff:51:df:4f:51:83:a3:
                    ec:8b:18:27:81:d0:ce:ec:83:c3:18:bd:6b:bc:7b:
                    83:d4:f3:7b:94:d5:87:a1:be:59:52:95:72:91:70:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:00:0F:F0:12:19:B4:C1:21:D7:1D:61:85:6D:D6:9B:1C:47:EC
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430363a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:57:6c:03:8c:89:64:d1:32:9f:25:d4:5d:1c:93:22:a3:
         f4:0d:06:d4:ee:12:49:7f:fb:e9:be:2e:38:71:c5:90:2c:81:
         de:87:a6:3b:0c:d7:9d:67:76:c7:ad:e0:03:64:09:b4:38:5b:
         9f:4b:ad:85:2a:2e:bd:58:31:46:c0:0c:f8:2d:16:15:83:73:
         b4:5f:42:5e:5a:e7:ba:3a:d6:4d:ce:53:82:60:7a:4d:40:1a:
         f9:09:c8:88:34:7c:8a:a4:f5:b1:45:88:54:d2:98:24:8a:28:
         0b:90:6a:d7:f1:a2:07:02:73:d2:36:6f:87:d8:b4:86:1d:84:
         e6:1b:4e:2e:d3:c2:69:ca:e1:95:96:48:86:5a:d9:45:db:08:
         dc:2a:4a:93:b4:61:87:46:ce:7b:58:da:69:a9:ff:6c:b1:7b:
         29:68:e5:39:00:cc:7e:15:e2:9d:51:fb:b1:17:b3:c1:35:ed:
         1a:7d:96:d5:32:01:94:ab:c4:d0:4f:92:16:bb:17:36:c9:34:
         c3:1f:0f:5d:50:60:9b:eb:1c:44:a7:fd:a1:6f:61:da:cb:41:
         e0:a7:56:2c:0f:e1:d6:d7:f9:af:84:76:b9:ec:0b:0e:59:d3:
         17:58:e8:21:81:2c:55:92:97:3d:a7:58:b5:1b:d9:61:23:cc:
         c9:ea:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org