Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430373a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430373a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Rg5wsN2yaUZa15eVawzevlaZhcITPR7clblMSN3AS4I=
Subject key identifier:   94:2B:5E:93:6A:64:2E:23:5B:90:3A:0D:E5:25:11:54:79:F8:C0:19
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       18DE45146B37E6B6422F5A7B355AA4681DBFFC6D
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430373a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:41 +0000
ROA not before:           Wed 09 Aug 2023 00:57:41 +0000
ROA not after:            Wed 07 Aug 2024 01:02:41 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:407::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:de:45:14:6b:37:e6:b6:42:2f:5a:7b:35:5a:a4:68:1d:bf:fc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:41 2023 GMT
            Not After : Aug  7 01:02:41 2024 GMT
        Subject: CN=942B5E936A642E235B903A0DE525115479F8C019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:36:76:25:07:22:2d:37:4b:dd:b5:ca:08:
                    ff:6b:ab:78:b8:b5:b8:e9:05:6b:f7:6c:a4:f2:c2:
                    fa:77:75:e9:53:87:f4:5c:b5:7f:44:5e:43:e9:1e:
                    b4:7d:58:61:5e:20:68:b4:f9:4f:68:47:c2:88:d1:
                    92:7f:9e:d4:1c:06:06:c4:d4:7b:74:92:76:62:5e:
                    98:0b:82:79:85:8e:6a:fb:2a:11:ae:db:72:76:2a:
                    63:76:82:8a:25:3e:e1:cf:f7:fd:76:d3:a7:ef:07:
                    b4:3b:a3:82:1b:ef:af:f2:52:f2:a2:d4:9e:5f:cb:
                    cd:0f:13:cc:6b:35:88:f8:da:73:9b:ec:93:82:9f:
                    ba:94:dc:5c:3a:90:84:a9:24:16:cb:18:c6:5e:2c:
                    e4:e3:36:d2:67:72:bf:dc:9b:4a:5c:f7:f6:2b:4a:
                    86:ca:0d:31:9e:f6:4a:16:c5:00:55:1d:be:04:25:
                    50:7d:b9:ee:89:ce:5c:94:a4:99:27:7a:9d:80:60:
                    7e:bd:d9:94:98:35:ee:62:b7:f6:09:5d:9d:55:69:
                    6a:5c:f9:8a:1d:ae:cd:f6:f9:14:a4:02:9b:f4:22:
                    88:97:53:36:c2:78:96:eb:68:fd:45:d8:73:29:b4:
                    fc:4f:d4:bc:c0:6c:31:49:42:6d:0e:ba:c9:18:91:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2B:5E:93:6A:64:2E:23:5B:90:3A:0D:E5:25:11:54:79:F8:C0:19
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430373a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:407::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:36:cb:8a:3c:ca:04:40:5c:aa:5e:c8:ba:4c:d2:0d:ed:
         52:b3:19:d3:6a:4a:e4:9a:86:6e:5c:19:e9:5c:05:cd:8e:aa:
         a2:0a:2c:9d:59:aa:87:20:76:79:e7:a3:46:b4:14:ea:5b:90:
         b0:6c:7e:13:5c:0f:30:65:a4:d8:0c:61:e4:76:56:c5:30:28:
         04:b0:fb:e6:9e:44:1e:cd:2f:c3:a2:57:a2:fc:2d:65:86:ef:
         e8:d7:9c:c6:d7:a6:12:32:f6:b4:7d:a1:40:24:3f:00:a2:4a:
         7b:12:c4:ed:e1:98:5d:d1:d5:d6:e5:c5:d0:c7:71:b6:16:39:
         23:80:82:fa:f7:7d:ea:92:0a:76:d0:b9:9a:fc:5b:f5:3c:fa:
         bc:c6:84:fd:b4:cf:a6:61:c3:05:77:a5:bf:6c:e7:19:88:63:
         9e:b1:87:01:7d:7c:4c:77:23:14:e6:9c:93:07:48:56:f1:9a:
         29:34:12:c5:3b:b6:65:54:84:ca:9d:63:fc:98:c3:35:7e:9a:
         60:7c:3d:6f:e6:3c:56:1d:46:0b:45:ef:b7:fd:28:18:d4:d1:
         bc:5c:e2:58:d4:95:90:d8:4f:08:a6:ba:f9:94:b6:dc:aa:8f:
         a5:2d:3b:e6:7e:9d:3a:36:a9:44:7c:41:16:48:1e:ff:6b:c8:
         ae:63:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org