Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430383a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430383a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Ad05fx6XuNPwYa3mlok/BIkmoTFvBxv9zwEgEBPSIvY=
Subject key identifier:   72:35:EC:53:FC:D3:07:71:5A:4D:FF:08:72:91:6C:0E:41:6C:0C:A0
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       7DA5A6672FAD44B72E3DBB2208FDE53EEEC6CD94
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430383a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:50 +0000
ROA not before:           Wed 09 Aug 2023 00:57:50 +0000
ROA not after:            Wed 07 Aug 2024 01:02:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:408::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:a6:67:2f:ad:44:b7:2e:3d:bb:22:08:fd:e5:3e:ee:c6:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:50 2023 GMT
            Not After : Aug  7 01:02:50 2024 GMT
        Subject: CN=7235EC53FCD307715A4DFF0872916C0E416C0CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:2f:d8:de:aa:0b:de:41:8d:a7:5d:29:7b:
                    2f:9a:9a:61:1d:8a:81:b3:1d:e9:3b:93:cf:a9:0a:
                    90:95:31:bb:0a:8b:fa:50:56:e2:06:2b:a0:17:e3:
                    d1:e2:cc:ef:2c:6a:6d:1a:fa:47:d6:78:19:9b:4e:
                    7c:bd:46:05:1a:bb:2e:fc:f0:3c:ec:7c:9a:fe:62:
                    b9:4e:0b:89:26:86:90:1a:1b:c6:3c:c9:e7:b8:46:
                    03:ed:2b:2e:07:5b:43:77:d7:2f:1e:48:16:02:7f:
                    4f:78:29:cc:1d:31:11:1f:a6:ba:b8:8e:73:c9:8a:
                    43:11:89:dd:1a:f3:03:09:b8:7f:0b:b6:2b:b3:0b:
                    bd:c1:05:b8:ce:db:5c:45:e2:0c:28:66:29:fa:e8:
                    db:2c:23:cd:a4:b2:c6:55:17:5f:f9:8f:61:d7:6c:
                    cc:6d:fa:29:56:20:22:27:f7:2e:9c:3c:92:13:8f:
                    15:54:a2:a6:61:71:09:d3:27:54:6d:e2:2a:61:3b:
                    a3:c8:40:1d:cb:5d:da:f9:0c:07:36:88:8d:25:ce:
                    5a:8d:40:39:02:56:fb:f7:4e:aa:4b:ac:3a:2c:1d:
                    63:6f:e4:48:b3:df:39:87:c9:e8:18:cd:c7:36:ad:
                    b2:b0:3e:b9:44:1a:4a:1f:f7:ea:ad:89:5b:f1:c1:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:EC:53:FC:D3:07:71:5A:4D:FF:08:72:91:6C:0E:41:6C:0C:A0
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430383a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:408::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:2e:ce:30:2b:78:78:6c:33:02:88:0f:ea:b8:20:c9:89:cd:
         1d:7e:0e:15:ea:a5:5d:65:88:f1:92:f7:90:30:4f:d9:62:ce:
         4a:54:c3:16:c0:07:8e:bf:0d:10:6b:a6:05:74:9f:b2:87:c5:
         10:80:6d:e9:d1:5d:20:8b:d3:8a:ef:be:fc:e9:d7:e3:bf:c4:
         be:43:70:a2:54:29:32:b4:b6:c8:ec:fa:ce:62:4f:11:bf:b7:
         01:7f:c7:31:9e:ed:f9:20:88:0f:fd:f2:e3:d4:48:ab:0b:ff:
         0d:81:32:27:46:5c:2a:37:8a:57:6a:ae:c5:40:20:99:a0:20:
         08:92:7b:a3:f3:1a:81:cf:af:24:a3:f2:79:25:6c:98:33:bc:
         7c:c7:b3:7e:32:be:24:9e:4c:22:84:54:f6:4a:69:84:74:d0:
         6d:b8:af:56:60:77:16:ea:ff:dc:e6:58:09:c9:11:d3:63:b8:
         71:97:bf:b2:cf:f8:f6:d5:84:9b:fa:fe:e2:ab:5b:43:84:eb:
         12:3e:11:bf:b0:11:1e:6a:c8:a6:f0:9c:56:a0:96:e1:2d:50:
         87:f5:fb:38:04:b9:08:9e:27:2e:0c:a5:6d:00:4b:da:10:90:
         00:0f:63:08:74:4b:20:72:b8:0e:48:51:bc:3e:20:46:8b:28:
         00:b7:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----