Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          +bQLJCFChbTAB6DUOrC4DvR4qtjZvpGg8ooy8GJ3RJU=
Subject key identifier:   9E:E3:4A:91:8C:96:28:4E:23:81:71:41:3D:46:62:A8:BA:4A:80:AF
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       274D988F92B966200AD8F8CC37DA47840F77BCA8
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:49 +0000
ROA not before:           Wed 09 Aug 2023 00:57:49 +0000
ROA not after:            Wed 07 Aug 2024 01:02:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:409::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4d:98:8f:92:b9:66:20:0a:d8:f8:cc:37:da:47:84:0f:77:bc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:49 2023 GMT
            Not After : Aug  7 01:02:49 2024 GMT
        Subject: CN=9EE34A918C96284E238171413D4662A8BA4A80AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:05:d6:40:c5:db:27:97:af:0b:a5:cf:3e:
                    9d:ba:77:e4:f8:54:41:52:5a:40:0c:83:f5:e9:6b:
                    e8:0b:63:5a:c4:2f:4b:5a:b9:74:70:e7:7a:f0:80:
                    f1:03:4e:52:f8:82:a2:3d:fc:10:bf:ac:12:d5:53:
                    92:12:87:b5:8a:d3:cb:9a:bd:0f:17:f1:76:aa:b1:
                    e7:7c:7d:bc:d7:96:75:31:77:67:b5:86:e6:66:c5:
                    57:13:7f:1b:5d:c9:c9:bf:52:22:dc:43:46:0a:89:
                    45:6d:48:7f:b9:b9:8b:46:39:7c:80:22:40:3c:c2:
                    38:2d:c0:a8:a8:86:f4:5e:d4:64:f4:72:c5:52:38:
                    60:0f:7e:d8:59:53:b9:81:44:8e:3a:fb:4f:d2:67:
                    e0:dd:f9:c8:c0:40:00:2c:0c:56:9a:f1:a7:f0:40:
                    a9:5c:c6:ab:36:3e:96:4a:34:79:09:f6:a0:80:b5:
                    62:22:35:f7:01:ee:76:60:c5:53:91:29:58:df:0a:
                    64:c4:6d:36:5f:94:e5:f9:ec:92:81:14:46:9f:8f:
                    f7:1b:05:0d:b7:3b:c6:fb:c8:5a:7c:77:7c:ca:b9:
                    92:bf:6a:ef:b1:99:3d:37:83:d2:a9:bc:db:f0:28:
                    1f:02:87:40:29:bc:f4:8d:99:5a:57:da:db:07:4d:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:4A:91:8C:96:28:4E:23:81:71:41:3D:46:62:A8:BA:4A:80:AF
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:409::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:c9:68:b9:12:28:1b:db:46:7d:0b:cf:6c:75:18:64:6f:
         89:b9:a8:c1:8d:c3:23:e4:a9:21:a5:1c:2a:2b:bf:35:e9:c2:
         e9:87:87:e1:1a:fa:a0:fb:16:32:d0:bf:0c:c0:d5:8d:35:1d:
         94:9a:2f:2b:d0:b0:21:a8:83:9e:6c:b7:20:fe:94:ab:f0:5b:
         5f:72:d9:0f:28:29:b4:fd:91:1f:2a:f9:21:41:53:a4:f9:34:
         c1:71:9f:a1:20:32:3c:82:44:0c:94:7c:09:22:0c:75:02:1d:
         5d:24:ff:77:ab:9e:61:3e:6f:2a:93:a3:27:00:c7:1b:5e:56:
         cb:86:0b:79:51:4c:3f:e3:6a:3c:9a:48:5a:f3:d9:c2:ef:9e:
         4c:51:8a:b3:18:8e:07:13:75:5d:a6:3b:c6:a6:51:20:89:37:
         ed:5f:8c:7c:34:fb:70:a2:2e:87:32:a3:3f:21:7f:01:0c:a8:
         06:9d:ce:a2:68:ac:48:0d:86:4c:b8:6e:0c:31:02:32:5e:06:
         fa:05:85:eb:25:c0:79:8c:b9:aa:4f:99:e7:3f:ad:24:9d:8a:
         b8:1f:c6:da:41:f0:67:fe:4e:ff:d8:64:5d:77:86:80:e6:6f:
         a0:c7:f1:23:c7:9a:51:3d:5e:66:12:f5:d8:45:fc:a6:8b:95:
         be:7a:ca:d6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJ02Yj5K5ZiAK2PjMN9pHhA93vKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA4MDkwMDU3NDlaFw0yNDA4MDcwMTAyNDlaMDMxMTAvBgNV
BAMTKDlFRTM0QTkxOEM5NjI4NEUyMzgxNzE0MTNENDY2MkE4QkE0QTgwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCwXWQMXbJ5evC6XPPp26d+T4
VEFSWkAMg/Xpa+gLY1rEL0tauXRw53rwgPEDTlL4gqI9/BC/rBLVU5ISh7WK08ua
vQ8X8Xaqsed8fbzXlnUxd2e1huZmxVcTfxtdycm/UiLcQ0YKiUVtSH+5uYtGOXyA
IkA8wjgtwKiohvRe1GT0csVSOGAPfthZU7mBRI46+0/SZ+Dd+cjAQAAsDFaa8afw
QKlcxqs2PpZKNHkJ9qCAtWIiNfcB7nZgxVORKVjfCmTEbTZflOX57JKBFEafj/cb
BQ23O8b7yFp8d3zKuZK/au+xmT03g9KpvNvwKB8Ch0ApvPSNmVpX2tsHTc+HAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUnuNKkYyWKE4jgXFBPUZiqLpKgK8wHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM0MzAz
OTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBAkwDQYJKoZIhvcNAQELBQADggEBALwUyWi5Eigb20Z9C89sdRhkb4m5qMGN
wyPkqSGlHCorvzXpwumHh+Ea+qD7FjLQvwzA1Y01HZSaLyvQsCGog55styD+lKvw
W19y2Q8oKbT9kR8q+SFBU6T5NMFxn6EgMjyCRAyUfAkiDHUCHV0k/3ernmE+byqT
oycAxxteVsuGC3lRTD/jajyaSFrz2cLvnkxRirMYjgcTdV2mO8amUSCJN+1fjHw0
+3CiLocyoz8hfwEMqAadzqJorEgNhky4bgwxAjJeBvoFheslwHmMuapPmec/rSSd
irgfxtpB8Gf+Tv/YZF13hoDmb6DH8SPHmlE9XmYS9dhF/KaLlb56ytY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org