Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          IKYUJC2WT+WnvPdUBPfF3LyDZzuDDcOlxtDdNoPxVLM=
Subject key identifier:   2B:BE:D7:A7:F6:B9:A8:20:A1:B6:6A:97:09:9B:69:4A:C8:E6:8A:42
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       11F37C0CA6D67EC41BDD37E027B1D418646A208C
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:46 +0000
ROA not before:           Wed 09 Aug 2023 00:57:46 +0000
ROA not after:            Wed 07 Aug 2024 01:02:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f3:7c:0c:a6:d6:7e:c4:1b:dd:37:e0:27:b1:d4:18:64:6a:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:46 2023 GMT
            Not After : Aug  7 01:02:46 2024 GMT
        Subject: CN=2BBED7A7F6B9A820A1B66A97099B694AC8E68A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:f1:d6:c8:ce:a5:ac:b2:42:94:22:43:87:
                    f9:9b:c4:9a:27:50:b3:ff:53:7d:21:ee:ce:b2:d6:
                    2d:b7:22:da:e4:61:43:96:03:a1:60:2a:ed:52:8b:
                    76:7e:cc:8b:a1:a2:6d:51:59:00:10:e1:f6:0d:a8:
                    af:df:38:47:33:6a:e4:69:6d:de:54:e8:e4:5d:d4:
                    6c:90:d6:1e:64:fb:57:c5:72:c4:2f:cd:08:a8:a4:
                    b7:33:0b:16:59:d0:72:3a:ed:cc:01:94:43:ed:51:
                    e3:ca:51:3a:a8:bf:30:92:a9:9d:5f:c0:54:d1:bb:
                    d5:c4:e9:81:e9:29:6f:c3:a8:9f:26:57:1a:b7:b6:
                    eb:70:7c:cb:cf:5c:2f:6a:1a:fe:cf:e1:8a:cd:96:
                    88:d3:f5:b9:c7:c0:75:0c:04:a9:59:18:1a:a4:00:
                    41:63:e5:17:17:7f:c4:6a:69:4b:2c:01:44:d0:f9:
                    b7:35:e2:ec:0e:5d:59:a5:1e:27:07:b1:82:e1:93:
                    2a:79:e2:70:17:fe:79:40:d6:60:a9:78:64:de:33:
                    9d:2b:b1:b3:60:89:64:09:e8:2a:f0:b0:0a:38:c3:
                    36:c3:da:c5:a8:b4:a8:7f:9f:4a:c0:62:87:a7:ae:
                    c8:e5:71:56:48:c3:bf:c8:a3:e9:8f:4a:09:01:a4:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BE:D7:A7:F6:B9:A8:20:A1:B6:6A:97:09:9B:69:4A:C8:E6:8A:42
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40a::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:00:17:db:4e:40:1d:29:32:bd:c2:45:c3:a4:e9:1e:89:19:
         cb:53:e6:bd:3e:83:3e:1a:1b:7d:8e:cf:63:49:9f:17:93:aa:
         f9:fd:df:7e:57:81:60:be:bf:48:d0:95:ac:7e:83:11:51:a7:
         06:94:e0:71:d1:6e:3d:bd:96:f7:7c:f9:ba:02:1e:f4:4a:3e:
         eb:76:e5:06:ae:e4:96:9d:42:2d:5c:b9:3d:63:be:a1:e2:c6:
         2c:50:34:32:d9:bc:e2:0a:74:cc:dc:23:14:b5:c3:ab:a2:da:
         4f:a6:48:7c:61:09:a1:19:2e:17:7a:d4:51:3f:d4:e6:0a:f6:
         7e:e9:b7:ed:5f:ce:1d:1c:d6:18:57:db:95:77:13:e2:26:64:
         bd:86:c4:f9:75:6a:8d:20:17:8e:2a:d2:2d:07:be:eb:bb:d4:
         c1:76:94:3e:46:29:e2:40:0e:54:b9:8e:c9:a2:2e:1f:25:94:
         94:b1:0b:0d:68:a9:44:76:0d:a3:88:47:70:02:c5:45:dd:29:
         2e:7c:52:df:a4:a9:e5:6a:02:db:5b:eb:c8:05:4d:16:f8:d8:
         ce:48:b9:b5:e4:81:83:aa:40:57:24:16:7e:81:6a:1f:87:08:
         e4:55:d8:51:d3:a0:6c:21:e9:9f:0b:bd:6d:50:e5:5e:3f:16:
         8e:09:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----