Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430623a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430623a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          XkJ1Bw36yVrA1vjRjO/imQSlqfzixPnc8DdcjtFONXE=
Subject key identifier:   F1:88:D0:3E:31:3C:34:06:6B:C7:53:EF:5A:B3:36:FF:5E:D3:D3:17
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       2C1D582B4FFCC552000F9468F1DAFF7BC3B40A39
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430623a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 01:21:18 +0000
ROA not before:           Thu 10 Aug 2023 01:16:18 +0000
ROA not after:            Thu 08 Aug 2024 01:21:18 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 22:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:58:2b:4f:fc:c5:52:00:0f:94:68:f1:da:ff:7b:c3:b4:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 01:16:18 2023 GMT
            Not After : Aug  8 01:21:18 2024 GMT
        Subject: CN=F188D03E313C34066BC753EF5AB336FF5ED3D317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:04:d0:e8:fc:87:46:35:a8:a6:04:2a:37:
                    f3:54:e1:13:7d:bc:5e:42:da:52:5c:d4:24:6b:9e:
                    f4:ab:f9:52:7f:71:1d:e9:dd:6e:c7:8b:5f:37:24:
                    13:f1:e4:02:ce:78:da:f3:9b:eb:64:be:04:d9:55:
                    5c:66:53:12:db:10:fa:d6:d1:86:79:aa:7c:3c:4d:
                    4f:cf:9a:70:e5:33:f8:a6:e8:71:f7:6e:c1:a0:aa:
                    d7:43:b4:08:04:fb:3c:83:96:e4:05:df:28:10:af:
                    05:ce:06:49:21:4e:7f:54:d6:e0:3a:2c:59:30:ac:
                    92:b6:a4:d3:9a:be:41:26:85:e1:84:26:34:22:2d:
                    d1:fb:86:7d:50:2e:60:f0:fc:b4:ab:63:73:d6:13:
                    71:b3:3c:44:46:42:b7:9a:76:7c:cd:51:5f:0a:6d:
                    e7:97:00:3a:dd:01:b7:45:2f:a3:87:ee:f9:93:e5:
                    54:03:01:22:1e:9d:84:b5:44:f3:dc:a6:47:9b:51:
                    39:5c:f7:37:b3:db:d6:ac:16:3f:30:7d:e7:c1:8c:
                    8d:52:45:b2:8c:de:fb:3a:db:70:47:56:e6:f0:7d:
                    40:ef:08:ed:88:bf:87:0c:41:49:5d:1b:45:d9:9f:
                    28:da:3c:dd:22:5a:41:7c:19:8a:f9:47:55:52:23:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:D0:3E:31:3C:34:06:6B:C7:53:EF:5A:B3:36:FF:5E:D3:D3:17
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430623a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:c5:e4:8d:66:48:8a:94:89:62:a9:14:2f:89:1a:c8:ce:
         4e:cb:71:1b:b5:71:ca:bd:d5:8e:7a:70:7c:49:ba:ae:ae:fb:
         4f:d1:12:d6:8e:b9:ea:b5:e4:f8:29:bc:1f:9e:4b:00:e3:53:
         85:6f:28:ad:bb:d2:e0:3f:7b:24:2f:1a:1d:24:62:50:2e:8a:
         e6:eb:b2:1a:2f:d8:b4:fb:90:9b:ef:54:d8:0c:6d:67:ce:fb:
         a5:07:af:35:c3:00:71:2f:81:45:c2:b0:fc:d6:17:5e:d4:ba:
         76:26:f1:38:44:27:17:98:e6:82:d5:05:e7:65:e6:93:72:8b:
         ae:ed:e3:de:97:19:3c:3b:f5:1b:13:71:77:0b:f7:46:01:d5:
         96:4b:1d:22:c0:24:ee:cc:bf:9b:d4:52:c7:15:38:b3:b3:58:
         40:69:cd:f3:7e:47:64:9f:d0:b3:70:93:f7:0b:4f:42:ce:2f:
         76:ce:b6:11:dd:f9:67:f1:8a:32:b6:e7:e1:ae:03:f1:39:4c:
         2d:e4:5b:4a:c7:5f:43:27:6f:00:f2:15:f4:9b:1a:08:9a:35:
         6d:5f:be:d7:3e:b8:21:98:99:06:db:5a:42:af:a8:90:08:24:
         92:5c:db:ac:af:3a:ce:0d:2d:24:ac:a2:c4:68:d2:c0:cb:4a:
         1b:0b:5d:9a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIULB1YK0/8xVIAD5Ro8dr/e8O0CjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA4MTAwMTE2MThaFw0yNDA4MDgwMTIxMThaMDMxMTAvBgNV
BAMTKEYxODhEMDNFMzEzQzM0MDY2QkM3NTNFRjVBQjMzNkZGNUVEM0QzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVATQ6PyHRjWopgQqN/NU4RN9
vF5C2lJc1CRrnvSr+VJ/cR3p3W7Hi183JBPx5ALOeNrzm+tkvgTZVVxmUxLbEPrW
0YZ5qnw8TU/PmnDlM/im6HH3bsGgqtdDtAgE+zyDluQF3ygQrwXOBkkhTn9U1uA6
LFkwrJK2pNOavkEmheGEJjQiLdH7hn1QLmDw/LSrY3PWE3GzPERGQreadnzNUV8K
beeXADrdAbdFL6OH7vmT5VQDASIenYS1RPPcpkebUTlc9zez29asFj8wfefBjI1S
RbKM3vs623BHVubwfUDvCO2Iv4cMQUldG0XZnyjaPN0iWkF8GYr5R1VSIzMzAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU8YjQPjE8NAZrx1PvWrM2/17T0xcwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM0MzA2
MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBAswDQYJKoZIhvcNAQELBQADggEBAF4yxeSNZkiKlIliqRQviRrIzk7LcRu1
ccq91Y56cHxJuq6u+0/REtaOueq15PgpvB+eSwDjU4VvKK270uA/eyQvGh0kYlAu
iubrshov2LT7kJvvVNgMbWfO+6UHrzXDAHEvgUXCsPzWF17UunYm8ThEJxeY5oLV
Bedl5pNyi67t496XGTw79RsTcXcL90YB1ZZLHSLAJO7Mv5vUUscVOLOzWEBpzfN+
R2Sf0LNwk/cLT0LOL3bOthHd+WfxijK25+GuA/E5TC3kW0rHX0MnbwDyFfSbGgia
NW1fvtc+uCGYmQbbWkKvqJAIJJJc26yvOs4NLSSsosRo0sDLShsLXZo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org