Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430633a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430633a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          un8EO+c5jqgQae/jv/d9e+GStCWJwzH0iTyH1o55neU=
Subject key identifier:   EA:BF:62:A7:D4:D5:47:85:0D:80:B4:A5:69:AE:C0:C7:08:4F:BC:7E
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       0602EAF6A2EAF6DACD133E1C65FB4133198485E5
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430633a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:47 +0000
ROA not before:           Wed 09 Aug 2023 00:57:47 +0000
ROA not after:            Wed 07 Aug 2024 01:02:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:ea:f6:a2:ea:f6:da:cd:13:3e:1c:65:fb:41:33:19:84:85:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:47 2023 GMT
            Not After : Aug  7 01:02:47 2024 GMT
        Subject: CN=EABF62A7D4D547850D80B4A569AEC0C7084FBC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:35:0c:89:85:3a:67:49:8b:17:84:67:26:
                    2e:77:b4:79:0a:03:60:61:c3:c4:f0:22:f7:86:6d:
                    9f:45:30:1b:75:cf:a8:00:f7:a1:2d:80:84:ca:f5:
                    d2:e9:8f:d6:4c:4c:1c:e6:56:ce:c0:a4:6a:f0:55:
                    46:8d:d9:8e:e0:82:f2:fd:68:0c:82:f9:d8:ba:71:
                    47:2b:ae:d1:8a:05:97:cd:4c:13:cb:8c:14:18:a1:
                    b6:9a:6f:5c:52:51:9f:f5:f0:5b:89:a6:a2:b6:a2:
                    c5:4d:51:1e:2a:0f:a4:f8:e3:81:da:fc:a6:d0:d1:
                    0c:cb:80:b6:81:24:07:ad:ea:87:1c:20:5a:b9:99:
                    8c:d8:ef:c9:71:72:59:f9:12:1c:b5:e2:f9:bb:00:
                    e4:1d:ad:b0:cb:01:80:a9:3f:f8:de:4e:df:aa:e6:
                    a8:75:89:c9:38:f6:94:51:6f:49:09:7c:7b:94:ef:
                    59:f9:e9:8b:55:52:d4:f8:a9:52:90:bf:32:be:59:
                    4c:45:d9:22:a2:61:cd:d8:89:ee:81:3f:f1:b4:c5:
                    4f:9e:84:60:30:d8:b3:df:d2:c2:ac:03:11:7b:a1:
                    3f:02:9b:a4:76:6b:3c:72:d4:6b:21:e4:e5:1e:d4:
                    89:20:c2:2f:9c:6a:d4:cd:43:56:0e:ef:5b:c4:88:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BF:62:A7:D4:D5:47:85:0D:80:B4:A5:69:AE:C0:C7:08:4F:BC:7E
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430633a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:b2:35:a7:1e:d1:2a:d0:d8:f3:d8:9c:f4:54:d7:26:51:
         9e:75:ed:4c:68:e5:d0:3d:26:bc:69:3a:b9:2a:0b:0f:85:ed:
         b5:37:4b:a0:4a:3a:5c:ad:b4:99:b4:25:9a:70:f5:36:01:31:
         14:42:da:a8:4c:8d:b8:39:75:23:13:07:de:13:13:3d:fd:35:
         1b:a4:a7:ae:25:10:98:9b:0b:b7:2c:d4:3a:2f:75:cf:ee:c8:
         6c:2b:2f:32:4d:f4:8b:f4:86:a1:67:91:36:0a:a7:0c:b6:48:
         c2:c8:f7:77:2d:80:35:b7:ff:05:45:72:f7:05:a6:dc:13:11:
         9c:01:e8:e2:aa:fc:bf:4b:d2:ef:b6:e5:ba:57:e5:76:d5:9b:
         a1:bb:94:83:c9:1f:6a:a8:02:a9:8e:cd:19:8a:ca:ca:db:e2:
         3e:30:a9:9f:59:a7:21:25:88:5b:30:8d:87:d6:ae:69:2b:0a:
         22:c0:33:43:66:c6:f0:d0:fb:4e:96:ff:b3:c3:36:9d:08:f2:
         bf:b1:97:88:23:32:0a:29:5c:d0:7a:64:17:f1:2f:8d:50:7a:
         e9:07:d8:b4:a5:00:dd:e3:d9:ba:e9:b8:19:02:b8:4a:9d:22:
         51:d1:70:85:3e:cb:a5:63:d9:bf:45:fb:e5:af:0e:05:5a:a3:
         07:1a:8f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org