Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          U1v/salx0meItfOsB6MhIJwtZFYiRePYPdfBER2uTDU=
Subject key identifier:   A9:43:92:2E:2B:AE:D1:3D:F2:E6:79:6F:89:AC:E1:87:7F:B0:F0:D0
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       4A61FFD8FB7DC4B9FA163CBF2C81E9BD44EEE798
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:45 +0000
ROA not before:           Wed 09 Aug 2023 00:57:45 +0000
ROA not after:            Wed 07 Aug 2024 01:02:45 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:61:ff:d8:fb:7d:c4:b9:fa:16:3c:bf:2c:81:e9:bd:44:ee:e7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:45 2023 GMT
            Not After : Aug  7 01:02:45 2024 GMT
        Subject: CN=A943922E2BAED13DF2E6796F89ACE1877FB0F0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:4a:f0:28:41:c2:43:45:70:3d:b8:b5:29:
                    83:ab:c0:55:4d:a9:74:d3:cd:12:ee:87:d5:a6:40:
                    73:51:f6:a9:19:4d:34:11:37:a9:94:c8:7d:7b:6b:
                    05:3d:7a:00:2e:86:db:ee:95:f0:b7:37:9d:ef:5c:
                    61:0e:ca:40:18:9f:71:5c:ad:7d:5f:9c:c6:e2:e7:
                    94:62:58:12:80:79:f4:b2:be:60:da:3a:f7:be:64:
                    03:4f:59:d6:0c:96:75:f8:84:34:ab:ff:d0:a0:f0:
                    04:34:dc:1f:fc:e6:ec:cf:ce:24:ce:8c:5d:22:30:
                    6b:40:7a:84:b5:30:08:1f:d2:9a:85:b6:f5:21:8e:
                    f3:b3:93:05:5f:b4:2e:d6:bb:f4:d4:ed:18:fc:d1:
                    75:43:79:bf:00:1a:d6:92:f6:93:95:2d:3a:9d:d6:
                    79:e1:da:d5:74:45:c3:5c:83:c9:47:d1:78:9c:4d:
                    28:54:b0:a8:97:29:e2:95:70:7a:ff:88:86:b8:25:
                    6f:d2:ea:ac:89:9d:2b:ff:a5:4e:73:8a:ff:0e:00:
                    fc:6e:5b:a8:d2:02:29:76:7e:57:1d:b3:c9:71:97:
                    0b:24:66:b9:19:eb:c0:69:6b:13:74:46:59:99:ac:
                    5c:7d:8d:aa:c6:77:39:64:b0:b9:25:5f:3e:c1:3e:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:92:2E:2B:AE:D1:3D:F2:E6:79:6F:89:AC:E1:87:7F:B0:F0:D0
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:7b:17:f4:d6:d7:de:33:89:00:e4:c8:94:06:91:f8:33:
         f4:71:b6:f6:20:7b:57:c1:22:35:44:50:52:ac:4c:a1:8d:c9:
         b8:37:c4:7a:ea:f9:70:43:ef:3a:c9:cb:38:11:ea:86:78:3e:
         b5:a7:b6:67:b6:b6:29:b5:66:b2:12:9e:ad:ca:cc:7a:2d:18:
         ad:b0:f3:7a:1d:00:7f:fc:b8:0a:74:cf:07:ed:b6:e1:b8:aa:
         1d:4e:8b:50:78:67:4b:08:fb:39:35:5b:b5:5f:6e:4b:b9:42:
         46:4e:ce:14:8c:66:67:30:e4:63:71:1a:a4:d4:29:15:07:01:
         b7:f3:2a:be:8c:45:d4:70:37:c2:3d:25:51:27:1c:3e:f6:05:
         9b:b4:19:ee:80:81:3f:0b:aa:31:e1:a6:80:07:2b:a0:e2:3d:
         a4:c2:c4:16:ad:61:bf:18:84:5d:2f:84:4f:cf:b5:81:fa:6c:
         20:8b:18:b8:db:c6:f4:a4:7d:97:d3:a1:7a:f6:b1:28:f4:da:
         4c:86:70:73:fd:75:f3:2b:d5:12:46:68:55:3e:f1:6c:2c:e5:
         41:4c:51:00:94:ec:75:95:8b:3c:23:82:83:c3:6f:2a:93:87:
         c5:b8:70:df:aa:42:4e:9a:d2:ff:2f:d6:f7:cd:fa:9d:24:96:
         eb:78:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org