Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430653a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430653a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          XE3Xfc9A2+imBuXQv8LEynHWN3eFg/WAm0bczYl3hL8=
Subject key identifier:   81:EC:2B:09:8B:21:70:17:5E:ED:D2:9F:BF:3B:4F:E5:CB:9C:7D:4C
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       6EF6C9B1752CE84999A3883F82FC444916AA5FD7
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430653a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:48 +0000
ROA not before:           Wed 09 Aug 2023 00:57:48 +0000
ROA not after:            Wed 07 Aug 2024 01:02:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f6:c9:b1:75:2c:e8:49:99:a3:88:3f:82:fc:44:49:16:aa:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:48 2023 GMT
            Not After : Aug  7 01:02:48 2024 GMT
        Subject: CN=81EC2B098B2170175EEDD29FBF3B4FE5CB9C7D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:48:39:26:e7:65:4e:b7:45:4e:47:40:7a:
                    9b:4f:89:7e:53:a1:16:35:28:42:df:be:6a:a4:72:
                    51:f0:10:33:e0:32:21:fd:a3:f4:5a:fd:2b:55:f5:
                    a0:72:42:01:29:b3:e4:2c:21:55:95:44:51:ce:50:
                    4c:16:af:15:c0:e6:f3:51:02:02:cb:6d:a8:98:54:
                    c6:a4:60:33:48:71:fb:32:08:54:ff:96:38:4a:07:
                    a1:73:b4:bc:a0:c0:28:5b:b5:d3:47:f5:7a:2a:a4:
                    11:3e:49:78:9a:a4:b5:6e:56:f0:09:e6:19:1e:77:
                    16:d5:a2:44:82:71:7e:67:46:3a:fa:17:ca:82:75:
                    20:b4:c8:a1:1e:58:60:08:fe:74:80:6f:45:a7:99:
                    f0:ff:d8:36:3c:f2:fa:f0:42:f2:86:5d:4f:e0:f4:
                    72:da:43:ef:12:28:54:30:d4:45:a6:50:88:c6:b0:
                    7b:9b:fa:42:34:b6:6b:44:2d:9d:d2:7b:ea:fa:19:
                    e1:4b:f1:a1:1b:9a:3a:17:75:8c:05:c3:7c:c6:58:
                    08:04:3e:5e:64:91:3b:c7:59:dc:03:45:b6:cf:37:
                    eb:1c:9b:50:76:e9:52:33:ef:09:be:09:e8:36:20:
                    df:3b:da:ac:c3:ad:32:2b:37:96:7d:97:aa:3e:e5:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:2B:09:8B:21:70:17:5E:ED:D2:9F:BF:3B:4F:E5:CB:9C:7D:4C
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430653a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:ad:05:0c:65:5a:fc:34:e5:21:fa:ba:0f:78:ac:19:69:
         f2:26:a5:5e:26:33:ba:20:ee:b3:f2:7b:b4:00:ab:7a:1a:62:
         16:c6:ea:91:d6:ce:dc:62:35:a0:3b:c4:5f:5b:d9:c0:55:74:
         1e:27:ec:c8:03:61:c2:a0:cb:fd:ac:9d:34:9a:8b:8f:3b:3a:
         1f:c9:21:1b:86:33:d6:d1:05:c2:7e:50:54:80:04:b7:4e:e7:
         c3:1d:f8:d7:43:fb:b0:91:b2:9d:40:3f:64:fb:fb:2e:58:62:
         b1:c4:25:9e:b8:b0:49:f1:28:5b:2a:bf:78:5f:32:ed:b8:8d:
         18:9d:69:b0:f8:21:7d:d5:2a:f8:b0:02:0d:b9:77:75:3a:df:
         4a:15:79:d2:9d:be:29:5a:81:12:7b:37:40:62:8d:d4:23:e5:
         da:3d:c5:ad:7e:61:9c:17:a5:4c:26:e5:f6:10:a0:68:6b:3b:
         85:c4:85:8f:c7:17:01:ca:4d:1b:12:02:79:a5:b6:80:e7:b1:
         db:5b:b5:f7:0f:94:3b:c9:72:cf:71:cc:62:65:94:b5:0f:fc:
         09:92:bc:b8:3c:53:cd:8b:14:b6:4e:b1:2c:70:63:40:f6:bb:
         b2:c7:30:24:14:9f:0b:fe:92:d9:5b:b7:ad:6c:a1:5c:1d:08:
         24:24:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org