Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3430663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          pOdyOgxm1wfZGtYVgnB8VnRLPNiCzX68MNgeYPM++1Q=
Subject key identifier:   AF:C3:87:C0:6E:66:3E:93:3A:E4:72:88:15:3F:4A:A3:72:05:BA:26
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       79A0408031ED0D8175293B9CAC77B6B2A7EBE419
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 09 Aug 2023 01:02:37 +0000
ROA not before:           Wed 09 Aug 2023 00:57:37 +0000
ROA not after:            Wed 07 Aug 2024 01:02:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:40f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 00:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a0:40:80:31:ed:0d:81:75:29:3b:9c:ac:77:b6:b2:a7:eb:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  9 00:57:37 2023 GMT
            Not After : Aug  7 01:02:37 2024 GMT
        Subject: CN=AFC387C06E663E933AE47288153F4AA37205BA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:0d:a4:8d:c0:99:d8:f1:01:02:5d:f8:36:
                    69:59:23:1a:ff:4d:d1:0b:a8:0f:d5:54:b6:36:25:
                    dc:02:58:03:8d:c0:46:11:a7:5f:cd:c5:01:ab:48:
                    e1:5a:f3:c8:38:f8:06:98:30:a4:76:96:7c:87:a9:
                    03:71:9e:08:3a:47:b8:7c:fa:2f:ba:f9:8f:5a:16:
                    ce:80:7f:e5:2b:69:b8:70:09:e0:de:3d:ae:e3:87:
                    ef:c4:04:8d:d4:f7:f7:18:ca:23:6e:ac:50:a0:25:
                    15:92:22:ec:b8:74:ab:04:08:43:63:e4:64:80:f6:
                    d9:d1:46:31:27:af:51:68:a6:25:c8:09:60:23:c4:
                    95:94:19:cc:1c:98:f2:fb:22:1c:7d:fd:0d:82:e7:
                    a9:63:fa:ee:2b:ff:c5:7a:79:46:75:45:fa:e6:49:
                    6d:c0:e4:48:a2:1d:f0:c7:b6:05:fa:68:c6:eb:8d:
                    f2:5a:0a:36:b0:50:b8:79:14:cc:bc:ad:62:ae:72:
                    43:0f:ca:5b:41:0e:c2:6a:62:b5:1c:85:4e:61:e4:
                    f3:71:2e:c6:98:8e:4a:11:1f:20:d4:e8:5f:5e:7e:
                    44:c6:af:a5:61:e0:63:c3:a7:1a:37:d5:64:aa:77:
                    66:50:c8:46:86:26:0e:a8:9d:56:c6:f5:bb:50:87:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:87:C0:6E:66:3E:93:3A:E4:72:88:15:3F:4A:A3:72:05:BA:26
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:40f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:75:18:6c:67:ac:24:3b:09:0c:97:b7:23:75:3a:e6:ec:
         92:bd:25:67:6a:c6:53:d5:03:45:f6:60:a0:c9:a8:93:0a:39:
         e2:e6:3e:6f:15:f1:81:42:97:6b:f0:38:40:b2:22:af:49:e5:
         56:a1:f9:d6:99:9f:b2:38:28:07:5a:90:89:3b:c0:15:8c:2c:
         bb:ef:56:ff:79:62:d5:58:ca:1a:8b:4a:c9:f4:63:52:4d:5e:
         3f:5c:d4:09:3e:69:ad:15:9a:af:4d:9a:c9:44:a2:81:70:3e:
         88:7e:ec:ff:66:a8:b4:8f:f2:8e:7d:27:91:c1:0b:11:55:54:
         2e:20:a8:37:2a:18:d6:87:04:34:db:e3:8b:eb:ae:9c:0e:b4:
         37:0a:4e:93:cc:ed:bb:fc:98:eb:32:ef:c5:17:61:16:39:b9:
         eb:15:5f:6f:29:cf:67:04:7f:6d:b2:67:97:3e:53:69:d8:32:
         f6:94:ed:c2:51:8c:b6:0d:55:e4:bf:21:c7:b4:b0:ca:2d:ac:
         6c:d8:92:9f:fe:89:93:3b:e1:ed:93:9f:44:ec:96:4d:1b:1f:
         2a:fd:b0:b2:88:27:9d:ea:5d:6f:ea:52:db:49:82:64:0b:68:
         2d:a5:d2:d8:9f:38:f8:9f:cb:19:0c:5c:18:ab:2f:25:51:7a:
         4b:a9:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org