Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3431303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          DVYemRSUZmOaV0nyHKsLyAPmUvfiOb7cXJIMrSp/mSk=
Subject key identifier:   89:0B:F9:19:7C:15:EF:9D:E4:98:28:3B:5E:7E:8C:9B:DF:A5:B4:D8
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       3457E416B344C28E56776F16FC88528C55055743
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 02:41:20 +0000
ROA not before:           Thu 10 Aug 2023 02:36:20 +0000
ROA not after:            Thu 08 Aug 2024 02:41:20 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:410::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:e4:16:b3:44:c2:8e:56:77:6f:16:fc:88:52:8c:55:05:57:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 02:36:20 2023 GMT
            Not After : Aug  8 02:41:20 2024 GMT
        Subject: CN=890BF9197C15EF9DE498283B5E7E8C9BDFA5B4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:93:90:9c:e5:3a:57:2c:2a:f5:cd:dd:0b:
                    b3:f9:b9:94:2a:5f:f0:7e:51:07:37:ce:a0:cc:da:
                    a9:7d:d1:5e:33:af:8a:43:d6:32:f0:32:3b:92:80:
                    d1:00:69:5d:e5:7f:dd:6d:94:11:65:60:7c:14:39:
                    1c:e8:df:f0:77:68:01:0a:60:74:ba:68:73:e9:d7:
                    af:5c:c0:7d:17:f6:ef:fa:78:53:a1:0c:90:08:a8:
                    81:b4:64:af:43:89:c0:03:fd:97:79:7d:ab:34:a8:
                    66:d3:c8:51:53:ff:26:fa:74:4e:35:aa:ab:9c:2b:
                    da:7a:70:27:f9:65:f9:6b:13:7d:e1:9e:3e:da:bd:
                    af:77:45:53:05:3c:a3:33:2e:c3:8b:d5:b2:cf:d8:
                    74:8d:f8:97:d0:ba:38:b0:94:7f:7d:21:c5:08:4f:
                    04:34:6f:08:8b:ae:94:da:ab:b7:0b:41:6c:d2:c0:
                    96:e4:f3:06:ef:47:0f:f6:61:e9:ad:1a:03:c8:5a:
                    59:7e:f5:b9:b0:29:0c:94:0f:2a:a4:4c:5a:6c:8d:
                    03:2b:3b:d2:0f:f7:2e:6e:f1:24:cb:3d:20:3c:da:
                    8b:b5:9a:6e:cb:31:0d:3a:5b:d8:1e:14:fe:84:ad:
                    08:69:b7:93:d9:29:b0:c0:b1:ad:7b:4b:ef:4c:0f:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:F9:19:7C:15:EF:9D:E4:98:28:3B:5E:7E:8C:9B:DF:A5:B4:D8
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:410::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:67:fb:a3:04:83:b9:42:07:19:91:76:64:5e:44:dc:16:c5:
         2c:a8:e4:ae:94:14:1d:a3:dd:14:4e:6f:99:c1:a7:ed:ab:6a:
         6d:53:fb:e9:f8:1e:e1:b3:06:81:2e:bf:b9:5f:e1:4c:27:a2:
         54:de:95:10:a8:60:80:d4:dc:9d:a0:87:b8:23:0b:40:75:24:
         cd:d7:46:ac:62:c7:e3:fe:24:c6:ae:f2:a9:53:4f:53:97:a6:
         db:00:e1:4d:75:aa:e3:f8:d5:4b:11:35:2f:b9:9b:37:f9:95:
         b1:07:82:2d:34:0d:02:05:16:76:84:36:e3:69:5e:3a:26:39:
         38:8b:d8:0b:be:50:1f:6d:25:45:77:e6:85:8e:4f:be:3e:21:
         77:ff:1a:1e:bf:53:4c:ec:75:b8:0e:c0:d2:f5:e1:84:c4:29:
         77:70:7e:de:bd:6b:b3:26:40:81:54:4a:ea:61:ac:ed:ad:a5:
         19:16:06:94:76:80:3e:0a:d8:3d:32:cb:e7:d8:c5:af:ed:97:
         b1:9c:b6:54:ad:5c:6e:5c:18:4b:d3:e3:ef:32:21:27:54:32:
         84:cf:10:47:75:bd:b8:0c:da:8e:0a:55:10:26:51:84:d6:32:
         b8:f7:0b:2f:bb:e1:21:fc:a7:6f:94:d5:28:bd:5f:b9:e3:42:
         8b:c2:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----