Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431323a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3431323a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          g5OfrMPL0OnQZazv6wCrZImGj0L6VM3BTAlaljSLaSA=
Subject key identifier:   16:54:33:51:9D:34:BA:A1:11:06:7B:6E:36:AB:E9:66:E3:27:65:98
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       066753E1684E37734485B3352B6D47B2C8746D9A
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431323a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:39:39 +0000
ROA not before:           Mon 08 May 2023 23:34:39 +0000
ROA not after:            Mon 06 May 2024 23:39:39 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:412::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:67:53:e1:68:4e:37:73:44:85:b3:35:2b:6d:47:b2:c8:74:6d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:34:39 2023 GMT
            Not After : May  6 23:39:39 2024 GMT
        Subject: CN=165433519D34BAA111067B6E36ABE966E3276598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:55:97:9a:f5:0f:c8:af:71:59:02:cd:90:82:
                    94:4c:05:9a:ec:f6:6e:67:f2:51:92:29:6a:16:13:
                    76:6e:44:9a:1c:f3:f4:bd:cf:a2:bc:ad:69:e2:33:
                    14:59:b2:a6:87:e4:db:cf:28:7c:b0:28:72:6f:d9:
                    a9:12:cc:da:78:18:57:74:8e:5c:7c:39:30:1e:4a:
                    3c:ea:ec:be:bf:56:6e:6b:a0:dd:1f:17:07:1f:f0:
                    44:95:c6:ef:25:cd:64:9c:8c:17:b2:60:b2:5a:a7:
                    3e:db:6b:9d:17:83:74:68:4a:40:60:92:60:a8:6d:
                    1b:41:ae:a3:50:35:bd:4b:ec:2a:34:f9:a3:2c:2c:
                    77:8f:e8:aa:02:08:a8:74:2d:07:8c:ec:a8:5f:77:
                    7e:10:00:56:d5:33:92:2a:d8:47:92:27:cf:15:45:
                    49:5f:27:3b:f9:60:42:65:46:e1:90:58:be:38:ae:
                    7a:3f:ee:04:ac:9b:79:c0:88:64:81:67:5a:f3:27:
                    3e:36:00:85:4d:be:fe:8d:9f:75:17:38:24:1b:a0:
                    9b:59:e9:10:da:90:9c:df:75:88:fa:ad:9f:99:b1:
                    79:39:c5:70:84:d0:08:fc:ee:66:e0:23:4e:8b:99:
                    2f:ff:bd:00:f2:b5:39:74:c2:55:31:34:97:e3:4a:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:33:51:9D:34:BA:A1:11:06:7B:6E:36:AB:E9:66:E3:27:65:98
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431323a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:412::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:15:a9:18:14:9a:a0:a4:29:c2:bc:5d:d5:5d:6b:7f:cb:a5:
         d4:be:f0:90:d7:a2:6b:dc:59:57:9e:08:5c:3f:6b:80:13:1b:
         bc:c2:4d:c2:10:e3:c2:58:bd:69:d2:83:51:65:e2:0b:9e:e7:
         e7:8f:f2:0b:17:89:cf:8d:67:e4:ce:f5:7b:83:bf:1d:8f:0d:
         63:50:e7:d2:8e:41:13:31:20:35:e4:39:50:61:d8:0d:3c:1c:
         ca:cf:85:dd:f6:48:e3:94:c3:01:d3:b8:35:b7:9e:a5:f0:e1:
         d4:9b:52:fa:5b:d3:ed:51:20:97:a1:65:38:1a:1e:98:da:7a:
         3f:b2:ac:19:23:e4:91:95:4d:df:37:0c:e3:26:52:02:7d:91:
         df:12:0d:f7:b7:d0:93:d2:41:77:ae:ae:76:72:3a:e5:80:79:
         66:2c:11:c8:b6:b1:3d:41:30:d3:6d:50:63:81:78:89:03:a4:
         ab:b9:80:34:df:1b:cf:b1:cd:07:ba:fe:2f:4f:aa:ff:c0:63:
         46:92:84:90:f0:9c:88:88:4f:c5:8f:e5:a9:7c:80:55:0f:a6:
         e3:7c:34:f1:99:c2:0e:32:2f:e4:57:ae:3e:53:4b:7f:e2:03:
         73:36:ab:0f:64:aa:79:74:b6:da:cd:2d:d4:6e:79:d5:fe:bd:
         4f:a4:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----