Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3437393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3437393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          cIrNU6OoBcYaRom/18g/J+PXCx7biiD43QALcSRTiKs=
Subject key identifier:   66:28:70:E5:DF:94:1D:AF:6A:81:CC:59:F7:EC:B9:C3:69:5B:77:32
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       14EE32A8A10E225F35144177C8A256F51459A17C
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3437393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:14 +0000
ROA not before:           Mon 08 May 2023 23:35:14 +0000
ROA not after:            Mon 06 May 2024 23:40:14 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:479::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ee:32:a8:a1:0e:22:5f:35:14:41:77:c8:a2:56:f5:14:59:a1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:14 2023 GMT
            Not After : May  6 23:40:14 2024 GMT
        Subject: CN=662870E5DF941DAF6A81CC59F7ECB9C3695B7732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:9c:77:94:ec:ab:11:ba:0e:22:9f:39:36:
                    ec:2f:21:4b:1a:99:d9:b6:50:95:ce:9d:52:0d:f9:
                    cc:9a:ce:e2:6e:7f:83:42:c0:0d:12:4b:54:66:1b:
                    30:2b:70:96:06:37:df:2d:79:62:20:ea:29:e5:09:
                    53:fc:aa:5e:db:3a:30:be:2b:8a:34:94:09:6c:18:
                    ae:84:b8:46:b0:fc:8c:41:f0:eb:d1:41:38:51:46:
                    eb:98:60:7f:f3:3f:0b:97:c2:4f:94:a8:a4:f4:17:
                    ad:6e:6e:7e:91:17:0f:7f:34:2b:21:e2:00:24:e2:
                    39:40:c1:73:af:e4:7d:d6:45:65:5e:58:a1:8e:e5:
                    48:06:5e:35:02:ea:ca:67:f3:8c:46:25:dc:23:b2:
                    e0:90:5f:41:25:bd:d6:a7:72:b0:68:4e:c0:4f:1c:
                    52:a0:91:a4:e5:a3:0a:ac:60:ff:74:f3:8a:61:22:
                    81:e9:34:8b:65:50:6e:0f:f2:a4:8a:ea:13:1c:55:
                    ac:a7:64:01:98:2b:63:ae:14:06:d5:f2:f0:c3:a4:
                    df:b9:d0:3e:5e:a0:0e:63:09:31:77:c0:af:29:86:
                    b7:66:2c:b3:f5:5a:27:f0:82:f7:b4:51:6c:8c:6c:
                    b4:25:02:c9:64:2c:28:c0:b2:78:47:17:70:af:6c:
                    f6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:70:E5:DF:94:1D:AF:6A:81:CC:59:F7:EC:B9:C3:69:5B:77:32
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3437393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:479::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:78:59:5f:46:37:59:82:2a:00:95:98:12:4b:bf:83:21:d0:
         17:7d:15:41:fe:e2:d3:2d:71:8e:7b:ec:48:fc:22:dd:e2:c8:
         62:24:09:eb:09:ac:43:ce:93:2a:72:08:70:aa:d9:15:4e:f6:
         2d:63:ee:37:12:f1:00:0f:43:43:f0:05:cc:fa:6b:d1:96:3b:
         24:7e:10:83:e3:a8:d2:fb:c7:a2:ae:60:79:34:d2:e8:ce:18:
         23:9e:2a:75:eb:df:46:2c:d3:05:ea:fd:fb:43:1e:e5:16:df:
         00:ec:7b:9f:75:e9:e5:08:4b:b1:59:ea:2d:22:68:d1:46:8f:
         a2:3b:a9:51:69:ec:6f:76:f2:4e:55:3b:6d:d6:87:4d:3e:c0:
         e0:fe:e1:88:d2:0d:cf:b6:48:f3:5a:19:3f:2e:86:a5:3b:5e:
         fc:44:0b:d9:d0:64:7a:da:86:c0:25:1f:f9:3a:63:c6:12:5c:
         86:48:fb:66:40:4c:46:5e:f3:7c:8e:d7:19:eb:54:8a:36:d7:
         e1:63:4b:ca:16:ec:d2:08:10:99:97:51:fa:7f:2d:63:b8:8c:
         57:44:4a:05:ee:a9:b8:84:63:c2:b7:89:83:b7:8b:de:4f:6e:
         88:6c:1c:90:83:98:c4:8d:1b:49:ea:2f:7e:bb:31:aa:74:de:
         1a:f6:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----