Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3462613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          BCl6mFFFmWefuQPo/45tGonDlLHok09bRIT0sRsHvVU=
Subject key identifier:   3E:66:17:E2:60:5C:E9:6E:DE:90:BF:56:04:77:BA:26:F6:6B:86:30
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       604108DFC18045F4584FE43B3A079EAC4BFE3722
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 19 Jul 2023 11:54:32 +0000
ROA not before:           Wed 19 Jul 2023 11:49:32 +0000
ROA not after:            Wed 17 Jul 2024 11:54:32 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:4ba::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 01:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:41:08:df:c1:80:45:f4:58:4f:e4:3b:3a:07:9e:ac:4b:fe:37:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jul 19 11:49:32 2023 GMT
            Not After : Jul 17 11:54:32 2024 GMT
        Subject: CN=3E6617E2605CE96EDE90BF560477BA26F66B8630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:b9:7a:c2:93:95:fe:02:b7:2e:31:0c:13:
                    f9:20:6c:b0:84:7c:ae:51:34:5b:9b:fd:9e:40:bc:
                    36:57:35:eb:36:16:f6:87:9d:79:4c:18:68:37:ae:
                    e2:cd:b9:02:6f:ed:7b:7d:b6:0d:86:0b:cd:cc:da:
                    79:63:ac:d1:ba:db:0a:09:6d:d1:7f:3f:48:93:67:
                    03:1b:cc:f1:14:3b:11:ef:94:21:06:55:b3:d2:bb:
                    27:56:2d:a7:54:90:6d:df:18:c3:27:f6:67:f5:04:
                    66:1b:e3:cd:9f:11:ca:27:39:81:29:06:f8:94:86:
                    c4:f2:d2:e8:7c:26:76:57:f8:99:63:7d:60:ba:9b:
                    7d:a0:40:b3:31:cc:96:eb:5f:5a:4e:15:8a:40:f1:
                    07:68:e9:9a:13:d6:61:f5:e1:48:9f:7d:70:4a:d7:
                    0a:8d:5e:29:b1:4f:87:f8:14:eb:71:02:a5:40:34:
                    46:1f:65:f1:1f:2a:52:34:e9:cc:3a:90:63:67:8d:
                    ec:05:e5:21:6f:43:c2:54:20:d9:bb:3f:e1:ae:ac:
                    66:45:dd:00:f9:a5:4a:76:4f:b9:6a:a0:de:46:3c:
                    b5:fd:e7:df:59:31:7c:cc:65:48:27:3f:61:c6:59:
                    b6:d3:0b:fc:b1:35:c8:7e:84:f9:a7:e1:54:17:c0:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:17:E2:60:5C:E9:6E:DE:90:BF:56:04:77:BA:26:F6:6B:86:30
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:53:fe:96:2b:e5:00:4e:08:30:2b:16:2f:0c:6f:df:3f:
         ac:1d:50:6c:0c:3d:91:17:d5:13:a6:9b:8d:a3:18:14:d1:a0:
         c9:80:54:fe:11:53:6b:3a:51:99:4c:71:5a:8e:e7:c7:61:b9:
         15:07:b8:70:78:b8:b7:2d:2c:33:41:3b:29:fa:ed:d7:98:ca:
         9c:c8:3a:be:da:61:80:90:64:aa:4b:1d:81:80:45:1f:97:8e:
         82:dc:ad:2d:03:23:31:9a:36:1f:2a:a6:51:33:ce:53:81:15:
         d2:44:79:d9:5a:d4:84:9b:e4:1b:80:9f:da:68:58:d5:1f:c5:
         78:b0:55:e4:66:b9:ae:3f:7e:66:fc:8c:f4:7d:b7:f3:64:15:
         ac:6f:4d:3a:28:b2:ac:8d:8a:f7:03:16:78:ae:7e:44:b4:ed:
         ed:3f:54:be:c5:cc:1f:9b:27:ef:0b:7c:ef:eb:28:93:c8:4c:
         36:34:1f:91:fe:5c:a0:c7:89:21:56:57:d6:d2:6d:c7:4c:5c:
         c5:fe:7b:cc:2e:19:08:f3:d9:01:da:be:2a:bc:ff:92:bf:97:
         cc:45:f7:1f:4b:35:ca:8f:ef:03:29:75:6a:4a:a5:21:55:f2:
         00:f9:0f:f8:e7:ee:71:94:e6:2f:9c:32:85:15:e8:f8:1b:90:
         58:21:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org