Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3464663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3464663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ieYEsdJtwgMtA+/io1i2lO/iav2CYwFRZnuwiIlTd6U=
Subject key identifier:   B4:1B:23:0F:19:27:30:76:A3:C6:7B:90:91:FD:34:F6:BC:51:B8:96
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       6F105976C2086982D7D6378F741D5B99B8906F65
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3464663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 03 Aug 2023 18:07:26 +0000
ROA not before:           Thu 03 Aug 2023 18:02:26 +0000
ROA not after:            Thu 01 Aug 2024 18:07:26 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:4df::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 10 Aug 2023 01:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:10:59:76:c2:08:69:82:d7:d6:37:8f:74:1d:5b:99:b8:90:6f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug  3 18:02:26 2023 GMT
            Not After : Aug  1 18:07:26 2024 GMT
        Subject: CN=B41B230F19273076A3C67B9091FD34F6BC51B896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:bd:0e:c6:66:9a:5d:86:53:ec:c7:76:15:
                    67:4c:19:c7:0c:9a:3e:8a:e6:a4:91:a7:1c:6d:cb:
                    b7:24:99:08:c2:85:df:1e:12:75:54:f8:6a:f4:14:
                    f5:d6:cb:1b:41:b7:93:8a:d0:d1:1c:c7:22:c5:9c:
                    aa:b2:b4:f9:40:f8:88:b9:b0:e7:e5:f2:21:10:cb:
                    21:4c:7b:15:50:84:52:9d:71:b4:8b:15:88:86:ca:
                    e1:0d:50:7a:c8:5b:93:15:47:53:c4:04:22:cd:be:
                    91:2b:0e:8a:ee:1d:c0:d7:85:7e:4f:86:d3:1e:fb:
                    2e:10:b5:64:bf:48:57:83:87:a4:ae:a3:ce:1c:c7:
                    71:79:dc:38:57:b9:8c:3d:c4:5d:5a:3b:48:aa:47:
                    34:ce:ea:d3:a0:e1:d4:92:26:8a:b2:fa:c3:1e:b4:
                    21:79:b5:7a:73:5d:29:88:97:64:5e:b1:4e:e8:3e:
                    21:8a:e8:d3:e0:08:67:07:7e:e0:66:62:b9:5e:7f:
                    ad:3b:57:4e:80:1a:92:e1:a0:3d:ee:0e:1e:a9:10:
                    3f:33:33:9d:29:86:02:94:d1:7e:0d:f8:54:ec:c2:
                    68:62:78:44:ab:33:fc:6d:8f:4f:f1:f7:0a:d8:11:
                    c5:26:d2:80:c8:1d:1a:3a:c8:44:af:b0:a7:75:c8:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:23:0F:19:27:30:76:A3:C6:7B:90:91:FD:34:F6:BC:51:B8:96
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3464663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4df::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:f0:9c:bf:78:b2:db:c7:97:3c:4f:04:71:e0:94:45:3e:0b:
         88:78:0e:54:b2:15:d4:b4:f8:3b:54:f4:f0:b5:3a:1d:b2:f4:
         17:45:47:05:3a:88:fa:6f:69:cd:9a:6a:82:19:bc:de:3e:26:
         69:13:74:99:4f:24:49:44:fb:d7:c3:a6:35:d5:a1:10:15:f1:
         5b:12:f9:60:48:85:85:c4:52:ac:37:c1:8e:8a:f4:db:ea:c3:
         49:a1:74:df:da:c9:ba:d9:23:42:62:d4:8b:d0:9b:6b:13:11:
         f4:2c:73:61:d8:56:89:26:2b:7c:74:2c:de:b1:35:3a:54:42:
         da:aa:ef:c5:89:35:23:b5:20:ff:ea:f9:66:6e:72:72:da:02:
         53:78:ed:2a:46:75:08:1b:45:20:ec:82:05:cf:0b:60:b9:46:
         a5:97:5c:41:75:a4:0f:98:df:1e:49:58:6e:3a:0d:48:f5:13:
         cc:95:57:e1:2a:48:7b:15:a2:df:ba:a8:f4:4e:0d:63:df:9c:
         68:a5:09:9c:2e:8c:30:97:ab:de:17:66:30:89:46:d4:5c:22:
         f8:ad:8a:23:76:b6:1b:f8:1b:25:4c:23:e6:5c:46:8e:26:11:
         3d:97:01:29:c6:4c:b4:d0:84:f7:f4:55:3a:3f:44:67:26:f5:
         a7:0d:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org