Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e2030.roa
File:                     326130353a646663313a3530303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier:          KePizjVljQPqM6Wu7S902zWyKlZXRu+bQ9LgwQ9UQzc=
Subject key identifier:   B9:BF:0C:97:C9:AF:FC:E3:EF:D8:F8:64:A5:61:4D:E5:9E:23:9B:18
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       4457310B7875BCDC285C8A293903EEC21EFB2942
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e2030.roa
Signing time:             Thu 10 Aug 2023 01:10:57 +0000
ROA not before:           Thu 10 Aug 2023 01:05:57 +0000
ROA not after:            Thu 08 Aug 2024 01:10:57 +0000
asID:                     0
IP address blocks:        2a05:dfc1:500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:57:31:0b:78:75:bc:dc:28:5c:8a:29:39:03:ee:c2:1e:fb:29:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 01:05:57 2023 GMT
            Not After : Aug  8 01:10:57 2024 GMT
        Subject: CN=B9BF0C97C9AFFCE3EFD8F864A5614DE59E239B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d3:f6:76:85:c3:9b:02:15:23:82:cf:0f:ea:
                    c9:9c:a4:1e:35:e2:4f:c6:b8:0b:39:01:6c:c4:9e:
                    db:b4:20:82:27:e4:0e:37:e1:4e:df:fa:3f:19:13:
                    68:12:1a:f9:b5:32:81:26:97:8b:14:93:72:e6:b2:
                    c9:0e:e7:c7:49:c7:83:1b:ce:9f:b2:46:d2:b5:49:
                    50:c2:f0:f0:58:ef:d9:f7:4a:11:75:65:c8:ca:28:
                    7f:c2:15:53:99:91:f4:65:81:d5:32:53:a1:81:77:
                    b9:84:f7:0b:34:78:de:f6:e7:67:ea:a3:c1:1c:bd:
                    4c:a2:8d:c7:40:b9:63:04:14:1b:24:d3:d9:69:db:
                    5b:2a:b7:aa:6d:ca:0f:5d:c9:b0:be:21:0a:d1:6f:
                    0a:0b:5a:05:95:53:8f:f2:7b:1f:1b:6b:1b:e1:61:
                    2f:38:fc:c3:40:96:3d:ce:2d:9e:6e:6a:10:26:47:
                    19:c3:0f:f7:e6:94:83:28:e1:7c:85:28:d6:46:9e:
                    f8:b7:e0:97:34:fa:cd:7b:15:67:86:52:f2:fe:df:
                    83:40:06:02:1b:4f:ed:31:f2:c6:53:c7:c9:a9:c4:
                    93:9f:65:cd:b4:64:e0:f8:7a:bc:40:73:2b:c7:b7:
                    05:e3:ca:3f:75:1e:ae:f2:52:86:44:cf:4c:a4:32:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BF:0C:97:C9:AF:FC:E3:EF:D8:F8:64:A5:61:4D:E5:9E:23:9B:18
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:62:c9:d9:c4:b4:70:ea:5a:9b:ee:e5:04:da:d9:db:84:
         1a:8b:8f:09:3b:7c:63:c8:19:eb:05:f6:c0:f2:8e:1a:b7:c2:
         3a:87:e3:b4:f7:9b:b1:22:87:79:b0:b1:4e:4a:ee:33:0f:88:
         5d:1c:d7:83:62:54:63:9d:76:8b:99:49:42:e9:c8:39:5d:8f:
         05:ac:38:a0:24:d2:8d:27:5e:67:d3:25:39:3c:e4:52:b1:b7:
         ec:14:00:f1:5a:03:a4:b8:e1:f1:b4:1e:99:4c:47:e4:59:ed:
         41:a6:da:b8:79:b2:fe:dc:ca:f5:78:12:0d:fc:1d:2c:bb:91:
         51:92:ba:37:18:3e:02:cc:b8:2f:0c:76:20:6e:7d:1d:32:02:
         6c:39:6d:eb:47:79:fd:e2:16:5a:b5:76:3c:7c:12:1a:65:9e:
         a5:89:8d:90:3d:31:82:a3:de:ef:4c:eb:cb:76:3b:4d:13:a5:
         3d:12:9c:7e:c5:4a:b1:5b:1e:26:e9:69:e9:68:1d:c8:f1:ba:
         40:12:65:39:e6:46:e1:51:f3:4b:2d:bc:f8:4d:64:b3:cb:86:
         cb:95:29:cb:79:84:d2:40:74:78:39:dc:d0:90:c3:2b:7b:79:
         5d:cd:3a:70:7e:72:b4:cd:98:b0:d3:23:8f:22:00:94:bc:30:
         54:25:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----