Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3531313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3531313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          GQo1GgunSJFHroJjvQiiOu0nOXYkwOK8hu2gEPyQG94=
Subject key identifier:   05:28:43:5A:69:57:B4:31:9B:02:87:41:09:EC:A9:DC:5A:8F:B7:5A
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       75A66B6623375B4866E73B6841F863929C0721D7
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3531313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:27 +0000
ROA not before:           Mon 08 May 2023 23:35:27 +0000
ROA not after:            Mon 06 May 2024 23:40:27 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:511::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a6:6b:66:23:37:5b:48:66:e7:3b:68:41:f8:63:92:9c:07:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:27 2023 GMT
            Not After : May  6 23:40:27 2024 GMT
        Subject: CN=0528435A6957B4319B02874109ECA9DC5A8FB75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:d6:a5:cb:75:45:9b:6d:63:df:1d:ce:92:
                    93:f8:6f:c8:4b:df:6d:d0:56:cc:a4:a1:34:c5:20:
                    2c:55:9e:f8:45:d5:6a:c7:09:c6:d7:ba:ae:ae:37:
                    16:06:f0:ae:57:92:36:54:ea:ff:61:05:c9:5f:82:
                    3c:b8:a4:21:8a:0e:99:f0:f4:45:87:d1:b6:e4:49:
                    84:dd:67:6d:08:e2:a5:d0:98:15:ca:20:02:0d:2f:
                    cd:48:bb:64:db:a0:b0:c1:9c:b7:66:bf:fc:cc:3b:
                    29:8b:aa:4d:40:b1:5d:54:c0:f7:fc:c1:cb:76:07:
                    26:1b:29:f2:4d:41:ea:82:6f:f5:bd:ba:a4:bf:2e:
                    30:5c:15:97:0b:56:b2:80:37:53:ce:79:bd:86:85:
                    69:6c:23:5b:86:b9:64:ee:ad:cf:63:22:3a:e7:68:
                    5c:7e:98:9c:11:c8:d5:68:ee:22:c2:c3:81:83:91:
                    f8:1e:ca:0d:c9:b6:7d:48:46:b5:12:45:0e:08:c8:
                    ec:25:aa:ed:74:5e:25:a8:a9:fb:be:02:de:be:16:
                    54:96:be:b8:e6:d8:66:b8:76:cb:d8:40:a5:bb:d6:
                    e7:5e:a1:9f:a6:f3:ba:57:27:0f:76:d0:e1:3e:8e:
                    27:bb:e8:cf:55:6d:fe:59:42:25:1a:c5:4d:ef:b6:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:43:5A:69:57:B4:31:9B:02:87:41:09:EC:A9:DC:5A:8F:B7:5A
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3531313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:511::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:13:ab:5d:f7:e5:8a:7b:cf:26:89:91:b1:fd:86:ee:1a:ff:
         40:89:57:e4:4c:55:39:22:bd:94:8c:0a:53:dd:b4:7e:a6:0d:
         73:88:1c:dd:71:29:74:ba:b2:2a:ba:33:05:07:3d:85:88:50:
         c2:68:66:67:ba:20:15:e6:cf:a5:49:e4:db:5c:af:07:ba:3e:
         5f:12:31:81:ad:16:13:d4:2e:28:eb:57:6c:40:16:8c:a5:c1:
         5f:53:4d:53:5c:c4:86:fb:08:0b:4e:00:c0:48:25:45:99:ac:
         de:b9:4c:c1:9b:12:7c:d4:f2:43:c6:23:0c:c6:b1:85:0e:0b:
         95:ba:1a:42:d7:d1:c7:65:3a:c6:40:b7:cd:67:66:b0:2e:07:
         51:89:c3:76:ee:8d:96:9e:19:ca:bb:ab:4c:2a:95:69:c8:ec:
         06:e6:8d:40:97:c3:10:9d:35:34:2e:c2:84:27:98:5a:6c:8e:
         43:af:5c:34:f8:bd:c8:d9:86:67:ac:a4:c3:f1:dc:ab:80:ad:
         c5:08:42:a8:7c:c8:32:93:b0:a0:f0:2b:ec:29:51:81:db:08:
         f4:46:f0:5f:b4:ad:17:e6:4f:3d:30:9d:3d:f6:ea:d6:89:c5:
         4a:99:57:91:2f:bc:cd:66:f8:3c:8f:b7:11:f8:92:ba:67:d7:
         38:2f:f5:da
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUdaZrZiM3W0hm5ztoQfhjkpwHIdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA1MDgyMzM1MjdaFw0yNDA1MDYyMzQwMjdaMDMxMTAvBgNV
BAMTKDA1Mjg0MzVBNjk1N0I0MzE5QjAyODc0MTA5RUNBOURDNUE4RkI3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mdaly3VFm21j3x3OkpP4b8hL
323QVsykoTTFICxVnvhF1WrHCcbXuq6uNxYG8K5XkjZU6v9hBclfgjy4pCGKDpnw
9EWH0bbkSYTdZ20I4qXQmBXKIAINL81Iu2TboLDBnLdmv/zMOymLqk1AsV1UwPf8
wct2ByYbKfJNQeqCb/W9uqS/LjBcFZcLVrKAN1POeb2GhWlsI1uGuWTurc9jIjrn
aFx+mJwRyNVo7iLCw4GDkfgeyg3Jtn1IRrUSRQ4IyOwlqu10XiWoqfu+At6+FlSW
vrjm2Ga4dsvYQKW71udeoZ+m87pXJw920OE+jie76M9Vbf5ZQiUaxU3vtl6VAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUBShDWmlXtDGbAodBCeyp3FqPt1owHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM1MzEz
MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBREwDQYJKoZIhvcNAQELBQADggEBAL4Tq1335Yp7zyaJkbH9hu4a/0CJV+RM
VTkivZSMClPdtH6mDXOIHN1xKXS6siq6MwUHPYWIUMJoZme6IBXmz6VJ5Ntcrwe6
Pl8SMYGtFhPULijrV2xAFoylwV9TTVNcxIb7CAtOAMBIJUWZrN65TMGbEnzU8kPG
IwzGsYUOC5W6GkLX0cdlOsZAt81nZrAuB1GJw3bujZaeGcq7q0wqlWnI7AbmjUCX
wxCdNTQuwoQnmFpsjkOvXDT4vcjZhmespMPx3KuArcUIQqh8yDKTsKDwK+wpUYHb
CPRG8F+0rRfmTz0wnT326taJxUqZV5EvvM1m+DyPtxH4krpn1zgv9do=
-----END CERTIFICATE-----