Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3234203d3e203532303235.roa
File:                     3138352e3139352e3233382e302f32342d3234203d3e203532303235.roa (raw, json)
Hash identifier:          8GGTNWaFmPaAqnlxHyiHvoZrTlI8U3n6Cp+4imm0ci0=
Subject key identifier:   ED:98:BF:9A:E9:98:2A:7C:6F:0E:5A:C5:49:A1:15:C0:79:EB:53:2B
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1F7E32BA29EBB17646B50388B7505547C169FFB4
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3234203d3e203532303235.roa
Signing time:             Tue 19 Dec 2023 18:20:51 +0000
ROA not before:           Tue 19 Dec 2023 18:15:51 +0000
ROA not after:            Tue 17 Dec 2024 18:20:51 +0000
asID:                     52025
IP address blocks:        185.195.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7e:32:ba:29:eb:b1:76:46:b5:03:88:b7:50:55:47:c1:69:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Dec 19 18:15:51 2023 GMT
            Not After : Dec 17 18:20:51 2024 GMT
        Subject: CN=ED98BF9AE9982A7C6F0E5AC549A115C079EB532B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:66:64:4f:52:79:2b:a7:9a:55:d9:16:92:
                    90:ea:df:f2:90:67:40:25:94:6b:d9:87:43:f7:d6:
                    86:5d:01:37:ad:18:89:a6:80:54:6e:06:69:f8:86:
                    96:fc:43:e6:15:ee:b8:c4:34:de:b3:bc:45:55:4f:
                    c3:1b:35:43:6d:e4:76:f3:7f:f1:18:14:20:f0:e7:
                    39:65:38:74:05:dc:fe:ca:9f:2b:cd:0b:0f:19:8e:
                    c8:f7:d7:66:e8:c0:16:ba:4c:20:48:fd:56:7e:36:
                    3e:a1:bc:4c:3f:49:c9:5e:b0:f0:d9:b5:2e:85:f9:
                    b5:a8:2c:4e:c1:85:20:86:f2:3f:60:9e:b7:09:26:
                    37:8a:b9:53:04:da:a0:73:04:d4:8e:b2:d2:14:90:
                    ae:b5:da:48:53:7e:a9:44:2d:15:56:df:33:6b:be:
                    fa:7c:6f:cf:f9:05:60:14:53:06:6a:e1:f7:b3:51:
                    04:c7:81:91:d4:b5:c3:cb:1a:8b:91:8c:6c:2a:d9:
                    a5:87:2a:13:c5:58:96:d8:19:7e:34:48:4b:8e:52:
                    fa:24:a0:70:dd:d3:b4:89:dd:af:c5:13:79:e2:28:
                    72:3b:c0:5c:6f:7c:67:e9:99:0b:7e:27:cf:0f:39:
                    af:e6:7a:2a:c8:b4:ae:34:d8:4d:81:b3:cf:43:3d:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:BF:9A:E9:98:2A:7C:6F:0E:5A:C5:49:A1:15:C0:79:EB:53:2B
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3234203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:0e:ed:44:f1:5a:4a:e5:36:37:be:b3:45:9e:bd:bc:44:
         2f:43:00:62:6a:cd:76:c5:a4:2c:6c:cd:fd:af:ee:eb:28:54:
         48:10:d3:ec:c3:4a:a3:bb:82:51:4a:e4:f0:b3:fe:60:b4:ec:
         57:00:9f:75:2f:c9:08:2c:ca:19:10:dc:59:98:34:df:03:94:
         48:b3:13:b7:83:d0:66:96:44:9f:8b:32:48:6e:55:2d:de:fb:
         4d:9c:3d:e1:29:db:f4:98:9a:92:c3:d3:27:21:7c:1d:be:06:
         32:84:ea:0c:41:33:04:38:6d:8a:6f:f3:5a:1d:5c:8b:8c:35:
         00:3c:29:0c:ea:b0:1d:59:17:55:db:9a:29:8b:a2:16:bc:4d:
         6b:4e:5e:b8:97:61:8d:ee:e0:89:c4:90:8f:97:4a:6f:88:97:
         07:61:40:04:62:ac:a1:c3:02:cd:9e:8b:26:06:7c:43:ef:72:
         54:81:64:e3:ce:79:0c:b2:09:70:89:c6:72:e9:1c:00:c2:d8:
         b9:e2:0b:49:af:70:a6:f5:1a:b7:8c:b6:53:50:4b:d2:80:66:
         61:96:42:82:53:7d:eb:1e:8f:d1:5e:c0:74:e8:91:d8:8c:29:
         64:3c:34:13:97:97:03:a2:d8:54:37:fc:55:d7:f4:3f:72:11:
         71:ae:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 05:17:46 2023 by rpki-client on console-fra.rpki-client.org