Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e20313939353435.roa
File:                     326130353a646663343a313131333a3a2f34382d3438203d3e20313939353435.roa (raw, json)
Hash identifier:          P6PIwtyidipl0gNgSSdnNHXHlltPooiSVboz1rLiS60=
Subject key identifier:   FE:1C:28:9E:8A:6D:ED:BA:F9:DF:49:96:6F:4F:C8:15:B6:A7:E8:4C
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3601A0CCD802E145375D1438322C0C41C02DC720
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e20313939353435.roa
Signing time:             Wed 29 Nov 2023 16:43:36 +0000
ROA not before:           Wed 29 Nov 2023 16:38:36 +0000
ROA not after:            Wed 27 Nov 2024 16:43:36 +0000
asID:                     199545
IP address blocks:        2a05:dfc4:1113::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 04:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:01:a0:cc:d8:02:e1:45:37:5d:14:38:32:2c:0c:41:c0:2d:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Nov 29 16:38:36 2023 GMT
            Not After : Nov 27 16:43:36 2024 GMT
        Subject: CN=FE1C289E8A6DEDBAF9DF49966F4FC815B6A7E84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:f0:fc:1a:8a:cc:18:21:ec:e2:7e:04:fe:
                    5a:46:bc:c2:83:f9:3e:4d:c7:09:1a:0f:97:26:90:
                    07:a8:c0:7e:b5:9d:32:f9:87:c2:14:5b:ee:ea:8d:
                    23:db:92:0e:44:cd:33:0c:46:ac:c6:6b:10:0d:b8:
                    43:0c:9a:67:ec:36:4a:ee:bb:b9:50:78:e1:0f:23:
                    13:f4:e9:ba:d2:28:8e:27:57:0f:56:d1:d0:9e:e7:
                    e0:09:e4:9a:96:37:52:7e:8b:81:e5:d5:37:1e:03:
                    76:a8:39:cf:0f:6c:d2:6f:99:3f:58:32:50:8c:21:
                    25:99:36:d0:2f:17:26:39:fa:fe:3d:e6:8a:9e:13:
                    68:e2:87:37:6c:bd:88:ae:75:70:c7:aa:43:d9:4d:
                    86:10:a1:f6:71:38:d5:14:cc:6b:79:3c:54:8f:93:
                    e2:f3:94:01:9e:c7:e5:3a:a1:c6:56:12:1b:93:2b:
                    c2:36:4b:00:fc:68:22:7d:0a:6f:b9:7b:d6:06:a2:
                    76:6f:21:8f:4e:a5:98:2c:a0:39:9c:bc:3d:86:f8:
                    ce:5b:5f:09:08:fd:2b:cd:e5:dd:e3:9e:d8:4c:e9:
                    cd:b3:53:e7:cc:1e:68:57:d7:a1:9d:f8:92:ec:cf:
                    36:e1:64:48:5d:1d:f6:34:86:e4:4a:f7:4b:fc:80:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1C:28:9E:8A:6D:ED:BA:F9:DF:49:96:6F:4F:C8:15:B6:A7:E8:4C
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e20313939353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:d4:f9:c5:04:e3:5e:4f:1d:79:a4:91:4a:80:6f:1a:37:
         64:0f:04:0d:5e:eb:9e:87:66:72:b4:68:c7:c7:13:56:22:33:
         61:68:a3:91:97:70:90:69:51:76:8e:fb:e3:b7:bb:a6:71:9e:
         e4:a5:57:22:88:ec:9e:0d:e9:c0:d5:13:28:3c:23:2c:e7:ca:
         da:f6:85:90:11:72:18:57:28:15:e2:58:12:02:1d:1d:87:40:
         3c:62:0c:05:d9:39:e0:9b:49:90:0b:91:f8:32:00:0a:0e:42:
         9f:b5:f7:c2:0e:cf:e0:3d:ad:78:8f:57:6a:36:6e:3c:67:8a:
         ec:39:e0:24:1f:31:6f:a0:a1:66:d4:3a:ee:82:db:10:bc:10:
         6d:df:4a:87:fa:16:05:c2:94:57:a8:35:88:8b:0d:a6:a5:b2:
         6c:eb:ef:79:17:5a:d1:04:b4:d5:f6:65:da:b4:55:93:9f:ff:
         8b:43:67:be:4a:76:e4:5b:62:19:91:87:e0:8f:36:a8:d3:3a:
         39:3b:34:ba:a8:9c:5c:c9:7a:ec:3c:89:c9:1e:63:f8:ea:af:
         ee:9b:ed:88:c1:f8:32:83:a2:f7:4f:02:4e:12:b9:4a:e8:19:
         fb:8d:b0:74:7d:68:11:fe:56:86:62:6c:5c:2d:f0:40:1f:38:
         fa:65:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----