![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: 8hGXzkMhil5M8/IeA91jRUfT+FyMrC2eXuIKyNVwOEg=
Subject key identifier: 59:E7:34:F3:3F:83:26:4B:A2:D1:F1:C0:2B:48:3A:BC:BD:40:08:46
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 7CDA7890645C3461075442C35430CC883F4B31B0
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa
Signing time: Wed 10 Apr 2024 14:03:24 +0000
ROA not before: Wed 10 Apr 2024 13:58:24 +0000
ROA not after: Wed 09 Apr 2025 14:03:24 +0000
asID: 52025
IP address blocks: 2a05:dfc4:1113::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 12:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:da:78:90:64:5c:34:61:07:54:42:c3:54:30:cc:88:3f:4b:31:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Apr 10 13:58:24 2024 GMT
Not After : Apr 9 14:03:24 2025 GMT
Subject: CN=59E734F33F83264BA2D1F1C02B483ABCBD400846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:7f:4e:e5:82:58:6e:99:a4:30:f8:1c:a9:
e8:10:56:54:dd:87:f3:8d:2d:5a:22:70:81:a4:31:
fc:d9:a4:79:78:7e:ee:ad:7a:b0:1b:e6:50:92:54:
50:2b:ed:11:1f:d3:fb:c3:ca:8f:e4:e7:c9:59:21:
bf:bd:73:4f:5d:bf:b3:d5:f2:7c:33:66:fb:80:a3:
a7:95:13:9f:b7:05:11:aa:bb:9e:76:1d:94:ee:b5:
74:99:24:e3:16:64:4c:40:20:60:9b:78:a6:d5:5a:
a9:38:6e:75:a2:63:99:89:58:38:6a:c0:ea:4c:e7:
d1:16:63:65:5c:be:fc:d5:5e:91:58:41:7f:12:66:
bf:52:b0:4a:4e:44:0e:ba:f0:a6:3c:9f:79:2b:3e:
da:b8:75:d9:23:65:5f:c2:47:61:2c:26:a7:5b:b4:
3b:48:4a:bd:f0:b0:61:b0:04:30:5c:6e:a0:b5:1e:
a3:c1:1a:18:f5:f3:c8:2a:59:25:37:b4:49:90:ce:
1a:a6:c3:4a:c6:91:d3:a2:d4:6c:a3:e6:21:54:48:
17:2f:6d:3e:ba:23:b3:ae:43:86:c2:ea:83:f8:b5:
e0:37:1e:e6:33:1f:c3:74:1b:d3:a9:ed:1a:da:40:
69:76:b3:35:34:ae:0d:9f:83:33:5b:6a:dd:16:5e:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:34:F3:3F:83:26:4B:A2:D1:F1:C0:2B:48:3A:BC:BD:40:08:46
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:1113::/48
Signature Algorithm: sha256WithRSAEncryption
56:ef:ee:33:4b:24:7d:28:14:60:db:98:8e:2c:b1:7f:0a:62:
c1:2a:1c:ac:8d:b5:44:72:0a:b5:c5:31:84:1e:e7:a9:6d:c1:
ac:37:9a:41:d3:b4:3d:6d:3a:27:0e:3e:42:b8:89:df:e4:a7:
49:d8:5d:54:20:cb:4c:a6:e0:34:e3:e4:aa:4e:fc:9a:d2:fe:
c0:48:c0:b1:c7:65:b1:0d:69:4e:5e:32:15:03:6b:ff:1b:17:
c7:41:40:81:c6:b3:d5:f0:59:e0:72:21:13:c5:95:eb:7f:b1:
d8:ea:af:5a:74:5e:45:27:9d:ff:ea:c5:e4:9c:16:4e:c2:3c:
a4:47:01:6c:8a:b2:d7:f7:7b:db:a4:9d:0b:7c:d4:b2:2c:de:
b0:45:06:23:19:85:02:1f:13:45:51:c2:b4:70:20:c8:e4:a8:
21:ad:c9:3a:9d:ff:07:dd:9a:2c:b5:50:1d:77:0d:36:35:6a:
62:19:7b:0f:a3:af:d2:5a:72:07:0c:34:22:c0:0a:ab:c8:1b:
e7:03:40:7c:77:fd:49:08:0c:c7:0c:f9:38:5c:1c:aa:19:76:
6f:ea:48:b8:69:89:6b:0c:4a:de:15:ef:5c:de:ff:a9:b3:69:
b7:13:0a:8e:3d:0a:9f:25:37:4d:c2:ed:61:8b:8b:2f:e2:88:
88:b9:81:d2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUfNp4kGRcNGEHVELDVDDMiD9LMbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA0MTAxMzU4MjRaFw0yNTA0MDkxNDAzMjRaMDMxMTAvBgNV
BAMTKDU5RTczNEYzM0Y4MzI2NEJBMkQxRjFDMDJCNDgzQUJDQkQ0MDA4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCci39O5YJYbpmkMPgcqegQVlTd
h/ONLVoicIGkMfzZpHl4fu6terAb5lCSVFAr7REf0/vDyo/k58lZIb+9c09dv7PV
8nwzZvuAo6eVE5+3BRGqu552HZTutXSZJOMWZExAIGCbeKbVWqk4bnWiY5mJWDhq
wOpM59EWY2VcvvzVXpFYQX8SZr9SsEpORA668KY8n3krPtq4ddkjZV/CR2EsJqdb
tDtISr3wsGGwBDBcbqC1HqPBGhj188gqWSU3tEmQzhqmw0rGkdOi1Gyj5iFUSBcv
bT66I7OuQ4bC6oP4teA3HuYzH8N0G9Op7RraQGl2szU0rg2fgzNbat0WXrJRAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUWec08z+DJkui0fHAK0g6vL1ACEYwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzEzMTMzM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QREzANBgkqhkiG9w0BAQsF
AAOCAQEAVu/uM0skfSgUYNuYjiyxfwpiwSocrI21RHIKtcUxhB7nqW3BrDeaQdO0
PW06Jw4+QriJ3+SnSdhdVCDLTKbgNOPkqk78mtL+wEjAscdlsQ1pTl4yFQNr/xsX
x0FAgcaz1fBZ4HIhE8WV63+x2OqvWnReRSed/+rF5JwWTsI8pEcBbIqy1/d726Sd
C3zUsizesEUGIxmFAh8TRVHCtHAgyOSoIa3JOp3/B92aLLVQHXcNNjVqYhl7D6Ov
0lpyBww0IsAKq8gb5wNAfHf9SQgMxwz5OFwcqhl2b+pIuGmJawxK3hXvXN7/qbNp
txMKjj0KnyU3TcLtYYuLL+KIiLmB0g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:20 2025 by rpki-client