Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a31323a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Hz6WMgK8R6kTDY9tIq6XDwZAQGsN8477etBCd6K9S/4=
Subject key identifier:   1F:C2:0E:73:98:12:51:61:9A:77:DA:D5:8D:79:DE:F2:3F:CF:CF:20
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2A1A739245A455C02495284A6770D2B18B33D8AA
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 11 Mar 2024 21:03:18 +0000
ROA not before:           Mon 11 Mar 2024 20:58:18 +0000
ROA not after:            Mon 10 Mar 2025 21:03:18 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 12:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:73:92:45:a4:55:c0:24:95:28:4a:67:70:d2:b1:8b:33:d8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Mar 11 20:58:18 2024 GMT
            Not After : Mar 10 21:03:18 2025 GMT
        Subject: CN=1FC20E73981251619A77DAD58D79DEF23FCFCF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:a3:e7:d3:d4:08:dd:c0:5b:86:06:ea:ea:
                    c9:f0:17:5b:e5:27:3b:7a:6e:9b:35:95:a9:04:8e:
                    5d:9f:e3:10:11:e4:32:b3:ca:30:f7:43:79:a6:e9:
                    a9:65:a0:a4:96:00:58:15:08:d4:f4:47:30:01:2d:
                    69:15:5e:67:e5:04:15:cc:43:3f:a4:03:cf:0b:4e:
                    a9:5d:4b:be:38:e8:cb:a2:87:3a:f3:15:7b:c1:13:
                    54:e8:f6:fc:a4:1c:a1:a2:de:6a:91:d7:86:f8:cb:
                    58:fc:5d:92:9d:88:47:e3:7f:7d:78:98:b8:18:ff:
                    e4:91:52:cd:21:6d:7a:71:8e:2b:0e:2b:44:92:c4:
                    ba:ce:2b:ad:d3:3f:82:7e:aa:51:93:55:17:f1:ff:
                    88:4d:81:f1:ae:da:7e:c6:df:3f:8e:0f:2c:1f:43:
                    f6:0f:13:2d:7e:b5:f5:f1:a6:49:33:23:5a:ad:4e:
                    1e:0a:ec:cb:f6:41:0e:d9:18:d7:15:fd:79:7f:d5:
                    a4:92:8c:91:be:ea:05:94:9e:a1:4f:7f:89:74:ee:
                    22:e4:c6:e3:dd:b2:bc:0a:d2:cf:bb:57:fa:3b:17:
                    aa:5b:51:ad:fa:94:20:8d:3c:b5:b1:bb:12:5f:fa:
                    d2:0c:c0:3a:bf:ff:2c:09:ca:a6:26:30:0a:8c:a1:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:0E:73:98:12:51:61:9A:77:DA:D5:8D:79:DE:F2:3F:CF:CF:20
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:1d:6b:7a:a7:5c:09:d4:1d:52:80:97:6d:6d:a2:61:da:c9:
         ec:47:04:98:90:e0:cf:73:e4:73:97:c7:b8:c9:04:78:92:9f:
         35:b9:f7:b2:21:62:d5:e9:37:aa:19:a2:84:fb:82:6b:3d:b1:
         c7:91:6d:70:f6:8c:1b:58:d9:5f:fa:46:db:ba:86:f0:aa:36:
         10:1e:d3:bf:94:09:5e:40:bf:42:5a:68:0c:7b:78:99:eb:66:
         f0:ac:aa:54:5f:5d:b5:12:41:9e:68:f1:a9:69:5f:b3:7a:dc:
         35:c3:f8:ee:cd:1e:44:0e:10:c1:14:5c:ab:43:93:68:8a:87:
         1b:cb:da:39:72:b7:ca:a8:5f:25:cb:9a:ea:76:89:55:e9:1f:
         ef:50:cf:d7:ff:ed:6a:1f:d2:e0:30:ec:9a:5e:10:83:8b:10:
         3b:bd:b0:b4:63:59:63:2e:bf:7c:34:4d:a9:04:7c:08:9a:f7:
         0d:f5:3b:f3:41:9d:9e:5e:0d:6e:96:67:61:d9:0a:1a:f3:7c:
         34:83:cc:56:fa:01:67:a8:57:6b:6a:49:e1:03:b3:27:e3:3c:
         4e:34:0d:ce:2b:b9:87:3f:03:5f:f7:f8:bf:fa:01:e1:06:64:
         0a:f0:1c:9d:20:fe:fa:d3:9f:b4:9c:bd:08:63:51:fb:1f:81:
         eb:72:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----