Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313432343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Ga7Ebjr3HxDQ7d8PIGGPduP82uuxGwo+DQZNXv42erc=
Subject key identifier:   97:60:F6:65:CC:5A:B4:76:E0:DA:6E:77:F6:16:87:2A:36:6F:69:BA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       24D1C7B07F234CB35A9B103DA26E263434661461
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 15 May 2024 20:20:37 +0000
ROA not before:           Wed 15 May 2024 20:15:37 +0000
ROA not after:            Wed 14 May 2025 20:20:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1424::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 12:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:c7:b0:7f:23:4c:b3:5a:9b:10:3d:a2:6e:26:34:34:66:14:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 15 20:15:37 2024 GMT
            Not After : May 14 20:20:37 2025 GMT
        Subject: CN=9760F665CC5AB476E0DA6E77F616872A366F69BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:4b:71:cf:f9:e3:69:43:ee:e4:41:e0:15:
                    7f:ab:12:39:7f:a1:14:0e:68:43:7e:73:8b:16:aa:
                    79:c7:11:ed:33:6b:c8:4d:d7:c0:28:70:bb:d0:bf:
                    c8:8d:bd:fd:18:fc:12:b1:a9:29:0b:f5:04:90:ad:
                    7e:24:6f:38:be:19:da:45:e8:36:c6:f6:61:8f:18:
                    ec:9b:43:f7:b8:41:e3:01:cb:e9:8e:1e:55:1a:d6:
                    19:e1:21:ff:db:5b:a4:3a:13:de:98:03:99:14:7f:
                    fe:5e:04:d5:fb:23:d6:e1:93:ee:4c:6b:69:ae:bf:
                    1e:ec:90:54:04:e9:34:2c:ad:00:d9:a0:03:63:d7:
                    27:a9:86:3c:02:45:b4:e6:ca:2c:cf:f2:a4:67:bd:
                    30:bb:d3:1f:2d:fb:e9:8d:02:93:ec:4e:33:ad:0d:
                    36:83:f7:19:da:94:16:bc:75:9f:35:3e:b9:df:7a:
                    73:e5:5d:46:00:70:80:00:b7:9b:a3:52:c0:78:df:
                    c7:39:69:f3:cb:c2:53:ba:c5:e7:e8:ac:a9:48:98:
                    6d:86:45:74:60:2c:1c:55:b9:45:89:e8:0a:1d:cc:
                    b2:34:16:6b:18:64:fe:2a:c8:f6:9e:0c:72:84:4e:
                    29:8f:68:c9:e2:4c:8b:63:fa:15:f1:9c:99:1a:64:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:F6:65:CC:5A:B4:76:E0:DA:6E:77:F6:16:87:2A:36:6F:69:BA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1424::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:5a:40:b3:41:c9:f2:f6:ba:55:38:d1:5a:a2:a8:69:cd:
         d7:47:7b:34:2d:22:d7:c3:46:0a:9c:d0:9b:a9:28:dd:44:1a:
         a7:73:4b:b1:0f:ea:8a:2c:81:d4:e9:49:70:97:75:71:4a:fc:
         93:de:9f:4d:84:4b:0d:37:67:81:16:9d:18:e5:a8:43:46:19:
         dc:82:5a:77:7f:9d:23:59:2e:b8:3b:a0:a2:f4:08:a3:88:aa:
         51:db:fa:2c:1b:e6:44:9f:a1:99:50:12:35:ff:da:d0:ba:96:
         2f:ef:d4:57:05:94:2f:46:f5:5a:12:b5:ea:0b:ec:a4:15:ff:
         e8:3a:8e:78:81:84:dd:28:a2:bc:21:b7:d8:e1:ff:9d:1a:eb:
         43:9e:cd:a0:89:fa:3d:8f:e6:7b:22:15:bd:09:c8:81:0a:4f:
         a4:2a:14:3d:7f:e1:a5:8b:e1:02:da:79:48:cf:59:8c:1d:72:
         45:d4:da:4d:c2:ac:8f:b7:b9:8f:93:81:ca:80:79:4d:2b:29:
         c2:f8:f6:3a:af:90:8d:87:56:db:c7:09:22:b4:1d:c7:c4:cd:
         98:6f:da:74:85:1d:90:91:d5:ef:de:c1:14:2f:3e:64:fb:24:
         41:20:fa:ab:d8:c5:85:0f:70:df:08:e1:d1:3c:da:7b:9a:d3:
         96:58:d7:a2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUJNHHsH8jTLNamxA9om4mNDRmFGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MTUyMDE1MzdaFw0yNTA1MTQyMDIwMzdaMDMxMTAvBgNV
BAMTKDk3NjBGNjY1Q0M1QUI0NzZFMERBNkU3N0Y2MTY4NzJBMzY2RjY5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2Etxz/njaUPu5EHgFX+rEjl/
oRQOaEN+c4sWqnnHEe0za8hN18AocLvQv8iNvf0Y/BKxqSkL9QSQrX4kbzi+GdpF
6DbG9mGPGOybQ/e4QeMBy+mOHlUa1hnhIf/bW6Q6E96YA5kUf/5eBNX7I9bhk+5M
a2muvx7skFQE6TQsrQDZoANj1yephjwCRbTmyizP8qRnvTC70x8t++mNApPsTjOt
DTaD9xnalBa8dZ81PrnfenPlXUYAcIAAt5ujUsB438c5afPLwlO6xeforKlImG2G
RXRgLBxVuUWJ6AodzLI0FmsYZP4qyPaeDHKETimPaMniTItj+hXxnJkaZM1DAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUl2D2ZcxatHbg2m539haHKjZvabowHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzQzMjM0M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QUJDANBgkqhkiG9w0BAQsF
AAOCAQEApBRaQLNByfL2ulU40VqiqGnN10d7NC0i18NGCpzQm6ko3UQap3NLsQ/q
iiyB1OlJcJd1cUr8k96fTYRLDTdngRadGOWoQ0YZ3IJad3+dI1kuuDugovQIo4iq
Udv6LBvmRJ+hmVASNf/a0LqWL+/UVwWUL0b1WhK16gvspBX/6DqOeIGE3SiivCG3
2OH/nRrrQ57NoIn6PY/meyIVvQnIgQpPpCoUPX/hpYvhAtp5SM9ZjB1yRdTaTcKs
j7e5j5OByoB5TSspwvj2Oq+QjYdW28cJIrQdx8TNmG/adIUdkJHV797BFC8+ZPsk
QSD6q9jFhQ9w3wjh0Tzae5rTlljXog==
-----END CERTIFICATE-----