Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316431663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316431663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          0Dxc3C4FZVZTT2/ngUi4Qeh+Rqx/6whJAMGeWlJVN6Y=
Subject key identifier:   82:07:6C:D3:A1:5D:8C:64:4B:9C:4C:1C:3C:D8:C6:BE:70:46:9A:6C
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       36A70620320C5E2388FF9484EE83C21A4D0B6B8C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316431663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 26 Nov 2023 20:14:48 +0000
ROA not before:           Sun 26 Nov 2023 20:09:48 +0000
ROA not after:            Sun 24 Nov 2024 20:14:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d1f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 17:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a7:06:20:32:0c:5e:23:88:ff:94:84:ee:83:c2:1a:4d:0b:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Nov 26 20:09:48 2023 GMT
            Not After : Nov 24 20:14:48 2024 GMT
        Subject: CN=82076CD3A15D8C644B9C4C1C3CD8C6BE70469A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:78:c2:f6:4e:36:02:fa:3b:09:d3:50:68:
                    84:fe:fc:a4:92:4f:ba:65:df:99:7e:c2:10:53:6e:
                    d1:f5:92:ad:f8:3d:fe:75:5f:f8:45:b2:cd:b4:da:
                    e5:1e:6e:67:4b:51:7c:31:79:22:bd:ec:aa:45:88:
                    17:c6:1d:47:ce:38:30:8e:4d:ef:70:05:1b:77:c1:
                    a9:95:a9:78:13:cc:70:9d:8f:92:66:c3:39:40:14:
                    da:f0:e2:a0:67:58:ed:24:1b:6d:c3:15:bb:96:a6:
                    6a:bb:ad:65:11:09:c3:2e:5d:4f:80:46:e4:39:0f:
                    ae:98:13:be:cf:2d:c9:16:4e:a1:a0:ea:11:09:b1:
                    3f:21:99:d0:51:8a:b8:d3:a8:3c:65:02:d2:c0:5f:
                    31:ee:d5:8d:38:c6:66:4c:26:16:8e:25:a1:b9:ce:
                    52:eb:a0:f8:19:14:d4:86:8b:0e:5b:dc:57:31:1c:
                    49:8c:6e:41:02:76:d9:70:10:24:bb:46:44:96:e7:
                    87:63:df:7c:d5:f4:f1:3d:bf:2c:8a:27:1a:35:a9:
                    8a:f6:82:51:94:a9:23:38:8d:07:32:e0:30:3a:fb:
                    5e:bc:0d:73:47:62:04:be:1e:27:73:f3:eb:be:ba:
                    95:5f:53:46:9b:49:d8:d1:66:f6:1b:3a:b8:b7:0e:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:07:6C:D3:A1:5D:8C:64:4B:9C:4C:1C:3C:D8:C6:BE:70:46:9A:6C
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316431663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:9c:97:d8:4e:e0:fe:36:99:e9:df:eb:99:9c:b8:7f:84:
         0f:0f:0d:97:1d:48:95:66:ce:d4:bf:4f:01:ee:82:22:9a:c9:
         c8:48:18:78:6d:aa:b8:c3:80:66:10:52:17:21:ab:b2:bf:cc:
         39:1d:8d:8f:0c:50:f1:15:4d:4a:8b:60:af:38:db:fa:cd:8c:
         e1:88:31:b4:da:04:a1:18:a2:e4:c3:d6:71:00:2b:d9:98:f0:
         81:2d:fe:f4:18:dc:ca:b3:70:7c:88:1f:9c:c9:63:1f:10:d2:
         fe:45:f2:16:b4:af:25:c1:73:81:fb:d1:8b:e7:9e:29:5e:7d:
         e9:66:a5:b4:f6:4d:2e:2a:f4:c9:85:be:c9:3f:bc:2d:59:a3:
         87:06:a4:eb:0f:5a:37:49:53:7d:a9:36:b0:63:7b:a1:26:93:
         3f:ee:a7:fb:9d:86:66:ef:33:37:21:d0:28:7f:2a:e5:8b:9f:
         02:96:18:8c:de:bf:76:34:b9:cc:95:22:57:a8:90:78:2d:87:
         7e:2c:92:de:b3:8a:fc:30:e3:c7:42:2c:15:3f:4d:61:61:42:
         02:95:c0:74:2c:68:78:ad:a0:8a:07:8f:38:33:9a:fb:16:2b:
         71:1d:64:e4:08:3b:1c:7c:8b:73:73:82:3c:ae:89:cf:98:7f:
         e4:4a:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----