Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316632333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          w7yR2mbAmzRQSReUv4N5/PjsClYSlOYorKr9oHcaSXk=
Subject key identifier:   7C:F4:6E:13:66:D6:88:65:C6:B9:B6:AC:AB:89:C3:70:91:D4:B2:5F
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       22A0C17BFBA0140755C05A50C5F9DD370BEAB816
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 05 May 2024 14:36:13 +0000
ROA not before:           Sun 05 May 2024 14:31:13 +0000
ROA not after:            Sun 04 May 2025 14:36:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1f23::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 12:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:c1:7b:fb:a0:14:07:55:c0:5a:50:c5:f9:dd:37:0b:ea:b8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May  5 14:31:13 2024 GMT
            Not After : May  4 14:36:13 2025 GMT
        Subject: CN=7CF46E1366D68865C6B9B6ACAB89C37091D4B25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:d3:67:b3:d0:85:cb:58:2d:a0:61:cf:a8:
                    c4:c9:64:7c:83:e8:35:1a:e2:26:ef:3f:4a:5f:0e:
                    12:0f:3b:a4:0a:d1:37:32:ba:9c:f1:0f:11:1b:aa:
                    61:00:70:e5:03:37:73:ee:cb:f2:e7:40:d6:a2:c7:
                    e5:f6:86:bb:e7:04:1f:d1:18:5c:b0:7b:57:87:35:
                    18:8e:9d:7d:70:69:f0:fc:63:87:66:5a:53:2a:56:
                    f3:86:ea:61:ae:22:5e:28:c6:cf:a4:7f:df:f4:36:
                    4e:0d:58:9b:18:14:5d:02:d4:50:65:d6:86:cd:2d:
                    25:cc:9d:10:38:1f:4d:e6:56:b4:e6:8a:93:fd:65:
                    6f:3e:7d:73:23:5b:74:9b:bb:d2:86:1f:25:a3:06:
                    4b:9c:df:88:55:b9:3d:23:54:53:7b:89:33:4d:58:
                    11:1e:d0:b4:24:fd:a7:cf:71:71:c2:e8:e9:ae:a9:
                    50:2d:ad:c3:20:e6:04:ec:40:fb:0f:bf:84:af:5f:
                    77:26:96:88:7d:ff:a7:f2:c5:aa:0f:dc:5d:b2:c4:
                    58:b6:a5:88:c2:bc:b2:a1:4e:df:07:ad:cf:ec:3a:
                    40:f0:06:4c:04:ae:7f:cb:0c:23:a8:ae:b3:c9:0d:
                    40:9c:c3:ba:f9:79:ad:21:b1:9a:eb:f7:2e:c3:1d:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:6E:13:66:D6:88:65:C6:B9:B6:AC:AB:89:C3:70:91:D4:B2:5F
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316632333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1f23::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:67:9f:18:5a:37:2d:74:87:b1:6e:a1:a2:58:66:3e:4f:1c:
         1d:07:fa:45:23:c4:06:7b:63:ea:83:fa:3f:72:b7:f9:79:0f:
         2c:98:02:f2:e9:23:cd:38:60:20:46:45:dd:c6:b9:e3:f0:63:
         89:7d:24:1a:0c:4a:d8:96:b5:8d:06:27:00:2b:7b:af:25:67:
         4b:aa:c0:a1:17:0c:00:ac:8f:3a:66:96:0a:94:d0:2e:3a:c1:
         7c:65:39:64:8f:a4:2d:88:76:bb:e6:d4:a3:0e:36:1a:33:74:
         95:7b:b8:c9:33:14:8e:43:69:33:be:74:c7:48:3d:1a:d3:40:
         9c:95:8b:71:e9:52:62:85:2c:65:8f:e7:43:b9:e4:78:9d:cf:
         64:30:7e:43:a5:10:8f:3c:6e:ad:a6:48:ec:56:3d:af:b3:d5:
         ab:fe:ef:27:29:73:1b:05:d1:3c:0c:27:65:8c:7a:55:4f:7e:
         bc:cf:c7:d5:33:0f:d6:db:a3:3e:ca:32:45:d0:60:21:26:af:
         0a:43:73:06:29:c1:a8:f9:ce:c0:38:b9:83:49:ae:6e:2c:14:
         6f:2f:ab:d1:9e:50:19:47:e7:78:51:00:78:60:99:d6:67:79:
         1f:8d:de:ef:5b:08:90:17:e7:29:36:87:ec:2c:11:05:91:b9:
         ec:fc:67:9c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUIqDBe/ugFAdVwFpQxfndNwvquBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MDUxNDMxMTNaFw0yNTA1MDQxNDM2MTNaMDMxMTAvBgNV
BAMTKDdDRjQ2RTEzNjZENjg4NjVDNkI5QjZBQ0FCODlDMzcwOTFENEIyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRNNns9CFy1gtoGHPqMTJZHyD
6DUa4ibvP0pfDhIPO6QK0TcyupzxDxEbqmEAcOUDN3Puy/LnQNaix+X2hrvnBB/R
GFywe1eHNRiOnX1wafD8Y4dmWlMqVvOG6mGuIl4oxs+kf9/0Nk4NWJsYFF0C1FBl
1obNLSXMnRA4H03mVrTmipP9ZW8+fXMjW3Sbu9KGHyWjBkuc34hVuT0jVFN7iTNN
WBEe0LQk/afPcXHC6OmuqVAtrcMg5gTsQPsPv4SvX3cmloh9/6fyxaoP3F2yxFi2
pYjCvLKhTt8Hrc/sOkDwBkwErn/LDCOorrPJDUCcw7r5ea0hsZrr9y7DHR/rAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUfPRuE2bWiGXGubasq4nDcJHUsl8wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxNjYzMjMzM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QfIzANBgkqhkiG9w0BAQsF
AAOCAQEAMGefGFo3LXSHsW6holhmPk8cHQf6RSPEBntj6oP6P3K3+XkPLJgC8ukj
zThgIEZF3ca54/BjiX0kGgxK2Ja1jQYnACt7ryVnS6rAoRcMAKyPOmaWCpTQLjrB
fGU5ZI+kLYh2u+bUow42GjN0lXu4yTMUjkNpM750x0g9GtNAnJWLcelSYoUsZY/n
Q7nkeJ3PZDB+Q6UQjzxuraZI7FY9r7PVq/7vJylzGwXRPAwnZYx6VU9+vM/H1TMP
1tujPsoyRdBgISavCkNzBinBqPnOwDi5g0mubiwUby+r0Z5QGUfneFEAeGCZ1md5
H43e71sIkBfnKTaH7CwRBZG57PxnnA==
-----END CERTIFICATE-----
Generated at Thu May 23 15:06:32 2024 by rpki-client on console-fra.rpki-client.org