Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3234663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3234663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          AiL+jtRklyyweB60hEnSDLxGvEqaamTaSJbjJa4WzgA=
Subject key identifier:   E5:47:09:F6:BA:2B:49:9A:A9:A0:F3:03:C1:68:EB:75:CD:E8:E4:22
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       377CEAC47E85D91FF28296D9EEBAAA928497F1BB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3234663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 15 Aug 2023 00:25:13 +0000
ROA not before:           Tue 15 Aug 2023 00:20:13 +0000
ROA not after:            Tue 13 Aug 2024 00:25:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:24f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7c:ea:c4:7e:85:d9:1f:f2:82:96:d9:ee:ba:aa:92:84:97:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 15 00:20:13 2023 GMT
            Not After : Aug 13 00:25:13 2024 GMT
        Subject: CN=E54709F6BA2B499AA9A0F303C168EB75CDE8E422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:c7:ed:19:8a:e5:5b:48:e7:52:f3:6a:6f:
                    d3:3d:3d:9c:9c:ae:bd:73:a6:60:5b:42:4e:54:7a:
                    58:b0:6c:cb:b0:78:6b:a2:28:24:6c:8d:da:b7:d1:
                    56:40:48:9e:0f:ae:2f:ee:42:be:b6:df:d7:23:e9:
                    1d:69:90:5e:5f:e5:8b:3c:e3:f7:a8:62:df:c7:84:
                    04:ff:73:cd:3a:ad:ed:31:eb:fe:1a:b4:41:a4:f9:
                    92:bb:19:61:43:a1:d7:4b:45:c5:40:dd:7f:79:54:
                    3f:ca:17:6a:ab:36:20:6f:75:7f:e2:8a:be:e5:b6:
                    e8:70:c0:76:2f:36:43:87:d5:8f:f2:c9:2e:eb:3e:
                    d3:4e:93:ac:59:a2:2a:d9:41:c3:45:ce:a1:d1:14:
                    e3:65:21:4b:2b:8b:dc:96:90:3a:5c:dc:68:96:89:
                    cd:a2:00:66:fd:62:1d:3f:12:f6:79:ca:a3:54:10:
                    86:dd:47:f3:78:98:ec:b0:83:e8:ae:38:1f:89:18:
                    4b:a5:97:d0:2a:10:73:00:f4:42:28:24:33:43:f7:
                    85:e0:fc:48:a1:5c:02:ef:4c:1b:eb:56:2f:02:76:
                    78:2e:95:70:82:1c:08:51:e8:92:4a:45:29:b6:fc:
                    fb:ca:4b:13:55:31:df:35:af:7c:2b:dd:25:73:46:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:09:F6:BA:2B:49:9A:A9:A0:F3:03:C1:68:EB:75:CD:E8:E4:22
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3234663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:24f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:8e:06:0e:64:9d:8d:5a:ed:e7:f5:4c:f2:b2:36:9f:14:
         c6:1d:17:b7:bd:8a:2c:61:c4:21:13:e8:ea:ef:65:ca:2d:9d:
         0e:bb:f1:d4:d9:60:d1:da:9a:df:91:fe:b6:4a:62:47:7d:5c:
         b1:18:6a:1e:5b:50:24:3e:ed:c1:9a:a1:d9:03:41:7c:68:1f:
         fe:29:5b:b7:9a:8b:14:a6:26:db:61:71:d0:1f:b9:35:cb:c5:
         c6:05:61:08:25:c4:34:3e:cb:dd:78:f9:09:4b:19:c8:77:f0:
         be:f7:fd:74:4d:0b:be:85:56:45:d7:ba:87:17:67:d6:8a:69:
         72:f8:da:44:59:65:0a:97:4d:f6:b0:f6:b5:95:83:4c:29:d8:
         b5:86:8c:58:a3:ea:d8:1c:1d:d8:f6:35:48:1b:1b:c8:cc:59:
         61:40:29:59:76:85:d4:0d:22:63:fe:70:04:f4:bd:08:75:85:
         f0:0b:d6:8a:0b:ff:40:64:4b:5e:52:c1:70:e6:e8:76:c4:a8:
         69:d3:a7:96:65:21:25:b2:85:6c:62:10:85:cb:48:7b:56:70:
         fd:0b:cf:89:ca:d2:08:99:c3:e3:d3:bf:79:87:97:89:30:2a:
         26:3e:e6:27:8d:62:5a:a9:fe:70:66:7b:8c:30:dd:03:ec:40:
         15:fe:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----