Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3732313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3732313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          SYQ/n2RMV/9VF8GEY/IyoY+KCJL0krGs1TvY8/Ep3Bk=
Subject key identifier:   69:15:E9:2E:72:2D:A0:AD:E3:BA:3D:B3:7F:23:EE:19:43:E1:FC:80
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       55F21CC46F69F6578D9780C3A1B6EB74E9DF20D6
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3732313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 07 Jan 2024 02:08:41 +0000
ROA not before:           Sun 07 Jan 2024 02:03:41 +0000
ROA not after:            Sun 05 Jan 2025 02:08:41 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 12:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f2:1c:c4:6f:69:f6:57:8d:97:80:c3:a1:b6:eb:74:e9:df:20:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jan  7 02:03:41 2024 GMT
            Not After : Jan  5 02:08:41 2025 GMT
        Subject: CN=6915E92E722DA0ADE3BA3DB37F23EE1943E1FC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:db:29:13:bf:3b:0a:97:06:ab:b8:50:b5:
                    40:5c:b5:72:ab:22:2a:7e:44:67:1b:db:6c:76:0a:
                    32:7b:6c:28:48:32:3b:fe:55:4b:6d:0b:24:31:ce:
                    5f:d7:05:8f:2a:c3:d3:49:f9:5b:8a:59:ef:90:06:
                    f9:32:c3:62:48:0b:6a:73:c2:3d:04:20:f6:57:9f:
                    a1:eb:ae:4e:8f:98:d5:ad:87:78:10:4c:84:fa:bd:
                    11:dc:af:d0:82:05:fa:4a:dc:5e:b9:35:89:5a:41:
                    42:cd:36:23:10:7f:8e:b0:4b:76:e4:cf:56:09:9e:
                    61:6d:3c:4d:a0:07:9c:a5:cd:16:66:7f:cc:e4:b1:
                    00:e4:f6:9a:26:e1:e6:bb:91:f2:62:74:20:b9:d7:
                    ce:48:e4:c2:7c:38:3d:5d:16:63:4e:4d:13:8e:bf:
                    74:17:68:41:a1:db:18:a3:cd:fa:c4:78:94:63:25:
                    10:20:6b:47:3d:d3:52:0e:7d:3d:1e:c0:0c:a8:86:
                    dd:83:37:ca:4c:2e:42:a8:1d:c0:5d:63:f2:5b:7f:
                    d3:87:d2:b5:7f:7a:5b:91:8b:87:71:4c:67:2e:f9:
                    75:de:52:9b:fb:cc:de:5d:3e:8b:61:a8:4a:e7:2a:
                    61:33:e4:e8:5a:7f:2d:43:10:59:94:a6:ab:ba:65:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:15:E9:2E:72:2D:A0:AD:E3:BA:3D:B3:7F:23:EE:19:43:E1:FC:80
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3732313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:56:61:82:ba:8f:f9:bc:a5:d6:93:76:67:76:ed:a2:42:
         59:93:59:81:d1:3a:b6:16:26:99:de:bf:55:22:f1:84:ef:3b:
         3e:48:57:e8:8f:b2:ad:2f:c3:a1:cd:cc:33:7a:c1:11:16:ef:
         a0:7b:21:9f:b6:e7:c1:67:1e:cd:fc:43:53:ab:dd:b8:da:c3:
         ea:93:ba:cf:54:0f:4c:7f:fd:bf:ab:df:c6:69:1b:9a:ae:08:
         da:2f:40:1f:ff:f7:20:d2:1d:c7:d5:26:d0:55:b9:4d:3a:1c:
         ff:e6:b4:b6:90:cb:5a:fe:ea:aa:9c:69:e7:83:64:a4:60:8f:
         8a:3b:cb:21:a3:1a:53:4b:da:73:26:c0:eb:e5:03:0c:3b:17:
         5e:ca:80:5e:80:91:ab:26:52:fa:f5:18:cb:87:99:9a:db:a9:
         e5:5d:8f:25:8f:45:a4:bc:07:46:41:58:b4:9e:b6:ed:40:4d:
         1e:f4:c6:3e:18:96:ba:23:7a:50:56:eb:b7:33:7a:63:f7:85:
         92:94:41:7f:47:6d:a8:ea:83:24:6f:88:70:5b:64:84:0b:1e:
         41:40:18:44:68:ab:c3:ce:4b:53:76:35:45:32:1b:12:ad:bd:
         08:5d:d1:14:24:49:8a:fc:11:93:52:8d:9b:9e:93:af:26:28:
         62:c5:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----