Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a62613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          lSeLQsrn9gFPcGVx6CRoOcKFn83eCrnBbTh6addV7w4=
Subject key identifier:   57:58:AC:8B:47:4F:0C:32:E0:73:49:2C:BC:70:22:FD:EF:83:A5:CD
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       32942156C4D95A2A58C00C56ADB446608AD968B4
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:51 +0000
ROA not before:           Thu 10 Aug 2023 22:42:51 +0000
ROA not after:            Thu 08 Aug 2024 22:47:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ba::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 04:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:94:21:56:c4:d9:5a:2a:58:c0:0c:56:ad:b4:46:60:8a:d9:68:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:51 2023 GMT
            Not After : Aug  8 22:47:51 2024 GMT
        Subject: CN=5758AC8B474F0C32E073492CBC7022FDEF83A5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:14:9d:2a:a0:a0:a9:86:51:2b:0d:2d:18:
                    53:b5:c1:5c:95:d8:67:86:ac:61:b3:da:5e:17:e3:
                    5d:3d:77:94:a4:1b:fe:29:3f:ec:74:5d:52:0a:f2:
                    31:d6:6c:5e:34:ac:aa:65:b5:d1:8c:56:59:e7:c9:
                    63:71:63:52:5d:46:1e:d2:ed:4a:e9:67:83:59:84:
                    ea:dd:b3:1a:a8:96:81:75:ae:d1:bf:07:84:a5:b5:
                    c8:7a:be:a5:6f:85:f3:03:0a:51:89:0c:dd:a5:6a:
                    a4:be:0b:88:50:ff:98:1c:a8:fe:c7:96:54:8e:cf:
                    ef:88:0b:a3:ef:ee:e8:a0:27:2d:24:0b:34:7d:02:
                    c8:cf:16:ff:c4:7b:b6:44:db:91:e5:db:1c:81:fe:
                    f2:57:d5:8c:41:12:f8:d8:04:e2:e7:53:a7:9a:97:
                    6d:f5:b5:b1:8b:c5:87:c3:7a:30:9a:27:fe:12:2f:
                    77:4e:5a:6a:d9:7f:ca:2c:79:a7:3c:f0:08:a8:af:
                    6c:d2:c6:4d:0e:8a:25:9f:bf:d6:be:1e:09:6d:7c:
                    d3:eb:b1:45:80:5d:d7:6e:a4:57:dc:7b:df:62:cf:
                    7b:22:9f:08:8a:ad:5d:eb:fb:a2:a2:2b:0c:d3:73:
                    11:81:65:1c:9e:66:16:b1:59:72:32:72:cb:25:62:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:AC:8B:47:4F:0C:32:E0:73:49:2C:BC:70:22:FD:EF:83:A5:CD
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:97:dd:a0:7a:da:6b:5b:13:af:bd:3f:b9:eb:5b:fa:f3:e2:
         7a:82:98:7f:b8:32:da:4c:aa:ee:47:d8:a0:83:40:25:98:86:
         d1:d6:22:34:3f:79:60:bf:1e:1f:0d:42:bd:84:bb:2e:c5:9d:
         f9:95:89:e4:cb:cf:b5:5c:6e:d2:e4:49:19:9a:12:dd:c6:87:
         02:03:8e:af:37:81:dd:08:10:b8:0f:e6:3c:95:34:94:c1:08:
         a8:0a:7a:6e:ed:42:44:79:0b:21:b4:c7:eb:60:44:81:4d:96:
         27:86:a2:94:34:b1:5f:03:2c:88:ec:9b:10:f4:83:38:ea:25:
         9c:9f:2c:06:ef:ca:8a:c3:96:b8:f7:e5:82:55:22:ae:48:b2:
         7f:8c:49:b3:2f:b0:3b:16:a8:57:09:69:f2:d8:37:8f:f2:49:
         94:19:f5:bb:2f:bc:ea:45:66:ad:f0:e5:23:7b:4e:65:1d:35:
         eb:2a:e7:81:5e:e2:0f:98:71:ca:d2:84:49:62:3d:25:1a:4d:
         38:2a:3f:c9:85:13:a5:f7:b2:5f:05:9a:83:04:2b:c9:94:11:
         ee:db:94:1f:fa:3f:a4:82:86:69:21:b3:d2:4d:68:df:a0:28:
         52:b9:7b:ab:94:a8:d4:d6:78:85:42:0c:41:ba:8d:a1:ef:d8:
         92:d7:98:d6
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUMpQhVsTZWipYwAxWrbRGYIrZaLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTAyMjQyNTFaFw0yNDA4MDgyMjQ3NTFaMDMxMTAvBgNV
BAMTKDU3NThBQzhCNDc0RjBDMzJFMDczNDkyQ0JDNzAyMkZERUY4M0E1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTRSdKqCgqYZRKw0tGFO1wVyV
2GeGrGGz2l4X4109d5SkG/4pP+x0XVIK8jHWbF40rKpltdGMVlnnyWNxY1JdRh7S
7UrpZ4NZhOrdsxqoloF1rtG/B4Sltch6vqVvhfMDClGJDN2laqS+C4hQ/5gcqP7H
llSOz++IC6Pv7uigJy0kCzR9AsjPFv/Ee7ZE25Hl2xyB/vJX1YxBEvjYBOLnU6ea
l231tbGLxYfDejCaJ/4SL3dOWmrZf8oseac88Aior2zSxk0OiiWfv9a+HgltfNPr
sUWAXddupFfce99iz3sinwiKrV3r+6KiKwzTcxGBZRyeZhaxWXIycsslYp6XAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUV1isi0dPDDLgc0ksvHAi/e+Dpc0wHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBiwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9y
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzI2MTMwMzUzYTY0NjY2MzM0M2E2MjYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAujANBgkqhkiG9w0BAQsFAAOCAQEA
ApfdoHraa1sTr70/uetb+vPieoKYf7gy2kyq7kfYoINAJZiG0dYiND95YL8eHw1C
vYS7LsWd+ZWJ5MvPtVxu0uRJGZoS3caHAgOOrzeB3QgQuA/mPJU0lMEIqAp6bu1C
RHkLIbTH62BEgU2WJ4ailDSxXwMsiOybEPSDOOolnJ8sBu/KisOWuPflglUirkiy
f4xJsy+wOxaoVwlp8tg3j/JJlBn1uy+86kVmrfDlI3tOZR016yrngV7iD5hxytKE
SWI9JRpNOCo/yYUTpfeyXwWagwQryZQR7tuUH/o/pIKGaSGz0k1o36AoUrl7q5So
1NZ4hUIMQbqNoe/YkteY1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org