Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3234203d3e203532303235.roa
File:                     32332e3135362e3230302e302f32342d3234203d3e203532303235.roa (raw, json)
Hash identifier:          pP9bEIoWdxF6kygp7rD76MMhlswBq1srBtAwC7CdrdQ=
Subject key identifier:   EA:EF:5A:6E:31:B1:E6:68:A0:FB:09:C9:1A:77:54:91:0D:3A:C8:99
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       23A6876BE2EAC5210E834EAF1111A388B36C75F8
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3234203d3e203532303235.roa
Signing time:             Mon 26 Jun 2023 20:28:16 +0000
ROA not before:           Mon 26 Jun 2023 20:23:16 +0000
ROA not after:            Mon 24 Jun 2024 20:28:16 +0000
asID:                     52025
IP address blocks:        23.156.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 04:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:87:6b:e2:ea:c5:21:0e:83:4e:af:11:11:a3:88:b3:6c:75:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Jun 26 20:23:16 2023 GMT
            Not After : Jun 24 20:28:16 2024 GMT
        Subject: CN=EAEF5A6E31B1E668A0FB09C91A7754910D3AC899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:31:63:d3:cd:ac:91:bb:44:15:2b:32:dd:
                    c6:74:86:25:4f:15:98:57:00:d4:30:dc:01:d9:a5:
                    6d:0f:ec:75:85:fa:12:43:ad:7f:ca:82:3c:36:43:
                    c7:0b:07:22:bb:da:0f:ba:29:fb:57:d8:a7:4f:52:
                    70:1d:5b:61:f6:ec:4e:97:a5:da:aa:d2:50:c6:70:
                    ef:96:db:7c:d4:64:32:ce:00:cc:80:61:66:b6:62:
                    a4:25:09:1f:55:db:56:b8:2e:63:9a:d7:47:12:82:
                    e8:be:65:d0:d3:5b:7a:18:60:e2:a7:4c:26:9a:44:
                    bd:a0:b8:9f:da:0e:01:eb:ef:08:be:10:54:ef:17:
                    a1:a3:d7:a8:83:a2:80:67:b3:3d:f6:94:af:86:84:
                    5c:ba:25:2d:a5:16:e6:16:e0:e0:70:73:60:16:bd:
                    0f:02:27:8e:5d:79:89:f3:5c:d7:97:45:c6:ce:1a:
                    90:0c:ce:16:3d:b3:b0:d6:d9:37:12:0f:c5:3a:62:
                    07:ba:e9:39:d5:e3:67:f3:b5:1e:8f:26:e6:a3:bc:
                    bc:e1:96:64:12:33:9a:71:af:2b:06:dc:22:09:48:
                    70:15:39:56:3f:c6:ea:a6:76:41:24:7e:53:02:42:
                    ed:96:26:30:4b:6c:57:fc:ea:2a:8d:ae:62:d3:c6:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:5A:6E:31:B1:E6:68:A0:FB:09:C9:1A:77:54:91:0D:3A:C8:99
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/32332e3135362e3230302e302f32342d3234203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:bc:f4:5b:7a:49:be:c6:f3:80:35:f4:13:2a:7f:a7:98:cf:
         12:4f:0f:a6:43:66:f2:b8:5c:0c:59:cd:3e:fb:04:b3:28:b9:
         eb:5a:5e:7f:ec:c1:73:b4:7c:09:0b:f2:b6:73:3e:85:cb:6e:
         99:04:2f:2e:53:8a:2b:d9:84:47:76:f3:ff:48:2e:61:35:a7:
         59:12:c9:7c:e5:63:ea:08:f4:f8:bf:c6:ae:a8:b5:ad:65:82:
         f0:db:8d:2c:76:b2:2c:4f:51:5c:e8:d9:57:0d:a2:da:4a:34:
         2f:c2:ad:5f:13:61:5d:87:27:77:d0:dd:86:88:5b:a3:77:5f:
         f8:8f:3e:52:a1:48:24:00:2e:fe:c3:a0:3a:cd:e6:c6:99:53:
         79:9c:ba:2c:a9:ab:7d:53:c9:a6:e4:3a:40:13:97:02:33:db:
         74:26:1c:fa:39:ea:2b:bd:61:be:de:5b:c0:84:5a:54:fd:79:
         aa:57:5d:bc:55:8d:76:9a:8f:7a:26:6f:2b:52:73:10:e8:7f:
         b1:0c:cf:2a:4d:fe:37:60:ad:41:c6:88:fe:75:2b:2b:f9:e5:
         74:ca:ec:18:af:b9:be:b4:4c:8e:8b:81:75:22:9e:78:3a:ab:
         94:3e:f4:d4:56:d3:7c:ce:7b:eb:e7:32:d3:d8:8a:ed:84:91:
         c6:14:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----