Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3434203d3e203532303235.roa
File:                     323630323a666261313a3961303a3a2f34342d3434203d3e203532303235.roa (raw, json)
Hash identifier:          j1F9gCmtl9DIuozGZyuPL2iHniN7ASn5teN+EBuxtV4=
Subject key identifier:   B4:30:B3:EF:34:79:F7:44:B8:F2:A7:1C:C2:44:FD:C2:E1:B8:FD:3D
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       0BC9C611720251B8AE1C9BF0090081DFA4D56E3B
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3434203d3e203532303235.roa
Signing time:             Sat 23 Sep 2023 23:53:52 +0000
ROA not before:           Sat 23 Sep 2023 23:48:52 +0000
ROA not after:            Sat 21 Sep 2024 23:53:52 +0000
asID:                     52025
IP address blocks:        2602:fba1:9a0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sun 24 Sep 2023 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:c6:11:72:02:51:b8:ae:1c:9b:f0:09:00:81:df:a4:d5:6e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Sep 23 23:48:52 2023 GMT
            Not After : Sep 21 23:53:52 2024 GMT
        Subject: CN=B430B3EF3479F744B8F2A71CC244FDC2E1B8FD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:d1:77:4d:92:d4:32:81:dc:60:60:5a:92:
                    e2:4b:58:95:62:d8:aa:3e:96:97:17:46:df:db:54:
                    3d:d9:92:a3:71:01:63:78:82:8b:f3:57:47:dd:b8:
                    b1:e5:10:cc:41:1e:fd:f2:aa:95:2f:26:0e:34:e3:
                    68:5b:cd:7e:5e:82:b9:fb:b0:2b:54:f6:8c:c9:87:
                    4d:fd:35:32:3d:fb:9a:e7:0f:65:7d:a2:68:12:05:
                    89:3f:f2:d9:a2:5e:33:c8:1b:68:af:be:1a:f6:d3:
                    8c:4b:b2:6d:b2:5e:8c:54:1c:13:76:55:3c:23:ad:
                    b1:cf:ba:47:fe:13:d7:02:46:d7:85:ef:0c:53:a3:
                    3d:84:dd:ec:fb:cc:eb:19:57:71:0f:3b:42:33:48:
                    83:17:2d:da:82:86:a3:50:09:49:32:e8:06:e4:e0:
                    66:0a:f4:d8:c2:8b:6c:84:aa:b8:c8:0d:30:e6:48:
                    0f:17:f3:ec:72:41:8d:d5:7d:c5:cd:90:bd:a3:53:
                    0b:2a:12:ff:34:98:f9:99:55:71:2e:71:5d:ec:31:
                    ba:cb:03:05:41:39:6f:d8:ab:ff:f3:02:78:36:ec:
                    0a:a8:5d:7d:72:9f:06:4b:e1:7b:a3:26:3d:e3:ec:
                    4d:56:1b:41:21:86:c7:3b:97:65:55:fb:11:03:b6:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:B3:EF:34:79:F7:44:B8:F2:A7:1C:C2:44:FD:C2:E1:B8:FD:3D
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/323630323a666261313a3961303a3a2f34342d3434203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:61:ff:7e:bf:b5:2c:53:86:ac:0c:ce:1b:6f:36:b8:d8:
         d6:c5:1d:6d:0b:0c:23:b6:d0:ee:73:fa:63:88:42:52:52:1e:
         bd:8f:56:26:a7:17:b6:3b:bc:67:87:96:7d:e2:0a:b1:52:ba:
         e6:ec:28:07:ba:5e:39:bc:b8:b1:08:2e:5d:ff:47:32:5a:46:
         e4:b0:4f:b0:bd:6a:d8:29:b8:06:c2:4f:14:d8:ee:f1:85:52:
         92:d5:11:f1:a6:01:ce:e9:a6:f8:49:ae:d0:e8:8e:62:5b:0f:
         9f:67:6f:18:e4:07:b9:e3:4c:31:3f:4e:26:c0:33:1c:81:8a:
         7d:2b:3d:88:86:c8:eb:f3:76:74:4e:97:fd:38:b7:c6:f3:30:
         cd:01:0f:39:fa:4e:a1:3b:58:d3:b3:47:a6:86:f6:9b:b1:e0:
         0b:96:eb:e7:aa:ba:6a:e6:d2:7a:2a:e3:1f:4e:a8:fb:67:31:
         85:10:ea:1d:2f:25:b1:3d:1c:42:59:b8:65:3b:ed:7f:ca:1a:
         db:23:21:33:87:9c:22:89:71:99:1a:9b:df:dd:de:89:68:91:
         b4:34:30:7d:49:97:24:c5:00:bb:61:c7:cf:77:60:67:a8:67:
         20:c7:57:b3:61:f8:b9:6b:7a:f5:94:3a:a1:ec:cf:59:35:35:
         27:34:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org