Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: 5NKtFU8uw9ELyQXHEA3YlFRCitKQhaH+ShusarM6kcE=
Subject key identifier: DE:FC:AA:B5:AF:91:12:07:5E:77:1C:07:71:36:EE:60:9B:3E:4D:BA
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 0A927D39BF8CCEBC22392FC28C573BD31E0099DE
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:08 +0000
ROA not before: Thu 03 Jul 2025 15:49:08 +0000
ROA not after: Thu 02 Jul 2026 15:54:08 +0000
asID: 52025
IP address blocks: 2a05:dfc4:12f::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:92:7d:39:bf:8c:ce:bc:22:39:2f:c2:8c:57:3b:d3:1e:00:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:08 2025 GMT
Not After : Jul 2 15:54:08 2026 GMT
Subject: CN=DEFCAAB5AF9112075E771C077136EE609B3E4DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:3b:41:bf:99:e0:94:80:fd:d3:16:b8:4a:
a3:3a:8b:61:68:3c:9a:12:e0:c1:cc:53:d6:3e:d4:
f8:00:9e:53:bb:8e:d9:c6:f4:0b:63:12:ba:6f:1e:
b8:23:38:25:74:5c:79:1a:9d:4e:03:18:c0:7a:b4:
75:05:81:7c:fa:81:73:6e:e1:b3:dc:75:9f:45:92:
f1:ef:9f:f7:e6:c4:e3:bf:08:b5:2f:9a:12:f2:19:
00:d6:2d:60:3b:b9:b1:78:7c:bf:e4:7f:30:51:e6:
66:f9:62:d1:f0:d2:35:3b:95:a2:36:a5:cf:6c:2f:
f7:13:d0:8b:6e:04:73:b7:20:28:41:c7:81:40:be:
3c:ba:9f:ed:65:24:b2:3d:10:33:df:5a:c2:b7:7a:
17:2f:59:89:67:63:1d:49:cd:36:2f:b8:6c:c7:5c:
f4:0c:84:cc:7e:2a:b8:d6:62:a3:3d:59:ed:4f:3f:
c7:33:d3:9d:f3:1e:c4:73:a3:d0:4e:62:38:81:4b:
a1:98:e4:8a:27:b5:94:5c:77:ea:4e:13:2e:58:2b:
90:87:9d:3c:87:32:6a:17:c4:c0:e1:49:96:9f:fb:
cf:6a:5a:1a:9a:c0:9e:ab:b2:e1:56:b4:0c:01:e3:
d1:e7:e1:d9:be:f1:2b:c3:d4:b6:e9:71:4f:6c:bb:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:AA:B5:AF:91:12:07:5E:77:1C:07:71:36:EE:60:9B:3E:4D:BA
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:12f::/48
Signature Algorithm: sha256WithRSAEncryption
67:c1:8f:4a:d1:ee:1a:28:6c:6b:91:ec:2e:5b:7f:e6:9a:b5:
d3:5d:44:8f:79:08:26:03:bc:a8:7a:46:52:87:44:d6:a9:cf:
50:81:d7:ab:45:e3:e6:07:ff:a3:63:91:d7:f8:43:af:01:47:
b0:38:65:48:e3:42:c5:58:d4:34:fd:53:76:c4:0f:54:cd:c9:
5d:d9:ab:45:a8:1a:e2:b6:01:3f:49:c3:a3:2e:89:61:fe:a3:
02:2f:8d:ab:f8:e1:99:21:77:cc:42:c9:bf:30:4f:4c:45:aa:
57:35:cd:44:7f:9d:ba:9c:68:7d:4f:14:8c:d8:0d:d9:ec:e6:
3c:6b:7e:70:8b:e1:8b:1f:16:cb:6a:5e:15:1e:c9:41:3c:77:
d5:e4:b8:cd:05:e5:5e:f6:84:05:58:bb:8f:4e:54:06:8d:7a:
96:fa:19:f1:cc:78:36:4d:d0:46:74:2d:83:4a:c7:a9:ab:c6:
57:9e:90:53:14:a8:de:30:f5:98:5e:70:4f:3b:ff:ce:2b:6d:
21:af:ff:94:17:91:a8:81:2c:65:01:f7:91:59:3d:50:52:a9:
39:b4:0d:db:ac:ab:3f:57:19:2a:38:41:e7:dd:16:ba:6e:65:
b3:cc:a3:f1:1d:70:41:64:11:62:f0:50:ac:b6:5d:20:35:ba:
06:12:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:52 2025 by rpki-client