Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: blwkUpWSrkt7BH0RnOjzxfWeFP/onIi3h759thdHL48=
Subject key identifier: ED:E8:08:D0:7A:2B:07:E9:D5:D5:B0:CA:EF:0C:CC:8C:A7:32:F5:44
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 3BBC7F6C7FF717BA2D455AEEA12226FA465907CC
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:00 +0000
ROA not before: Thu 03 Jul 2025 15:49:00 +0000
ROA not after: Thu 02 Jul 2026 15:54:00 +0000
asID: 52025
IP address blocks: 2a05:dfc4:1b4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bc:7f:6c:7f:f7:17:ba:2d:45:5a:ee:a1:22:26:fa:46:59:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:00 2025 GMT
Not After : Jul 2 15:54:00 2026 GMT
Subject: CN=EDE808D07A2B07E9D5D5B0CAEF0CCC8CA732F544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:ac:eb:e4:fc:6b:cd:fd:0d:51:c7:be:d5:
c9:c8:9a:4a:a8:de:a1:2e:c2:87:ce:36:a2:db:b3:
88:3b:6e:64:63:69:71:97:a5:95:ae:e2:be:4a:e3:
db:28:a6:2c:9e:4c:6b:ce:11:26:92:1a:bd:71:99:
a1:97:05:75:9d:7d:8a:2a:fd:1b:24:6c:ad:f4:06:
a0:75:f8:9e:cb:9b:39:c0:1d:d1:51:b6:a8:03:cc:
77:c0:2b:08:32:fe:09:83:b7:7c:20:eb:b7:53:73:
6c:b5:e7:ee:c6:35:9a:5a:99:4f:d3:b2:2f:80:a1:
f0:af:c4:c9:16:d1:0d:c6:b0:fd:5c:c3:d6:2d:44:
fe:cb:b2:ab:d4:98:93:99:d2:5f:64:c4:5a:0c:05:
c6:bf:4a:55:a4:63:63:56:9f:a9:72:e5:43:58:69:
cf:b4:d2:60:7a:dd:05:f4:a6:f5:67:c1:e9:33:bc:
f1:fd:05:99:98:87:ee:e5:a5:ac:b2:03:ac:e6:dd:
2c:25:94:d6:dd:df:8f:82:fd:cc:4b:58:f9:b2:74:
53:57:ee:a1:d9:e9:4a:c7:0f:32:ce:bf:d6:49:52:
b0:02:db:1e:96:46:b8:21:ee:85:86:0c:21:fe:8d:
38:3e:1f:3a:61:0b:fa:c1:f7:ec:21:d1:b1:5f:af:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:08:D0:7A:2B:07:E9:D5:D5:B0:CA:EF:0C:CC:8C:A7:32:F5:44
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3162343a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:1b4::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a2:99:8a:42:99:06:cd:95:17:b1:8f:f4:ba:76:50:ed:ca:
08:1d:ee:a5:72:7d:d3:64:e3:c5:b3:49:e4:20:eb:9d:08:a8:
e0:20:7d:8f:0d:cd:3f:18:9b:dd:fb:2b:e5:29:4e:e5:95:8a:
64:2b:29:9f:5e:40:7d:15:ed:2f:d2:0f:21:54:2a:11:90:f1:
0a:30:85:82:41:4b:8d:c5:cc:2b:76:3e:d1:b0:ac:f7:3d:08:
a7:63:e7:85:4f:4f:fe:c0:c0:7b:66:42:79:f6:90:93:e7:53:
9e:e5:08:4a:1a:62:c6:4b:a8:44:74:42:29:e5:48:c7:3e:f0:
e0:a3:ce:3b:9d:4f:89:72:55:ba:e7:58:9b:67:4b:ba:bd:94:
af:ba:e0:25:ad:3a:ff:e8:4c:c8:e0:e4:3c:2c:8d:17:f9:4f:
3f:38:ec:94:36:ae:a7:48:72:fb:82:83:eb:9d:14:a2:49:6c:
0c:a9:b7:99:ee:e8:6a:45:7e:9e:07:41:54:31:ca:4d:b5:55:
0e:6d:80:56:59:32:b3:0e:a4:10:74:37:48:75:26:25:e6:bc:
b6:e0:b3:dc:ae:c8:b5:52:c4:e9:72:18:c0:1e:d0:b6:94:d5:
1b:dc:72:b8:3e:97:30:2b:40:52:9a:5a:38:90:1a:fb:c5:2e:
d9:07:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:53 2025 by rpki-client