Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: 4JTlPlVERoKN4hYvNIY0wKszAZEfw7yKmULRxi0zSAc=
Subject key identifier: 01:D9:03:B6:9A:41:33:CB:85:6F:61:CF:BC:2E:EB:AF:53:7E:10:34
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 09502B9A18190B453E542B31CA0C15D441F4934E
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:12 +0000
ROA not before: Thu 03 Jul 2025 15:49:12 +0000
ROA not after: Thu 02 Jul 2026 15:54:12 +0000
asID: 52025
IP address blocks: 2a05:dfc4:2024::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:50:2b:9a:18:19:0b:45:3e:54:2b:31:ca:0c:15:d4:41:f4:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:12 2025 GMT
Not After : Jul 2 15:54:12 2026 GMT
Subject: CN=01D903B69A4133CB856F61CFBC2EEBAF537E1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:1c:65:c2:b4:31:30:79:e8:90:50:8f:8c:
70:79:c5:a6:02:7f:aa:e9:00:5f:df:3e:5e:26:17:
d0:c3:1b:e8:a7:c6:57:e7:e1:2d:5e:78:8b:bf:24:
ea:6e:6e:34:35:58:fe:98:42:ee:92:50:c9:5c:7a:
f7:00:00:e5:7f:aa:ba:70:e1:6f:68:d5:60:39:c1:
67:59:db:87:bc:3a:45:fd:ff:18:5a:a0:33:6a:20:
6d:5c:2d:d7:f5:82:96:ff:38:8e:55:a2:01:c1:0c:
19:14:3a:43:60:7c:06:4d:05:6d:f5:8e:e3:02:a6:
a8:ca:f7:6d:ca:ba:3b:ce:5a:1a:c6:93:07:26:08:
02:3f:74:5e:55:59:88:24:e8:63:4c:ff:75:09:d8:
35:66:26:ab:5a:ed:7f:26:43:e2:96:7d:a6:02:b2:
47:a7:aa:ac:2d:4f:5d:f4:ac:d6:a0:e6:f3:94:f1:
ee:a8:fa:b5:ad:5e:21:07:0b:55:8b:bc:1c:4c:8b:
ba:d7:5e:f4:66:93:7e:93:a7:53:12:c0:0a:bc:b8:
f1:b3:2e:47:d9:6b:ca:af:cf:9d:e0:4f:75:90:3a:
9a:c1:c7:e1:73:c9:8d:e3:19:a7:fd:58:f2:88:4f:
5f:47:95:05:fa:92:32:c6:34:4d:09:75:00:6a:cf:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:03:B6:9A:41:33:CB:85:6F:61:CF:BC:2E:EB:AF:53:7E:10:34
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323032343a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:2024::/48
Signature Algorithm: sha256WithRSAEncryption
0b:86:38:b1:0c:4f:32:bd:3b:b3:fd:76:97:c2:8b:3e:6b:9b:
db:9a:34:b4:94:29:ea:25:43:8b:0a:2e:88:8e:9b:7f:a9:27:
ac:e4:8c:5c:44:bd:22:d1:88:ed:de:a8:82:cd:c7:5b:f2:eb:
5c:59:3c:6c:8b:27:6a:72:f7:de:7e:a6:3a:17:a9:3d:ac:b8:
3b:29:bd:07:0e:8d:10:0a:81:23:3f:9c:67:f2:3e:16:e0:2e:
ad:c6:74:b5:b3:8e:ec:ce:08:6e:62:cc:3e:a5:46:9b:0b:11:
10:40:6d:6a:ff:da:e9:6e:de:8e:d5:a7:0f:d8:3c:58:6c:04:
32:65:c2:4e:ea:85:94:1c:6d:15:df:2e:49:40:9d:a8:9e:a0:
09:76:b5:11:58:a8:e5:a0:e0:af:1a:5a:3c:e7:a5:bc:58:e5:
d2:a2:91:13:50:cc:99:35:8d:13:5c:cf:94:e2:70:12:b9:ea:
1b:87:2b:1b:87:fc:49:54:36:39:e7:e3:fc:fa:c0:95:d0:ee:
dc:db:28:dd:59:90:1c:36:59:2f:33:82:f5:21:ed:7c:0d:5b:
d8:70:db:11:63:38:47:25:9b:b0:3a:4c:e3:21:18:bc:69:49:
43:c1:68:70:3a:41:d4:57:90:b1:bf:c5:f5:97:40:5a:b7:5b:
a1:a1:89:13
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUCVArmhgZC0U+VCsxygwV1EH0k04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MTJaFw0yNjA3MDIxNTU0MTJaMDMxMTAvBgNV
BAMTKDAxRDkwM0I2OUE0MTMzQ0I4NTZGNjFDRkJDMkVFQkFGNTM3RTEwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljRxlwrQxMHnokFCPjHB5xaYC
f6rpAF/fPl4mF9DDG+inxlfn4S1eeIu/JOpubjQ1WP6YQu6SUMlcevcAAOV/qrpw
4W9o1WA5wWdZ24e8OkX9/xhaoDNqIG1cLdf1gpb/OI5VogHBDBkUOkNgfAZNBW31
juMCpqjK923KujvOWhrGkwcmCAI/dF5VWYgk6GNM/3UJ2DVmJqta7X8mQ+KWfaYC
skenqqwtT130rNag5vOU8e6o+rWtXiEHC1WLvBxMi7rXXvRmk36Tp1MSwAq8uPGz
LkfZa8qvz53gT3WQOprBx+FzyY3jGaf9WPKIT19HlQX6kjLGNE0JdQBqz9anAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUAdkDtppBM8uFb2HPvC7rr1N+EDQwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMjMwMzIzNDNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QgJDANBgkqhkiG9w0B
AQsFAAOCAQEAC4Y4sQxPMr07s/12l8KLPmub25o0tJQp6iVDiwouiI6bf6knrOSM
XES9ItGI7d6ogs3HW/LrXFk8bIsnanL33n6mOhepPay4Oym9Bw6NEAqBIz+cZ/I+
FuAurcZ0tbOO7M4IbmLMPqVGmwsREEBtav/a6W7ejtWnD9g8WGwEMmXCTuqFlBxt
Fd8uSUCdqJ6gCXa1EVio5aDgrxpaPOelvFjl0qKRE1DMmTWNE1zPlOJwErnqG4cr
G4f8SVQ2Oefj/PrAldDu3Nso3VmQHDZZLzOC9SHtfA1b2HDbEWM4RyWbsDpM4yEY
vGlJQ8FocDpB1FeQsb/F9ZdAWrdboaGJEw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:41 2025 by rpki-client