Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: eO7VpgFdNwGHqGgFZqbjxcWBFuhi04JKdDsOKNqitCI=
Subject key identifier: CD:C1:DD:D2:F6:5F:10:95:38:EC:AC:A9:2A:18:E5:68:E6:27:1C:4C
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 0DF9DA057EDA7B3DCC16782234A366A0846C370A
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:53:57 +0000
ROA not before: Thu 03 Jul 2025 15:48:57 +0000
ROA not after: Thu 02 Jul 2026 15:53:57 +0000
asID: 52025
IP address blocks: 2a05:dfc4:2126::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f9:da:05:7e:da:7b:3d:cc:16:78:22:34:a3:66:a0:84:6c:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:48:57 2025 GMT
Not After : Jul 2 15:53:57 2026 GMT
Subject: CN=CDC1DDD2F65F109538ECACA92A18E568E6271C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:f1:62:42:69:ff:18:18:9b:44:c0:ff:94:
6c:67:6f:cc:7c:53:0f:b4:b7:e4:b8:d4:75:89:93:
50:17:1e:4c:9e:75:3e:51:af:22:f9:2c:b4:40:67:
4e:66:ad:df:0c:57:a8:19:23:1a:38:1c:49:db:fc:
e7:a2:c0:93:c7:c2:4f:e7:6a:63:66:f5:7a:73:6f:
83:e4:4c:73:44:ff:d9:0d:aa:d4:45:0b:ea:57:84:
3a:c0:fd:63:fd:2e:7e:c0:cc:03:e2:61:8e:08:df:
48:65:57:20:77:23:bc:e7:67:c2:71:48:5f:12:37:
09:65:0f:e5:68:a3:64:db:17:a0:ab:e9:d0:73:78:
30:d9:6b:fe:b1:bc:24:aa:15:d6:7a:d3:05:e7:16:
ff:50:54:ce:5a:34:04:45:1d:db:97:5f:1b:9a:f5:
bd:ae:a1:dd:6f:06:67:e0:2c:56:1c:a8:dd:4a:b6:
11:a1:74:e3:72:a5:6a:1e:1c:45:89:89:21:4d:52:
a9:ea:e8:ed:12:4d:c3:e1:0c:73:eb:22:89:6e:b5:
25:fd:ed:45:96:15:ea:cf:4e:16:40:f6:30:73:7d:
7e:34:e7:58:da:3f:a2:9f:dc:71:6d:de:5d:7b:29:
05:b1:84:e8:0b:8a:69:85:9f:f1:bb:80:85:b8:50:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:DD:D2:F6:5F:10:95:38:EC:AC:A9:2A:18:E5:68:E6:27:1C:4C
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:2126::/48
Signature Algorithm: sha256WithRSAEncryption
4b:7b:1f:59:af:b7:3b:52:91:11:5a:1d:ce:b0:5e:aa:29:2a:
96:f8:e7:57:60:ff:d2:54:a0:2a:0b:74:bc:27:ff:54:52:ee:
d5:49:32:11:38:49:f8:86:29:2d:ce:7d:e2:3b:b7:d8:42:c7:
7f:0f:3f:7c:7c:2d:3c:f0:17:5f:02:fb:46:7c:d6:06:d3:80:
f4:62:5e:e3:a5:42:ca:0b:c4:3d:78:54:bd:14:fc:51:d0:3f:
fc:56:8d:e2:8f:77:3d:2b:0a:a7:41:2a:f3:0e:4b:7e:26:f2:
b2:4f:ba:38:40:db:e9:db:89:5a:89:77:75:a9:b6:9c:7f:1f:
5c:d3:1a:5d:ca:ce:46:72:ce:dd:00:3f:7a:81:0b:f0:9f:ce:
fb:c0:41:2d:d0:94:8b:63:33:f6:e9:b4:41:ff:5b:c3:f6:b9:
ba:98:66:74:bf:9b:bb:44:e5:25:14:cd:ed:ed:e1:19:d5:8f:
e8:6a:0c:63:77:20:37:ab:ca:12:03:6e:38:3a:c9:5e:ec:ea:
6b:ee:a3:a9:e1:be:73:52:42:93:e8:e5:4b:d1:d5:62:4f:ed:
3a:84:5a:20:ee:6e:e7:54:03:00:e6:1a:f9:c7:ac:aa:f1:c5:
f6:19:7b:07:ef:7a:09:64:17:39:2b:86:9a:9f:b9:51:e5:d2:
c2:54:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:39 2025 by rpki-client