Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: R5AXXoube7Ir4Dr6KNlANC5WT3AvqrYVVIRdw4R4jes=
Subject key identifier: 9E:C3:F7:1D:36:3F:84:53:93:47:11:1A:E9:3B:07:E1:DB:FE:9A:72
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 3A7B72FBFE942BBF71F13B278F92CF9FBCE2989D
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa
Signing time: Mon 25 Aug 2025 20:07:09 +0000
ROA not before: Mon 25 Aug 2025 20:02:09 +0000
ROA not after: Mon 24 Aug 2026 20:07:09 +0000
asID: 52025
IP address blocks: 2a05:dfc4:242d::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7b:72:fb:fe:94:2b:bf:71:f1:3b:27:8f:92:cf:9f:bc:e2:98:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Aug 25 20:02:09 2025 GMT
Not After : Aug 24 20:07:09 2026 GMT
Subject: CN=9EC3F71D363F84539347111AE93B07E1DBFE9A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:9c:a1:74:90:36:f7:1b:02:4b:57:ed:f6:
cd:7a:02:34:75:5c:b3:e8:6c:5b:96:75:1a:65:77:
fd:eb:19:b7:33:59:a6:3c:6a:65:a6:e5:71:ff:76:
29:a5:a9:60:8c:10:25:39:ce:96:91:64:bd:2c:e8:
d7:61:85:b6:3c:db:e5:19:36:e1:11:d9:2a:81:da:
9f:ad:c1:4f:96:82:3f:f4:5b:b0:e7:ee:ac:b5:ab:
85:29:51:b5:5a:a7:f7:9e:4d:c3:04:fc:4d:02:43:
2b:93:e2:d4:0c:fc:b1:41:8c:9b:d9:a3:7c:9e:c3:
4c:e8:08:38:5f:3f:bf:53:d6:da:fd:b0:e7:b9:b3:
2e:5a:63:9f:0d:eb:e4:1b:63:33:d1:c3:6e:31:0e:
5f:06:64:24:17:ca:fc:5d:40:97:df:58:f9:80:f7:
ef:fc:5e:57:48:ab:c2:e4:df:00:0e:37:32:4c:92:
c5:3c:aa:67:81:34:af:c7:09:f5:48:9c:02:5a:54:
49:a6:dc:e3:81:3d:26:67:ee:72:7f:8e:4f:0e:5c:
32:71:30:db:19:0f:8a:30:20:eb:04:76:5d:8b:3e:
e2:70:32:ea:d7:c0:58:59:8e:30:be:0c:fb:67:38:
40:db:1d:75:5f:f2:d7:43:f0:5c:64:dc:35:b1:38:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:F7:1D:36:3F:84:53:93:47:11:1A:E9:3B:07:E1:DB:FE:9A:72
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a323432643a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:242d::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c3:85:2f:aa:5d:c3:23:bb:f1:21:2a:af:45:27:4e:56:ff:
16:6c:5d:b5:f3:59:19:46:5b:1e:5f:99:f9:e9:69:96:5f:26:
5f:7d:3a:fc:41:19:5d:00:25:39:15:0c:de:e9:68:5d:e4:cd:
9e:ed:ea:89:d7:d0:51:a3:9e:27:56:23:ff:9c:58:17:8c:12:
2f:33:94:50:9b:03:13:4b:7c:15:3e:ce:6f:29:c0:c9:18:b7:
27:aa:5f:56:78:f7:ea:4c:5e:3d:2b:ee:c7:c2:f7:25:5b:be:
d4:d2:f4:90:c3:7d:5c:01:bf:b0:b5:a7:b3:c4:53:da:21:2c:
08:dd:43:ff:fa:54:cc:b9:69:21:73:10:4b:93:a6:f6:01:3e:
e9:b2:72:d4:5c:51:ea:e1:3a:3c:41:21:c8:80:75:78:94:08:
7e:44:51:98:1b:8c:f7:ca:66:88:8d:80:ad:7a:90:f8:f1:2b:
bf:02:7c:24:13:de:67:67:2d:6e:9d:fe:fd:7d:4e:99:76:0c:
1f:48:7a:94:71:08:bc:09:ae:13:fe:5b:10:fa:d9:37:db:c3:
92:0c:fd:66:30:0a:ae:c2:f3:29:f3:be:ee:19:b3:ee:01:d4:
a5:22:7b:0d:dd:f0:9c:e4:b0:8c:9c:58:08:9a:93:90:b7:db:
55:f2:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:36 2025 by rpki-client