Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: 8AEvbqKS5w8RTsXxOna+H+fpFIbSDxxw02PbeF0S0Xk=
Subject key identifier: D5:D2:8B:25:3A:55:C7:7E:9A:16:0A:74:CD:C0:E4:DD:55:B7:CE:AD
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 439D3F62EC3E7FAFA6EE761DD7583212726B2E26
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:53:53 +0000
ROA not before: Thu 03 Jul 2025 15:48:53 +0000
ROA not after: Thu 02 Jul 2026 15:53:53 +0000
asID: 52025
IP address blocks: 2a05:dfc4:311::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9d:3f:62:ec:3e:7f:af:a6:ee:76:1d:d7:58:32:12:72:6b:2e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:48:53 2025 GMT
Not After : Jul 2 15:53:53 2026 GMT
Subject: CN=D5D28B253A55C77E9A160A74CDC0E4DD55B7CEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:03:2b:70:03:e6:18:e0:c7:46:dc:3f:9d:
8e:eb:3b:8e:81:82:38:34:58:ad:9e:04:aa:df:22:
17:18:6c:54:dc:49:80:ea:9f:a0:a4:3d:05:40:2b:
85:97:cb:db:5b:a9:de:8d:2b:bd:d8:1c:71:c6:c4:
ce:4b:de:f6:cc:21:06:42:5b:29:2c:4e:27:c5:68:
8d:ed:70:30:18:d7:30:4d:a5:1d:3d:c1:cb:25:d8:
fc:16:35:4f:57:0f:e7:92:1f:0c:6e:ef:e7:26:1e:
32:38:09:c2:73:7a:6f:32:fb:fe:da:de:94:85:e7:
a8:50:18:39:c0:d1:82:fd:75:ee:e8:1d:02:47:ce:
87:64:9e:3b:aa:4b:36:b4:e1:cd:06:a7:a0:0e:43:
6a:57:c0:42:52:e2:b6:a5:4f:5e:67:b2:7c:00:db:
7b:f4:3e:04:de:6d:aa:f6:3f:db:c4:3f:95:fa:34:
1d:27:2f:22:fe:f3:34:8c:2b:60:1a:e9:a1:fd:ac:
da:39:4e:f2:56:06:f9:03:fb:8b:26:f2:e1:a8:4c:
aa:8e:a4:17:da:23:a8:b4:c2:d5:b9:51:fd:b4:00:
02:e8:11:f4:18:73:9e:e4:1f:c8:30:90:8f:72:d0:
f3:7b:4a:44:43:a6:72:84:6c:75:61:72:d1:c8:ae:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:8B:25:3A:55:C7:7E:9A:16:0A:74:CD:C0:E4:DD:55:B7:CE:AD
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:311::/48
Signature Algorithm: sha256WithRSAEncryption
78:42:2a:e3:89:d7:dc:b6:a5:69:c5:d8:72:bd:36:27:eb:38:
2a:1d:9e:fd:58:40:df:62:18:34:d7:d4:86:38:a0:d7:c7:37:
1b:dd:2c:57:1a:ef:c1:ec:f3:29:5e:38:e9:1b:99:9e:df:bc:
90:b8:56:a2:ef:18:95:5b:bd:36:25:dd:c6:30:67:08:bd:5c:
37:ab:ba:7a:25:34:cc:c1:24:6b:a0:70:98:f6:7e:6e:1a:6a:
28:64:70:e1:46:43:99:6b:00:8a:bc:94:24:bd:93:ae:12:34:
72:a8:23:0e:99:c7:72:0f:e8:6e:35:56:ce:91:ba:71:61:f3:
e2:c3:b1:d7:84:08:e6:b5:ea:af:b4:d1:82:e0:a8:78:5f:a1:
58:c9:2d:82:ee:6a:d2:96:9c:c4:33:4c:68:da:41:7a:85:3a:
7a:dd:2c:8a:c6:7c:2b:7b:61:ca:fe:49:bd:c4:35:e9:f7:df:
b6:77:52:4c:db:3e:37:65:fd:b1:78:2b:be:b9:7d:d9:89:c6:
bd:fe:0f:49:a0:f0:4b:7c:6d:eb:60:79:14:63:96:b9:cc:db:
03:18:cb:b1:53:4f:17:a4:cf:00:5e:9a:fe:84:c6:ae:6b:bf:
8c:9b:37:9a:f0:40:3a:37:d8:35:17:0d:7f:23:91:3b:4b:21:
51:54:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:54 2025 by rpki-client