Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: ygXfN/JB+BcCOI9TnDOKI0VLv6Dg8juZIGYDuNy4GOI=
Subject key identifier: 93:47:61:7B:51:7C:BB:61:45:2B:E9:A5:74:EB:97:84:B7:88:E9:41
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 572D5FC96E00585CB91EB9E2D7CAF4CC00BF24D5
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:01 +0000
ROA not before: Thu 03 Jul 2025 15:49:01 +0000
ROA not after: Thu 02 Jul 2026 15:54:01 +0000
asID: 52025
IP address blocks: 2a05:dfc4:79::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2d:5f:c9:6e:00:58:5c:b9:1e:b9:e2:d7:ca:f4:cc:00:bf:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:01 2025 GMT
Not After : Jul 2 15:54:01 2026 GMT
Subject: CN=9347617B517CBB61452BE9A574EB9784B788E941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:8f:07:c0:d7:f5:8d:54:a3:8d:dd:38:cc:
48:ef:95:b9:4c:4d:cd:53:5c:61:83:90:d7:16:f9:
ff:89:00:9a:25:71:bc:bc:f4:f3:05:0c:81:a5:e2:
9f:bc:55:22:bf:41:a2:cc:9d:11:a8:56:29:73:64:
73:6b:4b:20:f5:8e:5e:57:11:6e:d9:18:98:3e:d1:
37:7f:f6:29:8c:ce:44:fc:93:93:7d:01:59:cb:ce:
90:7e:91:c5:89:ae:47:40:f0:41:dd:54:dc:e4:fc:
d8:18:87:7d:30:14:0e:8b:d7:2f:8b:0d:03:11:c2:
c9:22:cb:be:84:09:f6:ff:40:db:e5:3c:a7:e2:9a:
f5:8f:07:aa:7a:6b:00:6d:20:21:fa:7a:8f:9e:fc:
c7:b2:42:74:cc:59:3e:9c:fd:4b:ea:56:90:b1:3f:
e1:b5:44:4a:2c:64:b6:50:2c:23:3d:9a:d3:84:4c:
2b:5b:5e:55:0f:12:99:09:0d:2d:39:26:bd:e5:d0:
1c:d7:8e:9a:5e:5e:b4:42:fd:04:27:a0:17:a9:71:
eb:fb:7f:32:b0:d8:67:06:e5:3d:2c:9e:f4:97:98:
cb:5c:e8:45:8a:28:7b:87:25:d7:b5:d5:6a:dc:7d:
1a:30:41:c8:be:76:c0:d4:96:33:66:d4:31:01:94:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:61:7B:51:7C:BB:61:45:2B:E9:A5:74:EB:97:84:B7:88:E9:41
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:79::/48
Signature Algorithm: sha256WithRSAEncryption
7f:fa:c6:c3:9d:e0:91:87:c5:77:58:0a:3f:c2:ed:ba:94:fe:
e8:a3:92:f0:a8:d5:db:ac:f7:07:ea:9d:32:e0:19:76:c8:d5:
3b:9a:b4:e9:72:b1:52:4f:a6:9c:fe:ed:32:e7:63:5f:62:2d:
21:d8:d7:d4:a5:c3:62:89:87:12:f7:65:b5:df:43:c6:fd:62:
d4:1e:2e:23:3b:19:ec:e1:22:7d:fc:77:4a:16:93:31:ab:18:
32:19:30:68:15:ef:f4:be:21:43:f2:01:33:a9:63:bb:38:d2:
26:ea:75:a3:c0:3d:01:9a:f4:4d:de:1c:87:f1:3e:c1:57:9b:
24:38:cf:6b:4e:4a:c3:12:92:c8:2a:18:cc:c1:6c:28:70:1a:
f7:22:da:cd:e9:50:88:1a:38:64:e6:06:2e:15:84:90:23:6d:
c1:1b:f9:65:e0:1b:a0:8d:7f:c3:aa:89:8a:97:aa:07:ff:b9:
f0:40:ce:06:8d:55:a7:e2:9f:24:86:20:ec:57:38:c6:84:de:
5e:96:88:10:e0:c6:79:e4:8d:b2:be:07:5d:6e:0c:0b:11:30:
ea:12:a7:da:bf:9e:c1:1b:3e:ce:c2:5b:9f:d0:e7:24:ce:bc:
74:be:12:4d:3c:bb:25:c8:27:8d:aa:a2:7c:95:da:6a:8f:16:
c6:78:72:51
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUVy1fyW4AWFy5Hrni18r0zAC/JNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDFaFw0yNjA3MDIxNTU0MDFaMDMxMTAvBgNV
BAMTKDkzNDc2MTdCNTE3Q0JCNjE0NTJCRTlBNTc0RUI5Nzg0Qjc4OEU5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4048HwNf1jVSjjd04zEjvlblM
Tc1TXGGDkNcW+f+JAJolcby89PMFDIGl4p+8VSK/QaLMnRGoVilzZHNrSyD1jl5X
EW7ZGJg+0Td/9imMzkT8k5N9AVnLzpB+kcWJrkdA8EHdVNzk/NgYh30wFA6L1y+L
DQMRwskiy76ECfb/QNvlPKfimvWPB6p6awBtICH6eo+e/MeyQnTMWT6c/UvqVpCx
P+G1REosZLZQLCM9mtOETCtbXlUPEpkJDS05Jr3l0BzXjppeXrRC/QQnoBepcev7
fzKw2GcG5T0snvSXmMtc6EWKKHuHJde11WrcfRowQci+dsDUljNm1DEBlG/5AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUk0dhe1F8u2FFK+mldOuXhLeI6UEwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAeTANBgkqhkiG9w0BAQsFAAOC
AQEAf/rGw53gkYfFd1gKP8LtupT+6KOS8KjV26z3B+qdMuAZdsjVO5q06XKxUk+m
nP7tMudjX2ItIdjX1KXDYomHEvdltd9Dxv1i1B4uIzsZ7OEiffx3ShaTMasYMhkw
aBXv9L4hQ/IBM6ljuzjSJup1o8A9AZr0Td4ch/E+wVebJDjPa05KwxKSyCoYzMFs
KHAa9yLazelQiBo4ZOYGLhWEkCNtwRv5ZeAboI1/w6qJipeqB/+58EDOBo1Vp+Kf
JIYg7Fc4xoTeXpaIEODGeeSNsr4HXW4MCxEw6hKn2r+ewRs+zsJbn9DnJM68dL4S
TTy7JcgnjaqifJXaao8WxnhyUQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:40 2025 by rpki-client