Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
File: 326130353a646663343a3a2f33322d3332203d3e203532303235.roa (raw, json)
Hash identifier: IfFTmfyWwVBt6SJCllc/RnCmxYGn8RqqJqytiFVzIlQ=
Subject key identifier: 60:0A:86:6C:EE:99:74:C3:63:48:41:9B:74:3E:2C:0A:79:AD:C4:66
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 5A4417C0F92288424ED1435ABBC4A214DBFBE0FA
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:53:47 +0000
ROA not before: Thu 03 Jul 2025 15:48:47 +0000
ROA not after: Thu 02 Jul 2026 15:53:47 +0000
asID: 52025
IP address blocks: 2a05:dfc4::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:44:17:c0:f9:22:88:42:4e:d1:43:5a:bb:c4:a2:14:db:fb:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:48:47 2025 GMT
Not After : Jul 2 15:53:47 2026 GMT
Subject: CN=600A866CEE9974C36348419B743E2C0A79ADC466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:c0:69:27:ce:d4:f3:a9:ba:b5:77:86:da:
b8:b0:1b:6f:9a:03:56:7c:8e:ce:86:79:22:32:62:
ae:54:68:9e:0d:e3:4d:b5:fa:ec:34:af:de:f7:85:
a7:5e:31:db:e8:d0:5f:34:9f:da:15:7a:08:f2:4e:
92:b4:0d:06:5f:92:a7:87:45:83:85:75:80:f8:9d:
e9:ec:ff:d4:d2:b9:a6:ac:f8:66:d5:52:44:1b:30:
6c:60:89:21:68:9a:c3:a1:d1:71:7e:46:c5:88:37:
ae:37:32:b8:de:25:52:89:9d:0f:2b:6d:30:3e:dc:
26:ce:3e:c6:d1:5e:b3:76:22:db:81:a6:42:23:7d:
05:c9:53:11:ed:5a:f3:34:bc:c8:03:76:67:f3:6b:
b6:c6:68:b4:cf:12:b0:c5:b4:74:1f:e4:a3:c0:e0:
ee:c8:c3:b4:fe:08:09:c2:ba:e9:88:0b:e2:88:1f:
19:c8:a8:f0:3d:1f:2c:83:c1:49:2e:6d:5c:25:95:
fc:5a:9e:75:e6:64:ca:0c:8a:ee:af:7b:93:fe:c0:
a1:7f:52:30:a1:f3:9b:f0:d4:90:a0:b5:b5:94:9b:
4e:b9:a9:2c:a2:63:78:b7:04:41:5b:d2:73:5f:f2:
5f:d3:18:df:33:fe:77:8a:82:b9:52:00:d3:c9:e8:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:86:6C:EE:99:74:C3:63:48:41:9B:74:3E:2C:0A:79:AD:C4:66
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4::/32
Signature Algorithm: sha256WithRSAEncryption
58:de:d2:07:3d:95:ab:24:51:fd:84:6d:70:d4:2d:50:ee:9c:
36:b1:ec:42:1c:19:13:01:16:3d:c6:5d:a7:a7:ed:ec:a1:f5:
c4:1d:c3:2d:22:24:eb:e3:fd:e3:f2:3b:3f:4b:34:2b:b5:6d:
ad:ac:c6:3c:0d:3f:7a:7d:c9:f3:6a:2d:52:d6:a1:83:7e:5d:
d0:1d:95:51:36:ba:bd:59:50:a4:87:c3:5c:b4:a8:fc:ce:41:
c8:e0:fc:5f:df:ed:21:bc:95:48:06:57:75:25:5c:db:02:75:
d8:79:b2:6d:72:af:ef:a6:b2:35:5b:06:73:1a:e6:69:a5:0d:
e5:5f:a6:64:86:c4:d9:af:81:a6:d4:03:71:0c:96:14:53:b5:
e0:0b:7d:e4:5f:10:3f:8a:e7:ca:0d:c6:2a:b5:5b:c1:07:e5:
8e:b5:6a:a5:b1:40:b0:21:98:38:5f:a6:2a:29:01:79:db:5d:
34:26:5e:ea:c4:ab:78:bc:61:58:5b:6f:70:df:c3:9e:8d:b1:
27:a1:8f:d5:37:14:8f:4b:e8:34:bc:26:f6:7c:11:08:63:ff:
d0:ff:fc:f6:02:f4:40:d9:d8:ce:69:d1:5f:c2:08:02:e9:81:
cf:3b:ac:06:f3:f0:73:46:10:a1:af:c2:0b:9c:f5:09:cc:eb:
38:6d:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:54 2025 by rpki-client