Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: 9G2bchtkgdbQuBvDl4FxglLofRKCtbpl7WMb5NTS6ug=
Subject key identifier: AA:EB:59:C5:A1:22:BD:D0:14:75:6F:91:50:C7:08:C1:4E:34:0F:3F
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 4F3F211DEF2732FAC3F7306F23092357D6B78EE6
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:53:46 +0000
ROA not before: Thu 03 Jul 2025 15:48:46 +0000
ROA not after: Thu 02 Jul 2026 15:53:46 +0000
asID: 52025
IP address blocks: 2a05:dfc4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3f:21:1d:ef:27:32:fa:c3:f7:30:6f:23:09:23:57:d6:b7:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:48:46 2025 GMT
Not After : Jul 2 15:53:46 2026 GMT
Subject: CN=AAEB59C5A122BDD014756F9150C708C14E340F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:b2:fd:1a:5a:63:61:33:de:3e:83:88:09:
9b:e5:25:2c:b4:fe:73:f2:47:08:c6:66:70:64:f0:
7f:86:22:2a:c6:6e:87:69:3c:1b:31:7e:aa:31:84:
ea:e4:2c:fb:ca:2b:0f:57:80:b7:67:da:64:a6:2d:
b4:e4:2a:51:5a:94:47:28:73:1c:5d:a9:14:90:75:
ae:13:4c:b0:69:5a:ea:e9:7a:c6:84:86:2a:20:0e:
24:09:fb:4a:83:6f:bd:9e:df:a2:53:5e:35:15:cb:
6d:48:47:cd:19:85:3f:a1:ae:8d:b3:fa:c5:7b:a7:
9e:d9:ae:2f:1d:72:83:eb:63:ee:fe:73:db:c6:69:
7a:bb:a0:56:86:0a:be:36:a1:6b:fa:3e:aa:1a:58:
87:2d:94:14:bb:76:36:6a:63:26:7b:b7:37:f5:0d:
1d:5a:4a:c8:4b:66:30:95:b4:9c:47:d5:61:d4:a8:
bd:70:ca:44:bd:c5:fc:a0:de:f7:93:8c:df:c2:e4:
5b:3d:a5:1d:c0:43:23:9f:aa:06:f0:91:9e:c3:b3:
cc:9b:07:76:11:16:b2:d6:c6:0a:46:fc:23:17:00:
fc:56:9b:f9:ca:d9:7c:40:84:74:34:27:ae:20:19:
33:73:2e:ba:54:a7:b3:e2:8b:9f:93:77:01:9c:45:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:59:C5:A1:22:BD:D0:14:75:6F:91:50:C7:08:C1:4E:34:0F:3F
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4::/48
Signature Algorithm: sha256WithRSAEncryption
79:05:1f:06:f6:3b:c0:39:78:39:7a:38:50:b4:71:af:dc:08:
32:57:25:b3:cd:d8:5f:7d:e2:a5:5f:fa:8a:c0:86:57:36:1b:
9d:c5:ae:64:01:21:58:43:94:ee:f5:0c:39:02:03:2f:72:ee:
f6:88:24:e4:a9:5a:43:bd:b9:dd:64:58:72:d5:27:be:52:05:
81:8a:9d:8f:0a:e6:7f:9e:f4:8a:80:ab:6e:e9:b5:a1:e5:21:
4c:64:b6:3b:60:21:d7:73:17:68:33:e0:4d:38:17:5d:56:bb:
4f:2f:25:08:9d:47:fe:eb:c7:8b:ba:6c:79:f1:cb:2d:b1:f0:
07:48:4b:ad:71:86:ab:36:08:3d:f3:62:04:64:da:64:9f:18:
38:27:15:aa:09:20:6d:bf:b3:42:5a:0e:25:d4:7d:80:b1:08:
95:55:78:d6:66:ac:81:e6:1c:e7:04:35:1e:e5:7e:1c:03:97:
1b:bd:3c:47:43:88:f2:93:be:03:ec:2e:8c:25:7a:b7:17:b8:
98:85:d8:dd:ca:1f:dc:a6:0f:ae:05:ae:ba:f0:f9:06:dd:55:
4c:1b:46:02:2c:d1:5d:85:cb:27:f0:63:1b:0c:74:d3:51:44:
4b:7c:4c:bc:66:cf:27:e5:ba:68:2e:3f:89:40:b7:9e:82:7d:
d3:77:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:51 2025 by rpki-client