Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: IkuGdf7bMDNKcCKN1AFpykDrFdBL/I5nytS5LoJHVrY=
Subject key identifier: F3:8C:34:62:A5:1B:F5:C2:2F:93:C0:21:2E:52:05:DC:A2:13:49:E2
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 45165795CC617FA3581AF4EEDD89C39FCC2351A7
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:53:51 +0000
ROA not before: Thu 03 Jul 2025 15:48:51 +0000
ROA not after: Thu 02 Jul 2026 15:53:51 +0000
asID: 52025
IP address blocks: 2a05:dfc4:c1b::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:16:57:95:cc:61:7f:a3:58:1a:f4:ee:dd:89:c3:9f:cc:23:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:48:51 2025 GMT
Not After : Jul 2 15:53:51 2026 GMT
Subject: CN=F38C3462A51BF5C22F93C0212E5205DCA21349E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:33:ee:fd:9f:36:b7:af:b3:5f:11:a2:10:
c4:b9:83:b8:ea:7e:8a:64:5a:da:20:6a:76:36:83:
4a:94:83:a6:70:a8:cd:58:07:f1:d4:9e:cc:2e:a2:
bd:2f:95:fd:cf:aa:dc:ff:58:82:e1:d8:05:61:49:
b8:50:5a:16:d6:ae:4b:90:11:13:25:58:c4:f8:7a:
2e:6f:07:58:34:c9:b8:da:6a:f6:4c:36:88:c5:95:
11:84:ac:c0:c2:2d:ed:9c:68:2b:51:2a:87:bf:43:
cb:06:83:8d:ea:1c:6c:89:1c:6c:3b:01:5c:cc:c9:
52:d3:97:57:06:80:2c:7f:0c:c0:bd:b7:e1:c2:7c:
9e:b3:bb:36:48:af:cc:2e:2e:ec:2f:21:56:25:2d:
c7:79:40:06:de:55:68:63:6e:2c:80:4d:93:28:fc:
2f:31:5f:1d:dd:02:ce:28:74:7f:6a:4d:38:92:3e:
f3:55:8e:19:13:6f:04:bc:0a:37:e3:00:6d:32:6e:
f1:cf:52:98:bb:87:73:7e:22:6b:b2:ed:b8:46:3f:
30:95:63:13:09:fa:5c:8e:f4:48:b6:fb:25:ed:28:
27:8c:ab:fe:d7:aa:ca:bd:e1:7c:d4:cf:4d:80:d2:
2d:52:7e:50:52:c7:74:15:bf:1e:27:73:f7:70:70:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:34:62:A5:1B:F5:C2:2F:93:C0:21:2E:52:05:DC:A2:13:49:E2
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:c1b::/48
Signature Algorithm: sha256WithRSAEncryption
81:bd:81:04:6e:ee:85:35:5a:16:0a:a0:fb:97:2a:42:16:90:
23:44:95:21:28:1c:82:9c:8e:2a:b8:49:f5:54:25:6c:ae:52:
20:69:c3:86:e0:92:2f:79:7f:d4:47:0f:b5:49:5d:ef:7f:17:
8f:2d:9f:1e:ab:3a:d6:d0:7c:c1:cf:7c:a7:d1:04:e1:6b:e6:
9a:19:2c:14:65:b7:ee:08:32:74:69:af:28:cf:da:ef:de:31:
cf:4d:76:70:d0:29:61:d1:7c:94:4a:4d:c0:51:ac:c7:5c:8a:
78:2f:10:ca:87:c2:73:a1:0c:7c:ab:51:31:6c:b1:4d:2c:4f:
10:c1:4c:28:d5:28:44:2b:ee:e6:5f:a5:35:8e:3f:c3:e7:0a:
25:8a:cc:e4:12:b2:b8:51:37:27:08:dd:d3:7a:36:b9:f8:38:
2a:3a:d3:41:30:55:f1:43:44:b4:41:ed:7c:bf:87:15:4d:ae:
1a:64:8f:d8:5c:8f:4c:ba:55:b6:0b:47:87:8c:a9:0f:a2:fc:
b3:33:62:dd:90:00:df:2c:c6:14:6e:97:63:a9:20:dd:e1:10:
ad:ea:3d:1f:3c:c8:01:3f:d2:94:3d:5a:69:63:eb:6d:70:2c:
de:1b:86:73:13:46:bd:e5:91:29:a6:ce:4d:e8:d6:73:60:5f:
a0:d1:dd:cd
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIURRZXlcxhf6NYGvTu3YnDn8wjUacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ4NTFaFw0yNjA3MDIxNTUzNTFaMDMxMTAvBgNV
BAMTKEYzOEMzNDYyQTUxQkY1QzIyRjkzQzAyMTJFNTIwNURDQTIxMzQ5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5zPu/Z82t6+zXxGiEMS5g7jq
fopkWtoganY2g0qUg6ZwqM1YB/HUnswuor0vlf3Pqtz/WILh2AVhSbhQWhbWrkuQ
ERMlWMT4ei5vB1g0ybjaavZMNojFlRGErMDCLe2caCtRKoe/Q8sGg43qHGyJHGw7
AVzMyVLTl1cGgCx/DMC9t+HCfJ6zuzZIr8wuLuwvIVYlLcd5QAbeVWhjbiyATZMo
/C8xXx3dAs4odH9qTTiSPvNVjhkTbwS8CjfjAG0ybvHPUpi7h3N+Imuy7bhGPzCV
YxMJ+lyO9Ei2+yXtKCeMq/7Xqsq94XzUz02A0i1SflBSx3QVvx4nc/dwcGg3AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU84w0YqUb9cIvk8AhLlIF3KITSeIwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
OC8zMjYxMzAzNTNhNjQ2NjYzMzQzYTYzMzE2MjNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QMGzANBgkqhkiG9w0BAQsF
AAOCAQEAgb2BBG7uhTVaFgqg+5cqQhaQI0SVISgcgpyOKrhJ9VQlbK5SIGnDhuCS
L3l/1EcPtUld738Xjy2fHqs61tB8wc98p9EE4WvmmhksFGW37ggydGmvKM/a794x
z012cNApYdF8lEpNwFGsx1yKeC8QyofCc6EMfKtRMWyxTSxPEMFMKNUoRCvu5l+l
NY4/w+cKJYrM5BKyuFE3Jwjd03o2ufg4KjrTQTBV8UNEtEHtfL+HFU2uGmSP2FyP
TLpVtgtHh4ypD6L8szNi3ZAA3yzGFG6XY6kg3eEQreo9HzzIAT/SlD1aaWPrbXAs
3huGcxNGveWRKabOTejWc2BfoNHdzQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:53 2025 by rpki-client