Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: cFfpf2ukIFEkV8KI4kf47qq6PES4IwFpZAC70Zmyepw=
Subject key identifier: 01:C3:57:F6:FF:4A:A2:57:B7:5A:A2:9C:D6:A2:49:6D:95:66:C6:1D
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 30609F92476FA388BBB48EE06458EB1B5D50D5FB
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:09 +0000
ROA not before: Thu 03 Jul 2025 15:49:09 +0000
ROA not after: Thu 02 Jul 2026 15:54:09 +0000
asID: 52025
IP address blocks: 2a05:dfc4:c32::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:60:9f:92:47:6f:a3:88:bb:b4:8e:e0:64:58:eb:1b:5d:50:d5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:09 2025 GMT
Not After : Jul 2 15:54:09 2026 GMT
Subject: CN=01C357F6FF4AA257B75AA29CD6A2496D9566C61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:a9:44:8c:26:02:99:f3:c3:7c:86:2c:f4:
b7:bc:92:90:2f:09:52:77:cd:5b:19:af:5e:c8:fd:
ec:8a:5f:e9:ee:48:93:ba:ec:6b:75:11:3d:25:85:
c8:3b:cc:cc:5d:19:0a:a8:46:22:6b:12:5e:4a:7a:
17:04:35:ae:06:47:f6:8f:52:e1:4d:f0:75:6b:e3:
64:3d:c2:46:40:d2:db:1e:1c:60:57:0a:ea:b3:b6:
f8:4f:97:f0:56:0e:1f:fe:48:1f:15:be:74:b1:ce:
4c:3c:0e:20:83:fe:98:a6:4c:28:37:ed:d7:d6:56:
a3:bd:ba:3c:c0:3e:ee:4e:8f:74:82:82:ea:c3:8b:
59:50:1b:b9:4d:32:64:2f:5d:64:b9:46:d3:85:6a:
c3:ea:ae:ff:ec:ac:8e:30:7e:92:25:d1:1f:ed:77:
f0:6c:84:0c:42:f3:a8:55:8c:1f:83:f0:d3:f4:63:
85:8e:23:89:78:68:9c:71:71:13:f1:20:e5:35:4d:
63:92:05:87:c4:16:c9:ee:eb:a3:a0:ad:28:df:0b:
2c:54:cd:8c:fd:cc:26:fe:66:05:ea:af:50:46:a9:
87:19:10:a4:d3:78:c6:84:21:17:f1:e0:00:30:ac:
fe:65:e0:48:26:99:8c:05:b7:3c:66:35:ad:41:a8:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:57:F6:FF:4A:A2:57:B7:5A:A2:9C:D6:A2:49:6D:95:66:C6:1D
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a6333323a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:c32::/48
Signature Algorithm: sha256WithRSAEncryption
02:5e:64:50:15:8c:11:64:8a:56:a3:a6:93:cb:1f:9b:d1:79:
04:be:ca:a3:56:c4:ce:7f:fb:e9:ef:32:2e:2b:92:5f:06:32:
82:df:ee:14:41:57:ed:c5:4a:4a:4b:51:2c:03:8e:4d:c7:f2:
62:e2:81:18:f3:74:40:d4:69:02:b1:f8:cf:71:9c:81:8d:2f:
af:f8:c4:78:c3:2f:d9:8d:60:96:9f:95:97:e4:e0:03:d6:9b:
a9:9f:2a:88:01:23:13:09:3c:c3:95:32:93:ac:b2:2a:b0:d9:
22:b1:0f:4e:b9:59:34:ed:c8:a4:b2:b5:a4:4f:a8:b2:f1:13:
7f:3f:26:9d:c3:73:3a:b6:84:5e:37:c8:61:fb:ba:61:2d:13:
fe:fc:a7:55:2b:d2:ed:eb:80:b8:4f:31:7c:33:c7:d2:15:1a:
fc:4f:55:0c:e6:82:35:41:36:7e:81:97:f6:20:dd:33:d1:76:
58:e4:11:41:8a:01:b3:90:20:15:38:80:62:1e:e7:d8:cd:62:
dc:15:ad:e0:73:b6:40:19:c9:85:82:8b:2b:95:01:77:48:69:
09:fa:14:72:02:4b:cd:a7:ff:1a:df:d2:c7:40:5c:80:be:cf:
06:79:67:aa:df:4b:df:45:5a:1e:f0:1b:30:f3:06:49:d5:cc:
fc:43:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:46 2025 by rpki-client