Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: yqDIRxKR98FCExUgraJluWHGteaxEn4i2VDDSxrRuIc=
Subject key identifier: 00:06:FA:2C:04:B5:4D:F1:86:DE:1A:DD:23:E7:32:53:AF:4A:12:29
Certificate issuer: /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial: 2109B26C76510BAB97F45C010EB8EA5B9E2C9CA1
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 03 Jul 2025 15:54:06 +0000
ROA not before: Thu 03 Jul 2025 15:49:06 +0000
ROA not after: Thu 02 Jul 2026 15:54:06 +0000
asID: 52025
IP address blocks: 2a05:dfc4:df::/48 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:09:b2:6c:76:51:0b:ab:97:f4:5c:01:0e:b8:ea:5b:9e:2c:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Validity
Not Before: Jul 3 15:49:06 2025 GMT
Not After : Jul 2 15:54:06 2026 GMT
Subject: CN=0006FA2C04B54DF186DE1ADD23E73253AF4A1229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:4f:6b:ad:f4:47:86:4a:9a:b5:6b:4f:60:
0d:a8:bb:58:87:9e:68:41:2e:e4:b4:1b:39:07:34:
f4:e0:99:b6:22:73:73:ff:9c:22:12:ea:21:3d:ee:
47:0b:5b:f7:d4:00:bf:17:53:be:15:36:97:79:d3:
96:1a:6d:44:d9:9a:61:b3:87:57:3a:b2:cb:66:45:
88:55:67:83:2c:b4:5f:58:88:62:3e:82:f7:d9:c9:
ac:1d:0d:0a:77:b2:74:95:d6:01:79:6d:94:0c:14:
25:c5:eb:3c:d3:10:d6:92:7e:13:ef:55:35:c7:d2:
4a:42:ce:2f:aa:ec:74:e9:40:e8:2f:82:f6:66:c2:
20:b8:03:80:ea:ea:6b:0f:ad:1b:9b:46:e6:4f:c1:
d8:e0:f3:2c:37:48:32:6c:c1:1c:91:79:c7:88:25:
e5:7b:47:f8:f7:72:f1:f2:2f:35:80:fd:82:7a:f9:
3e:ba:9f:06:52:17:06:15:06:ad:4c:fb:75:b1:15:
42:cf:89:9b:42:99:f8:4e:5c:55:16:6a:46:40:e4:
9d:4d:89:0e:fa:26:81:dc:64:44:7d:b6:0d:48:e2:
8f:84:fa:00:07:f3:88:c0:9e:c9:c6:35:76:d2:4c:
11:ba:ea:44:da:09:0b:02:a5:0f:1b:68:b1:df:2d:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:FA:2C:04:B5:4D:F1:86:DE:1A:DD:23:E7:32:53:AF:4A:12:29
X509v3 Authority Key Identifier:
keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a64663a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:df::/48
Signature Algorithm: sha256WithRSAEncryption
38:13:fb:89:44:b4:02:55:cf:25:54:81:9f:ff:59:b0:37:22:
2e:70:08:06:42:9e:ea:95:e2:84:d9:66:dd:c4:e3:e2:4f:df:
2c:73:91:b3:ed:5d:f5:0b:b2:d0:cd:1a:01:39:38:ed:19:65:
4e:1a:89:97:38:26:2b:19:f2:cb:0e:e6:7d:6e:e0:07:90:4d:
51:16:c0:10:2a:4b:6e:23:30:47:8d:9f:9a:ce:3e:c9:97:f1:
ec:63:ea:e6:72:9e:99:a4:4a:21:1a:41:a2:a5:90:15:37:c1:
a1:67:fd:e2:e1:aa:f9:d5:19:7f:66:f2:63:ce:44:42:bd:2a:
e5:2a:c8:8b:c0:53:e4:95:56:d4:c5:ba:0f:8d:b7:6f:04:37:
1c:f1:44:db:88:28:58:5c:e0:7e:8f:27:6a:06:1c:06:d1:d2:
a6:7a:43:e8:c9:a3:fa:55:5f:f7:8d:8d:14:22:23:1b:e9:c7:
0a:79:78:2e:2c:39:b2:c2:6c:38:bd:78:94:9b:8d:aa:4a:47:
e4:dc:cf:83:ac:1c:4f:75:9a:82:1a:76:9c:be:bb:c5:14:3c:
b6:a1:d7:e0:c5:ae:e4:fe:93:e8:45:59:3f:76:51:8b:99:61:
4f:8a:39:f6:2e:1c:a0:3b:52:e6:fe:40:2d:5c:32:c0:b8:d3:
c8:61:97:15
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUIQmybHZRC6uX9FwBDrjqW54snKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA3MDMxNTQ5MDZaFw0yNjA3MDIxNTU0MDZaMDMxMTAvBgNV
BAMTKDAwMDZGQTJDMDRCNTRERjE4NkRFMUFERDIzRTczMjUzQUY0QTEyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgg09rrfRHhkqatWtPYA2ou1iH
nmhBLuS0GzkHNPTgmbYic3P/nCIS6iE97kcLW/fUAL8XU74VNpd505YabUTZmmGz
h1c6sstmRYhVZ4MstF9YiGI+gvfZyawdDQp3snSV1gF5bZQMFCXF6zzTENaSfhPv
VTXH0kpCzi+q7HTpQOgvgvZmwiC4A4Dq6msPrRubRuZPwdjg8yw3SDJswRyReceI
JeV7R/j3cvHyLzWA/YJ6+T66nwZSFwYVBq1M+3WxFULPiZtCmfhOXFUWakZA5J1N
iQ76JoHcZER9tg1I4o+E+gAH84jAnsnGNXbSTBG66kTaCQsCpQ8baLHfLeUNAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUAAb6LAS1TfGG3hrdI+cyU69KEikwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84
LzMyNjEzMDM1M2E2NDY2NjMzNDNhNjQ2NjNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QA3zANBgkqhkiG9w0BAQsFAAOC
AQEAOBP7iUS0AlXPJVSBn/9ZsDciLnAIBkKe6pXihNlm3cTj4k/fLHORs+1d9Quy
0M0aATk47RllThqJlzgmKxnyyw7mfW7gB5BNURbAECpLbiMwR42fms4+yZfx7GPq
5nKemaRKIRpBoqWQFTfBoWf94uGq+dUZf2byY85EQr0q5SrIi8BT5JVW1MW6D423
bwQ3HPFE24goWFzgfo8nagYcBtHSpnpD6Mmj+lVf942NFCIjG+nHCnl4Liw5ssJs
OL14lJuNqkpH5NzPg6wcT3Waghp2nL67xRQ8tqHX4MWu5P6T6EVZP3ZRi5lhT4o5
9i4coDtS5v5ALVwywLjTyGGXFQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:49 2025 by rpki-client