Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
File: 3139322e36372e33322e302f32342d3332203d3e203335393532.roa (raw, json)
Hash identifier: mUfNY7os5fr8QGeFHlo42Vgs7dXdlP2eLn8gGRtO7nc=
Subject key identifier: F4:C2:7F:83:D8:0E:EC:15:75:C1:96:B6:83:E3:07:23:DF:B6:8D:54
Certificate issuer: /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial: 05FA3D5195DF7CC0C2B74E75B783D614973212AC
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
Signing time: Fri 19 Sep 2025 17:26:18 +0000
ROA not before: Fri 19 Sep 2025 17:21:18 +0000
ROA not after: Fri 18 Sep 2026 17:26:18 +0000
asID: 35952
IP address blocks: 192.67.32.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:fa:3d:51:95:df:7c:c0:c2:b7:4e:75:b7:83:d6:14:97:32:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
Validity
Not Before: Sep 19 17:21:18 2025 GMT
Not After : Sep 18 17:26:18 2026 GMT
Subject: CN=F4C27F83D80EEC1575C196B683E30723DFB68D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:fd:03:fa:7f:79:e8:f2:7a:84:c4:a9:cc:
92:f2:da:87:37:db:0f:00:23:4b:87:ae:c5:48:11:
11:d8:06:fc:45:bc:9b:0a:cb:32:1f:f6:5d:b6:78:
bf:33:42:b7:2c:f7:fa:77:80:0f:b7:a8:55:44:fe:
6f:59:09:b4:c5:c8:62:3f:78:b5:98:91:59:af:0e:
94:6e:07:71:a7:86:8c:f6:85:60:12:70:69:62:31:
82:ab:70:16:93:57:95:71:bf:b4:b9:2d:72:35:82:
0a:68:74:4c:93:67:5e:32:1d:bf:03:22:8c:ac:6f:
5f:72:c5:bf:cf:36:94:4d:79:ea:2e:8d:48:62:a7:
0b:a3:85:da:87:bf:6b:c5:70:00:15:a9:a1:c6:e8:
8b:9a:eb:6b:d6:da:79:61:08:37:f6:63:d8:3b:f6:
ba:25:4b:a1:0f:59:c0:63:9d:2c:b9:c6:1f:0d:d2:
9a:e0:ea:08:51:71:bb:be:c8:02:fa:3c:0c:29:67:
8c:3f:02:6e:26:d2:f0:38:db:62:94:aa:19:a3:a2:
c4:81:37:e0:9d:50:1a:1c:a8:e1:e7:b6:b0:16:9c:
b0:2f:42:77:17:e1:f2:34:63:53:88:de:4d:f7:19:
b5:57:88:9e:6b:b2:7c:4c:a6:e6:7e:af:d7:7e:45:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:7F:83:D8:0E:EC:15:75:C1:96:B6:83:E3:07:23:DF:B6:8D:54
X509v3 Authority Key Identifier:
keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:26:ee:4d:52:0e:a4:66:b9:38:85:ce:2b:26:aa:8e:e4:c5:
eb:97:5c:b1:75:5f:aa:41:18:ee:74:36:c1:b5:52:3b:fb:44:
f0:16:93:eb:9a:5c:52:c0:46:4a:e2:b7:5e:3d:f6:f3:5b:9c:
f2:76:f6:59:18:cf:ba:9c:79:51:77:d1:4e:d2:0d:ca:c5:e6:
72:ac:ee:9d:e4:f7:1b:20:ba:e6:cc:e2:96:22:a4:f9:b4:b9:
b2:74:0a:e9:58:8a:95:05:2c:a8:b1:b1:4f:fb:d4:ab:93:64:
2e:0b:92:b8:a1:f9:d1:6a:aa:72:98:4e:9a:4c:39:d4:e1:17:
42:80:d8:87:f9:7d:8a:c1:c9:fe:7a:cb:a4:e7:e6:d3:5c:89:
4f:d3:92:66:9e:11:9f:36:d2:60:50:d0:03:a4:17:64:c7:d9:
a2:ac:95:6b:08:78:ae:a0:b1:c7:dc:15:a3:9e:55:f9:bd:b5:
eb:5f:14:a5:fc:f1:45:89:de:0d:a4:b3:18:2f:2e:ea:0e:a9:
16:f3:8f:f3:6c:9c:fa:fd:72:09:9c:ca:8b:ee:20:68:86:b7:
d3:ba:4a:97:d3:70:ff:f8:52:c3:c3:15:70:b9:e8:9c:4c:e5:
be:38:22:b0:0c:99:cc:f9:37:f0:75:41:1d:88:4f:c8:f4:63:
9b:94:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:58 2025 by rpki-client