Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3431313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          /jYlo+vRx1PMxsglNdFv6gKR1hgyKalHWtuRBxOsw2s=
Subject key identifier:   0C:6A:6A:FD:EF:D7:BC:38:1B:98:E0:DA:97:BA:A3:E3:EF:24:44:BF
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       76B911F95C85AC6913AA6E5AE7E0E3CC1DAF9692
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:39:36 +0000
ROA not before:           Mon 08 May 2023 23:34:36 +0000
ROA not after:            Mon 06 May 2024 23:39:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:411::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b9:11:f9:5c:85:ac:69:13:aa:6e:5a:e7:e0:e3:cc:1d:af:96:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:34:36 2023 GMT
            Not After : May  6 23:39:36 2024 GMT
        Subject: CN=0C6A6AFDEFD7BC381B98E0DA97BAA3E3EF2444BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:b8:f0:70:5b:68:6d:8d:68:5b:62:69:dc:
                    83:0c:57:69:5e:f0:03:5d:24:76:3d:d8:a4:82:68:
                    18:77:d7:e5:f5:a6:e9:d3:88:16:d7:eb:00:d2:d7:
                    9a:69:9b:61:e5:79:f0:78:7e:b5:56:50:03:73:7e:
                    f9:20:2e:f6:42:18:e7:af:58:9e:22:69:73:cd:54:
                    e0:61:29:af:cf:7a:ee:53:c8:ff:ac:d7:3f:dd:bf:
                    da:fc:0d:be:b8:fc:97:96:f6:e1:3d:f0:14:64:5f:
                    52:aa:61:f2:28:c4:a9:37:d1:50:bc:f8:54:15:b2:
                    90:0f:e6:cb:fe:84:08:aa:b2:79:f7:89:52:f7:82:
                    9b:af:1d:9e:ad:9b:06:f4:1a:b0:b3:8c:af:5f:d6:
                    d0:18:11:a5:30:bc:f8:ed:37:77:22:e9:63:40:5b:
                    9b:60:af:2d:bb:a3:41:8a:85:24:c5:91:14:0c:06:
                    f5:3a:e1:2f:39:31:4e:21:70:04:3b:3a:85:b8:39:
                    ee:c2:fe:63:75:d9:15:59:7d:f7:03:f0:f9:94:1f:
                    ac:da:e5:e9:3b:ed:26:5d:93:1b:bd:66:28:4a:75:
                    4c:ba:00:f1:47:cf:c6:af:90:cb:80:a9:93:95:6f:
                    35:9e:af:b6:78:fc:02:35:51:11:ce:43:17:fb:5f:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:6A:FD:EF:D7:BC:38:1B:98:E0:DA:97:BA:A3:E3:EF:24:44:BF
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:411::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:21:70:3f:20:36:69:7e:73:e7:e2:d2:d6:cd:c0:7d:31:26:
         a8:e5:3b:e2:27:c7:e7:e6:6a:ed:92:c2:a1:5d:27:85:c6:bc:
         76:20:af:4e:eb:c2:25:25:5c:de:e5:18:3d:07:b9:40:e2:90:
         5c:78:dc:a8:95:e1:37:46:39:04:55:b1:67:b2:c4:e8:11:19:
         1c:d3:2c:af:fd:c8:9b:9c:6f:eb:97:f2:b1:18:58:fe:c4:93:
         d3:9b:29:d0:36:95:b4:62:5e:3f:90:60:d2:3a:2a:5f:e2:09:
         f1:43:33:31:10:7f:13:28:5e:75:e8:17:04:30:80:75:04:b6:
         37:15:6a:7a:e0:f6:89:b9:73:ce:ee:f3:49:0b:d1:6b:41:3b:
         0d:f0:36:04:a6:60:b8:d1:6b:e7:df:bd:38:1d:58:a2:8b:60:
         44:07:a9:6c:e5:24:9c:b0:1c:19:47:ea:f5:d6:bb:42:b4:d6:
         f1:19:5a:9d:e1:0d:8f:fb:1f:b7:ff:f4:43:b4:39:3d:f9:6d:
         a0:be:f8:d2:c1:4a:9d:d5:17:68:b8:fc:cb:a4:f8:d3:b0:63:
         da:50:95:25:4c:3b:3e:a6:7c:fa:ad:6c:9e:a7:14:54:6d:ef:
         f2:e3:ed:7e:35:d7:8d:98:cc:ca:79:61:e8:bf:d4:d2:f7:83:
         7c:32:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org