Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431623a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3431623a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          1xRH7Rb4ynh+6BaUEPuMGUB/VmTfXo7UT40aMSKnKwc=
Subject key identifier:   1E:CF:2A:3D:D9:F4:96:E5:08:43:25:3B:C9:FA:B0:28:BF:D2:F3:54
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       386AB1D6A9569F7217F3D1A0B20222578CA899BB
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431623a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 09 May 2023 14:49:33 +0000
ROA not before:           Tue 09 May 2023 14:44:33 +0000
ROA not after:            Tue 07 May 2024 14:49:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:41b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6a:b1:d6:a9:56:9f:72:17:f3:d1:a0:b2:02:22:57:8c:a8:99:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  9 14:44:33 2023 GMT
            Not After : May  7 14:49:33 2024 GMT
        Subject: CN=1ECF2A3DD9F496E50843253BC9FAB028BFD2F354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:f3:22:16:f3:2f:2b:62:03:2f:0f:fa:75:
                    de:89:6f:8c:99:0a:1f:2b:d1:d5:8f:ea:ce:31:a9:
                    e7:a8:3a:75:d7:87:e1:9b:e8:7b:40:b9:2e:07:32:
                    af:99:e6:ce:4c:ed:2c:3a:5b:08:63:58:09:10:b9:
                    28:75:ea:6a:0d:55:96:d3:6a:01:a1:1c:c3:a5:ff:
                    9e:4e:df:04:f3:cc:50:4e:b7:a3:7c:7c:e1:22:36:
                    06:b0:1e:07:19:7a:16:a9:5b:1e:ae:49:a3:e5:be:
                    f6:a5:1d:22:54:99:86:ee:c7:76:8a:83:7a:8d:18:
                    75:53:34:ce:21:3d:07:a0:37:fe:d8:a8:e3:9b:24:
                    12:d1:69:6c:64:c1:73:d1:d1:5a:9f:84:10:09:c7:
                    92:e3:8f:2b:23:a9:f1:b5:55:26:db:ef:96:19:e9:
                    60:97:9a:b3:76:3d:7c:9a:b2:ca:04:14:39:7e:a4:
                    68:11:4a:c8:36:1a:f4:fc:5d:86:43:c0:1a:7c:42:
                    cc:e0:77:70:76:86:97:e7:24:1d:df:c0:f3:74:5c:
                    79:7d:2f:12:af:d9:e4:17:8b:06:04:31:9f:a4:56:
                    1f:b8:15:63:5d:43:f4:44:f6:8b:b7:d8:cc:b7:94:
                    57:3f:e8:ec:15:f1:53:fe:5e:50:0e:53:c7:0c:54:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:2A:3D:D9:F4:96:E5:08:43:25:3B:C9:FA:B0:28:BF:D2:F3:54
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3431623a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:41b::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:de:23:a5:e2:6b:ce:fb:29:41:17:f1:7a:37:1e:76:e0:f7:
         fc:96:5b:9a:27:4b:df:e4:16:ea:86:62:11:70:be:ed:c7:7b:
         fc:2d:24:9f:c2:a9:f8:f5:d4:09:96:43:51:97:0b:43:4c:24:
         67:52:78:dc:3d:df:9d:9f:ff:ee:76:ec:59:15:d1:e4:42:0f:
         1b:7d:8f:28:e8:0f:e1:17:9a:4e:d9:93:2c:75:f5:e7:11:08:
         35:de:38:3e:1f:85:b7:61:a4:b2:6b:0c:21:4d:b4:92:dc:b8:
         f8:5a:26:3f:66:eb:f2:f6:d9:38:97:c6:e2:b9:a1:27:f0:b6:
         1f:72:4f:01:00:0c:cb:82:3d:fd:75:26:ac:2f:ef:df:12:e6:
         3f:e2:e8:40:ee:ba:2d:24:0c:2a:00:50:e7:fc:6f:ef:da:f5:
         ec:ca:4f:84:f3:58:cc:2b:22:a1:18:f2:12:cf:2f:7e:b4:1b:
         0e:b7:e2:4d:d5:01:2c:5d:27:e2:2e:24:ba:d2:ba:0a:43:06:
         12:b4:cc:9a:73:d9:2f:a8:bb:8b:13:9e:93:8d:93:74:b0:23:
         78:85:92:62:cf:60:e3:8b:2d:48:87:ea:f9:2c:24:0c:d8:e8:
         80:e4:ab:3b:12:d9:fb:de:df:52:34:e5:54:d8:df:70:8a:46:
         fc:2a:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----