Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3432343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3432343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          7KBzLSG9f0hdnYKmQM5NLOzeG7twthjOtCCKQ2DU+Uw=
Subject key identifier:   8B:0B:95:13:17:C2:F6:CE:35:74:E6:65:6D:A1:79:70:D1:DD:CB:2D
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       5DF549B22A0CBAFFE963A36648EF4E0F427CE96F
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3432343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:01 +0000
ROA not before:           Mon 08 May 2023 23:35:01 +0000
ROA not after:            Mon 06 May 2024 23:40:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:424::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f5:49:b2:2a:0c:ba:ff:e9:63:a3:66:48:ef:4e:0f:42:7c:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:01 2023 GMT
            Not After : May  6 23:40:01 2024 GMT
        Subject: CN=8B0B951317C2F6CE3574E6656DA17970D1DDCB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:21:1c:36:6f:05:c2:09:8e:1f:6a:ba:3c:
                    8c:10:7a:76:b3:8a:eb:32:3c:78:36:14:ca:17:90:
                    1c:af:5c:dd:94:d9:ba:94:73:41:ec:3c:f3:74:d8:
                    ce:6a:e2:33:7a:7c:07:88:e8:41:45:69:b3:6d:e2:
                    d7:ff:ad:ee:4b:0b:87:e4:cc:6c:03:b1:61:f5:16:
                    a9:dd:97:a4:ad:e9:bd:87:a1:69:f2:37:25:5f:bf:
                    98:35:7a:eb:ad:72:46:66:30:37:82:07:0d:df:8b:
                    52:fb:8e:da:03:45:c2:de:0e:5a:cd:fe:f9:61:7a:
                    6a:67:44:1e:84:4c:26:03:5a:ae:87:9a:6d:89:eb:
                    dd:ba:a2:21:97:7a:2c:08:86:06:0b:8b:b8:93:f6:
                    82:19:dc:a7:d1:91:a1:17:0d:3f:40:9c:f9:af:1f:
                    64:33:a3:60:dd:ff:88:57:b6:96:f0:3d:b2:f3:dc:
                    87:70:12:0e:b7:8c:13:e0:71:34:59:0f:0f:0d:8f:
                    86:55:50:7f:3c:6f:ec:40:37:7e:2e:1d:cb:f6:07:
                    52:07:37:4f:28:b9:0e:f0:6c:02:74:ab:42:e9:d4:
                    e5:01:50:f7:1b:0a:78:d8:9c:23:c7:e9:4f:2f:2d:
                    09:5c:32:56:20:f1:f6:36:4c:df:8f:2d:c0:69:a0:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:95:13:17:C2:F6:CE:35:74:E6:65:6D:A1:79:70:D1:DD:CB:2D
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3432343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:424::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:e4:dd:45:18:5a:f7:b1:aa:89:0d:94:fe:c6:50:fc:92:
         df:86:6f:b7:80:09:98:ce:a0:b0:1a:17:c1:10:ac:92:0c:02:
         c0:aa:99:dd:0f:b0:d5:ad:b9:aa:64:15:a7:df:39:49:b0:bf:
         ed:71:2b:2e:46:33:d7:b7:ed:1e:75:c0:53:e9:93:71:ad:e5:
         3b:26:b5:78:6d:5f:87:54:a5:57:7d:62:9c:74:32:bd:12:23:
         f5:00:ac:f0:fa:a4:8b:de:7d:61:6e:9c:c4:95:0d:24:0e:cf:
         e8:d7:41:29:2d:b1:81:fa:73:f9:5b:cc:de:57:c5:53:84:fe:
         a1:41:e8:92:1e:49:5c:73:ed:05:64:5e:6d:19:60:8c:a1:0c:
         38:c2:d9:31:02:6b:4e:0f:33:61:8d:34:0d:41:80:f3:a6:cf:
         94:70:90:9d:28:9d:06:99:2e:5f:2b:01:c0:a9:11:b5:ef:30:
         15:ff:a4:5b:db:7a:ba:4b:32:12:bc:e6:82:bd:e2:ff:89:d7:
         d2:f2:b2:2a:be:91:f1:d9:69:da:8a:43:a2:50:35:61:06:e3:
         16:10:02:cd:67:4b:46:8c:c4:c5:59:65:4f:c6:4d:17:de:7e:
         34:17:13:be:11:89:3f:76:eb:fe:ea:e8:ba:55:07:bb:72:aa:
         0f:56:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----