Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3434353a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3434353a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          kXPyb849kq/wErWEiS7DbBzIm/HUMvuDktme5MZcYwc=
Subject key identifier:   B6:67:02:B8:89:90:D4:4B:C6:B0:4F:F2:41:7A:E4:38:00:65:E7:C7
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       1801ADB7777CF72F6D9CAC70E18507C03D51465D
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3434353a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:06 +0000
ROA not before:           Mon 08 May 2023 23:35:06 +0000
ROA not after:            Mon 06 May 2024 23:40:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:445::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:01:ad:b7:77:7c:f7:2f:6d:9c:ac:70:e1:85:07:c0:3d:51:46:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:06 2023 GMT
            Not After : May  6 23:40:06 2024 GMT
        Subject: CN=B66702B88990D44BC6B04FF2417AE4380065E7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:39:6d:7f:8f:bb:2e:2c:d0:35:46:23:cf:
                    07:b5:4f:ca:ba:28:c2:b5:9c:75:3b:3b:4b:76:fc:
                    ec:de:02:0e:26:3b:3c:9d:89:00:1b:62:90:2a:d0:
                    ea:b5:de:90:94:94:51:42:f5:26:00:57:b7:38:6a:
                    b6:e5:4c:bd:f1:d4:6e:d3:cd:58:bd:6a:c4:18:7a:
                    74:59:4b:02:37:51:90:04:e0:1d:35:c2:d0:86:06:
                    f4:ba:f1:cd:68:65:2e:5a:9b:f1:82:a3:f4:50:6e:
                    46:f7:ae:8b:a7:b4:5c:29:f0:9d:ae:58:22:92:95:
                    f3:8d:65:9b:7d:0c:83:03:7c:8e:f8:8c:7e:6b:c6:
                    0c:f2:38:0f:58:7f:64:31:e8:3a:b3:c7:02:60:03:
                    db:ee:fd:4f:dc:94:44:b4:b0:e9:b8:21:e0:91:c7:
                    92:6b:56:ef:96:aa:f4:78:7f:71:e0:ca:7d:f3:de:
                    9c:9c:31:db:6b:d4:27:82:6e:b0:e6:79:11:4d:7d:
                    2b:b6:c7:ac:ff:3b:d4:e6:ff:49:e2:d8:3d:ce:6a:
                    ea:cb:5a:2e:bd:e1:dc:80:5f:7b:56:17:e5:35:fd:
                    20:cf:25:14:25:03:e9:c0:d0:b7:cb:1f:1c:f7:3c:
                    78:2e:69:20:d8:d4:c2:10:d1:18:a8:fe:1d:2f:4d:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:67:02:B8:89:90:D4:4B:C6:B0:4F:F2:41:7A:E4:38:00:65:E7:C7
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3434353a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:445::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:66:61:d6:e2:c9:96:a6:68:e4:c7:e4:81:4e:02:6d:1f:9b:
         9b:23:67:64:9e:8e:a1:f5:88:c0:2c:40:3e:d4:c0:3f:40:81:
         9e:de:e0:e2:45:8d:8a:49:9e:f2:b3:f1:5e:dd:61:20:56:b4:
         f0:0e:08:bd:0d:0f:1b:54:56:8f:5d:83:1d:c1:f5:4f:4a:ca:
         1e:12:68:f3:c7:49:bb:a2:b4:ce:3b:a7:98:83:47:20:1f:96:
         91:06:1c:a4:e7:cd:9b:54:25:16:82:ac:42:05:32:df:4e:e1:
         1d:ae:99:ec:9b:9f:7d:bc:b6:37:c7:2d:43:d3:b0:ea:d2:ec:
         25:43:22:78:9a:ce:59:8d:d5:3e:d5:db:3c:d5:18:6e:a2:94:
         f9:5d:52:90:74:ac:10:45:78:85:12:7b:4e:2f:b9:df:eb:e1:
         bc:13:cc:ef:c5:31:c0:94:65:a2:51:27:0f:40:a6:86:7f:b2:
         8a:60:db:7c:63:23:02:c4:1b:d1:1c:6d:37:77:fa:66:ac:04:
         1a:c8:23:50:dd:f8:86:46:b5:7e:75:0c:10:2b:92:1c:a0:5f:
         ab:50:49:30:a5:93:a3:0e:de:81:22:47:f1:fe:ef:db:ac:11:
         e0:f4:60:48:45:e5:da:68:49:e9:1e:21:ab:bb:b4:fa:0d:f6:
         dc:52:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----