Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3435373a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3435373a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Ty+QOm6CqjlpnU6MoGAzbDKgszm074Gpfl5KviRh/mI=
Subject key identifier:   11:7D:B6:63:0C:26:C4:43:9F:71:C4:BD:E4:E2:F8:45:03:87:85:FD
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       71B7B74B0E97AA82E2C6D8C8644FF9C3FC5D17C3
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3435373a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:08 +0000
ROA not before:           Mon 08 May 2023 23:35:08 +0000
ROA not after:            Mon 06 May 2024 23:40:08 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:457::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b7:b7:4b:0e:97:aa:82:e2:c6:d8:c8:64:4f:f9:c3:fc:5d:17:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:08 2023 GMT
            Not After : May  6 23:40:08 2024 GMT
        Subject: CN=117DB6630C26C4439F71C4BDE4E2F845038785FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b6:b1:24:32:28:40:bf:1c:b0:25:e2:50:30:
                    25:ea:5f:18:f4:4f:12:a2:56:38:d5:03:1d:72:bf:
                    18:2f:d6:fc:29:2d:32:52:89:05:50:c9:37:4a:80:
                    e0:b9:da:08:cb:49:66:be:4e:07:c7:ab:40:41:bf:
                    4a:b5:ee:66:b5:be:18:a7:18:33:28:23:bb:9c:03:
                    22:68:f4:93:64:17:0a:16:4e:9e:0e:e3:e6:43:fa:
                    25:14:e0:1a:28:6d:ad:fc:c1:2f:c3:fb:5c:8c:1e:
                    67:bc:f2:9e:94:79:d1:35:fa:63:f9:e8:e0:1f:b3:
                    f9:59:c1:9c:4e:ca:48:3c:96:d9:a2:ba:75:71:93:
                    70:9f:96:ea:9a:ad:46:42:9e:26:78:01:63:d9:d2:
                    4b:a7:21:c8:67:ee:a3:a5:f3:d3:fe:4d:03:5a:8c:
                    ea:57:1e:76:3c:0c:8c:0d:d0:12:1b:28:13:0e:53:
                    91:5a:05:b2:ef:d8:cf:43:14:d1:fc:7e:06:f3:bb:
                    67:af:4e:46:0f:eb:08:52:a2:b2:87:50:b5:89:ea:
                    4a:a1:79:d7:10:e2:b0:2d:28:8d:38:fd:69:83:77:
                    e5:16:f1:c9:2a:cb:29:8e:46:af:8a:e6:39:8b:f0:
                    b2:da:d2:6c:61:76:af:70:45:88:88:a4:dc:4b:2c:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:B6:63:0C:26:C4:43:9F:71:C4:BD:E4:E2:F8:45:03:87:85:FD
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3435373a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:457::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:87:89:c2:65:85:51:b8:2b:92:82:02:61:62:40:62:c0:df:
         df:9d:8d:ea:08:b0:11:51:9a:5a:64:7d:d3:89:16:22:e0:2e:
         27:df:65:48:71:3c:33:a6:1c:80:75:c2:22:13:68:a8:72:54:
         6e:ec:2c:30:26:0f:ba:cf:16:fe:ab:4f:c2:d9:66:c7:b7:49:
         4d:f9:2c:d4:18:3c:75:4c:89:3d:12:3d:85:6d:22:67:83:4f:
         e3:e6:fd:6c:00:bb:5f:e6:e6:5d:7a:d9:3a:69:43:bf:63:db:
         41:63:81:9f:c6:48:bd:3e:a9:03:7e:d6:2a:e3:82:38:73:b4:
         c5:f5:e7:81:71:fb:60:35:79:e5:c8:9d:8d:63:7c:73:ba:da:
         ef:b5:f3:93:9f:3e:43:c8:89:0d:92:83:34:da:c1:d5:6d:8b:
         45:fb:4e:da:42:51:fe:75:33:93:10:6f:33:77:6a:50:04:ad:
         f1:57:b8:d7:b1:3d:50:01:70:75:30:f9:b1:97:13:bc:bf:2f:
         ce:09:de:91:9e:77:5e:16:92:3a:21:4a:2b:25:c5:70:95:61:
         67:84:2e:4f:80:2b:2f:25:72:4e:ee:1e:55:e0:ef:d8:bd:4f:
         50:82:9e:78:7b:3a:52:5c:c4:57:b7:0b:f2:7e:c0:fd:58:94:
         d1:cb:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org