Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3436383a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3436383a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          F6oFfoPVbnDC28YXB8z1TiCkBPwUg3zAJZGkB8mxaKA=
Subject key identifier:   2D:1B:6C:E0:7F:6D:14:EE:00:1E:23:84:F4:D3:58:9D:BD:BA:80:33
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       1C411B0D0385835A4B2876FB2E687CDB51486E8B
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3436383a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:11 +0000
ROA not before:           Mon 08 May 2023 23:35:11 +0000
ROA not after:            Mon 06 May 2024 23:40:11 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:468::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:41:1b:0d:03:85:83:5a:4b:28:76:fb:2e:68:7c:db:51:48:6e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:11 2023 GMT
            Not After : May  6 23:40:11 2024 GMT
        Subject: CN=2D1B6CE07F6D14EE001E2384F4D3589DBDBA8033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:23:fe:95:ce:e1:01:9b:3b:bb:3c:35:0c:
                    81:18:41:c8:fd:4a:fa:8d:18:29:7f:f9:ea:f8:71:
                    9b:7e:29:c7:ab:d1:c7:42:5e:4a:f0:0e:c4:f0:13:
                    3d:42:e6:30:38:bc:e3:0a:65:16:1a:c9:70:ec:7a:
                    5a:83:fd:b0:14:20:3f:7b:7b:2d:a9:c5:65:44:4a:
                    b7:e9:b3:e7:c1:e5:1d:6a:0b:02:06:8a:0b:d1:4c:
                    96:ea:96:be:b1:80:39:e7:e0:11:12:7b:a5:db:9c:
                    66:c0:48:e8:3e:66:01:e1:ea:54:cd:a4:44:08:6e:
                    0e:6d:7e:4e:9d:37:03:9d:ce:b8:d4:23:3b:79:d0:
                    ff:77:b7:60:ce:2b:dd:1d:a2:63:90:6a:e5:f6:cd:
                    35:48:b3:d9:f6:ec:83:fe:0a:94:c3:d0:27:8d:84:
                    45:30:8b:9d:62:ad:14:f5:3d:50:54:6e:78:73:34:
                    bd:81:49:4d:49:b8:b2:20:11:da:f0:d0:d4:68:b0:
                    40:5d:d7:cc:71:4f:bb:89:cf:e2:61:6e:3a:d8:5a:
                    54:06:11:3e:6f:3a:26:cf:c7:32:97:2a:71:43:75:
                    b4:8b:fa:42:03:80:e8:6f:cc:ee:43:7b:07:7d:af:
                    1e:e1:bd:ca:a3:c9:cc:f4:41:96:80:cf:2b:d9:0e:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:6C:E0:7F:6D:14:EE:00:1E:23:84:F4:D3:58:9D:BD:BA:80:33
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3436383a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:468::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:c2:93:85:f0:5f:b7:e9:d0:87:00:1a:08:a6:e0:0b:3f:
         c6:54:91:60:c2:7c:ec:4d:b5:a1:14:3d:3c:4d:87:4f:22:fe:
         e5:12:cf:70:7e:6b:27:19:b2:97:a3:7f:13:45:23:9f:d0:9c:
         4f:c2:05:92:cd:3a:82:26:7a:e4:ba:49:2e:c2:0f:f6:16:8f:
         82:5c:0c:b7:7a:96:5e:3a:d4:06:af:dd:89:18:f0:ad:b3:56:
         d1:15:54:48:36:5f:67:3c:7c:36:24:6d:14:4a:a7:bb:4b:f1:
         60:96:b9:b7:cc:85:bf:69:3d:d4:57:a1:f2:b7:d7:5f:93:07:
         ba:49:13:52:e3:a5:0f:9c:02:9d:31:d2:ad:79:99:81:6d:9d:
         d2:0f:fd:27:16:8f:63:38:75:b4:07:d5:7f:8f:48:a7:8b:0f:
         e4:1e:52:83:f7:f6:1c:6b:3f:75:81:b7:24:b8:c9:eb:04:69:
         2d:ad:ce:21:65:81:a0:0c:1a:29:73:c7:e9:5e:fd:55:cb:4f:
         af:08:cd:f2:28:79:ba:cc:6b:97:ae:d0:f9:fe:b5:3f:27:1e:
         91:8b:a7:05:1e:b9:dd:05:dd:73:d0:57:91:2e:fc:43:e8:22:
         cb:34:6a:77:88:a6:b6:a1:e8:bb:06:02:21:ab:9d:f8:f5:19:
         0e:38:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org