Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3438643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3438643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          rDIS6MJ9n+MGIKF6bAiLh8u7ihdklLf9qzXyj8ov+G4=
Subject key identifier:   10:22:03:84:E4:1E:CC:89:C1:E3:7C:CA:AD:F6:6C:F9:4D:73:AC:C4
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       3E4E4F82E28993491886915A743AF2C388F8AB20
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3438643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 07 Jun 2023 22:03:01 +0000
ROA not before:           Wed 07 Jun 2023 21:58:01 +0000
ROA not after:            Wed 05 Jun 2024 22:03:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:48d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:4f:82:e2:89:93:49:18:86:91:5a:74:3a:f2:c3:88:f8:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jun  7 21:58:01 2023 GMT
            Not After : Jun  5 22:03:01 2024 GMT
        Subject: CN=10220384E41ECC89C1E37CCAADF66CF94D73ACC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:8d:1b:b0:4d:e3:e6:e0:06:15:9d:8c:56:
                    57:60:e1:67:50:b2:09:84:5e:30:79:bf:a4:af:08:
                    e8:68:a4:10:07:72:98:ca:16:ce:5e:34:d0:08:22:
                    ff:09:44:c5:c4:66:b3:a8:92:23:7f:20:bf:12:e6:
                    09:9a:f9:45:4d:dd:7a:b0:1e:ef:7f:75:ac:08:27:
                    8b:82:1e:7b:18:62:4a:9f:28:99:9e:11:db:70:85:
                    b3:ff:c1:9a:27:c7:c8:b4:e9:7f:aa:e4:17:e5:50:
                    24:05:c6:e6:10:d8:fa:d6:41:6d:ff:29:64:bd:e1:
                    4d:90:c6:2d:6d:3e:db:94:61:ca:68:e9:83:a6:99:
                    ea:9a:64:16:3e:c1:36:99:b0:16:9b:db:bd:8f:03:
                    5a:e9:7f:35:73:9e:60:87:71:e0:7e:1b:12:cc:c5:
                    31:64:9c:0c:75:e7:56:3a:ae:00:98:2d:9b:59:05:
                    5f:95:c0:37:d9:ae:33:7e:46:63:a0:ed:c4:5c:28:
                    55:59:19:90:99:aa:fd:6d:62:df:b6:3c:c3:b8:20:
                    42:2b:de:ce:f0:38:f8:22:bb:3f:77:89:e6:3a:e8:
                    76:91:2e:03:a5:43:f5:23:52:fe:21:5a:e9:be:f6:
                    80:6c:b9:88:dc:bf:7a:16:22:62:fa:59:18:09:2e:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:03:84:E4:1E:CC:89:C1:E3:7C:CA:AD:F6:6C:F9:4D:73:AC:C4
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3438643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:48d::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:f4:ab:ca:bd:ff:30:a7:45:3d:46:17:50:bf:77:8a:ce:e1:
         e9:f3:95:9b:dd:ab:0a:a8:19:5e:a1:9c:db:29:4f:39:75:db:
         a2:0e:0b:aa:7d:f1:e7:30:79:12:e0:07:ba:a8:c2:a2:35:b0:
         72:5c:4c:f1:16:d8:d9:2e:0b:85:48:68:71:8a:68:19:e3:5b:
         3d:79:cf:e0:81:80:f7:ed:98:68:e0:41:a0:e3:77:9d:28:3b:
         8c:4e:c2:1b:a4:13:de:41:2d:a3:23:54:3e:e6:c2:f7:06:82:
         d3:fe:b2:ed:bd:68:d9:e9:3b:6f:7f:05:81:60:4b:4e:30:73:
         7b:f5:66:fa:77:73:cf:b9:06:f6:f7:c8:d5:6c:77:db:f5:35:
         98:57:19:52:92:0f:3a:74:38:88:18:37:5f:a5:9d:db:86:04:
         1b:3b:be:c9:55:b6:8b:64:be:35:a4:f7:bb:23:7f:6b:68:56:
         7b:44:63:20:ea:58:1a:91:44:d7:a1:6e:d8:1e:d6:99:48:09:
         01:ff:29:82:14:9f:9f:7a:fa:dc:5a:dc:59:97:c5:fc:49:26:
         1a:d8:b3:bd:6e:37:ba:ec:a6:fa:75:48:6e:97:ea:c7:80:94:
         12:51:06:29:57:b2:13:e0:14:ee:50:9a:e1:c8:b6:7b:38:1f:
         39:e9:23:a7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUPk5PguKJk0kYhpFadDryw4j4qyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA2MDcyMTU4MDFaFw0yNDA2MDUyMjAzMDFaMDMxMTAvBgNV
BAMTKDEwMjIwMzg0RTQxRUNDODlDMUUzN0NDQUFERjY2Q0Y5NEQ3M0FDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F40bsE3j5uAGFZ2MVldg4WdQ
sgmEXjB5v6SvCOhopBAHcpjKFs5eNNAIIv8JRMXEZrOokiN/IL8S5gma+UVN3Xqw
Hu9/dawIJ4uCHnsYYkqfKJmeEdtwhbP/wZonx8i06X+q5BflUCQFxuYQ2PrWQW3/
KWS94U2Qxi1tPtuUYcpo6YOmmeqaZBY+wTaZsBab272PA1rpfzVznmCHceB+GxLM
xTFknAx151Y6rgCYLZtZBV+VwDfZrjN+RmOg7cRcKFVZGZCZqv1tYt+2PMO4IEIr
3s7wOPgiuz93ieY66HaRLgOlQ/UjUv4hWum+9oBsuYjcv3oWImL6WRgJLjb9AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUECIDhOQezInB43zKrfZs+U1zrMQwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM0Mzg2
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBI0wDQYJKoZIhvcNAQELBQADggEBAKz0q8q9/zCnRT1GF1C/d4rO4enzlZvd
qwqoGV6hnNspTzl126IOC6p98ecweRLgB7qowqI1sHJcTPEW2NkuC4VIaHGKaBnj
Wz15z+CBgPftmGjgQaDjd50oO4xOwhukE95BLaMjVD7mwvcGgtP+su29aNnpO29/
BYFgS04wc3v1Zvp3c8+5Bvb3yNVsd9v1NZhXGVKSDzp0OIgYN1+lnduGBBs7vslV
totkvjWk97sjf2toVntEYyDqWBqRRNehbtge1plICQH/KYIUn596+txa3FmXxfxJ
JhrYs71uN7rspvp1SG6X6seAlBJRBilXshPgFO5QmuHItns4HznpI6c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org