Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3439623a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3439623a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          a76KgDUyUn3Cmx8Fpy2cKfygXeB3ZSa9ChqNJ2gb2RY=
Subject key identifier:   54:B3:48:F9:24:85:CF:67:4D:C3:29:67:AE:C7:95:35:E4:4C:1F:21
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       09779324D3593ED52A0F70FADC296E1382B4317F
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3439623a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:19 +0000
ROA not before:           Mon 08 May 2023 23:35:19 +0000
ROA not after:            Mon 06 May 2024 23:40:19 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:49b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:77:93:24:d3:59:3e:d5:2a:0f:70:fa:dc:29:6e:13:82:b4:31:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:19 2023 GMT
            Not After : May  6 23:40:19 2024 GMT
        Subject: CN=54B348F92485CF674DC32967AEC79535E44C1F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:cc:1e:f4:a0:7b:6e:34:91:1d:b6:fd:1b:
                    92:77:b9:68:32:21:d7:31:67:e5:4c:2d:f0:08:9a:
                    06:57:68:0c:a4:94:7d:42:b1:27:71:a6:bf:d2:b8:
                    32:5b:a5:3c:87:06:78:50:90:c7:8f:49:b7:ef:a7:
                    2e:38:97:33:95:9b:3d:47:81:28:68:d4:52:9a:71:
                    3f:33:3f:1f:2c:8d:f8:f5:cf:16:51:71:ec:8d:b8:
                    b9:3a:76:32:64:7c:e0:73:e3:c1:52:37:9c:f6:3e:
                    e3:c1:bc:df:13:25:01:d7:d5:69:8a:3a:47:cd:36:
                    67:bb:92:1e:3e:bb:de:07:3b:e1:6b:78:d4:59:7e:
                    5c:8b:7a:b2:0e:b4:7c:67:23:62:e5:c1:1e:36:7a:
                    b9:61:4c:74:0b:9e:78:2d:a8:5c:1c:c2:19:fd:c0:
                    a0:ca:99:da:0c:71:fc:69:2b:93:5d:95:e8:49:3d:
                    d6:02:87:de:b8:0c:66:1b:4e:50:6f:9a:c9:00:a2:
                    d6:8a:57:3b:c6:f9:05:d2:1d:1c:cd:0e:9b:00:65:
                    f9:aa:5b:e0:85:ea:77:81:7c:d8:1a:ac:24:e7:da:
                    88:d5:c1:d1:b3:a4:ea:c5:4f:b0:a7:35:ff:35:c8:
                    01:21:5b:d8:d8:6f:cb:ae:e8:d3:ca:fd:7b:c2:96:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:48:F9:24:85:CF:67:4D:C3:29:67:AE:C7:95:35:E4:4C:1F:21
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3439623a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:49b::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:ae:a9:17:d3:8c:59:aa:af:11:d7:2c:ca:ed:2b:5f:38:
         6e:0b:46:e9:91:e5:f6:ec:32:f7:88:7e:08:7a:3d:ff:52:04:
         82:4e:c4:4e:27:17:af:4e:45:7e:54:03:a6:11:9e:3f:04:8c:
         af:35:a0:bd:f4:29:64:fb:a6:1b:03:d0:6c:40:11:2c:c4:e4:
         27:58:10:f0:f9:12:58:33:30:80:67:bf:2f:50:94:3e:b2:d5:
         6e:15:6b:f3:0e:9c:56:3a:fc:2f:e2:18:42:39:8f:16:b3:b4:
         d4:28:d6:9d:f1:50:e2:5a:d5:17:4e:dc:8a:6e:92:6a:91:ef:
         46:43:c5:f0:f4:1b:e7:b8:c8:ae:a4:c2:fd:8e:4e:e0:61:95:
         77:29:2e:28:8d:ff:ac:c6:c3:94:d4:59:ae:62:d7:90:79:8b:
         54:83:3d:70:9b:05:78:60:2f:64:cd:e2:a6:53:01:03:1e:69:
         0b:ad:78:74:8e:2c:b3:e2:b9:b6:dd:16:f6:2c:aa:d8:de:05:
         bc:a2:de:47:44:4a:01:fc:0b:fa:6a:7e:b8:ac:13:8f:2f:ab:
         11:a0:78:d6:53:f9:ad:bc:22:06:56:6d:27:6a:79:a6:16:56:
         23:8c:4a:a5:e3:2b:aa:5b:7a:79:74:6b:24:2d:11:02:23:a1:
         14:35:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----