Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3461633a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3461633a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          e3T0Gxvd7y3JqLf6+ah4guJB5Kt568iifX/CbdGtUXg=
Subject key identifier:   52:D4:E4:F5:EE:F6:9C:5F:52:A5:D8:A5:94:2C:F2:7E:F3:8F:8D:20
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       47564B353099016366EDE4DB6AEB28DAC9E6B66B
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3461633a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 17 May 2023 01:31:26 +0000
ROA not before:           Wed 17 May 2023 01:26:26 +0000
ROA not after:            Wed 15 May 2024 01:31:26 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:4ac::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:4b:35:30:99:01:63:66:ed:e4:db:6a:eb:28:da:c9:e6:b6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May 17 01:26:26 2023 GMT
            Not After : May 15 01:31:26 2024 GMT
        Subject: CN=52D4E4F5EEF69C5F52A5D8A5942CF27EF38F8D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:38:13:a6:6d:2b:9b:a6:ff:a9:0c:46:6c:
                    8c:f8:eb:8d:41:99:83:38:16:84:d3:ea:89:6d:0b:
                    18:55:74:ad:7d:fb:02:fc:66:f7:64:82:e1:ae:d1:
                    d7:bd:ec:4f:e1:06:84:f8:67:62:c9:74:0f:ba:01:
                    84:9a:e5:5b:74:9c:95:6b:bc:27:b0:b0:2b:4c:83:
                    9e:dc:63:8b:bc:01:9a:4c:5e:f5:58:ba:91:93:51:
                    72:36:f5:24:d6:ce:71:11:36:31:57:71:0f:3f:c7:
                    e2:53:e5:d1:ec:2a:9c:55:6b:52:df:64:46:1c:eb:
                    45:3f:06:e9:ef:7b:ac:e6:30:f7:a4:c7:62:cf:55:
                    1a:d2:2a:f6:21:55:42:a8:74:5a:2b:df:31:0e:fc:
                    6e:c2:d8:da:57:5c:04:79:05:31:78:a5:5b:3f:dd:
                    0f:b5:60:86:b9:e9:04:a6:7e:c2:72:e1:79:22:6a:
                    81:1e:56:45:0f:c9:0a:08:b4:e6:21:52:b2:66:da:
                    c2:c5:71:f1:d5:36:68:45:58:e9:a7:f2:19:87:2c:
                    07:84:07:e4:a5:cd:3f:81:75:95:ff:ad:02:a6:41:
                    eb:5d:5c:e7:2a:1b:e7:a6:0f:5c:9a:24:06:b9:83:
                    2c:bf:67:4b:cb:03:51:bd:48:3e:44:ce:fd:16:d3:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:E4:F5:EE:F6:9C:5F:52:A5:D8:A5:94:2C:F2:7E:F3:8F:8D:20
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3461633a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:2a:12:00:ad:3f:0b:56:5e:27:33:f6:e9:17:77:2b:12:
         a8:95:dc:cf:0a:7b:cb:c5:03:a5:35:43:7e:ac:2a:cd:ab:d4:
         4c:ea:57:58:77:dc:1e:88:cf:ec:9d:d9:0f:f5:b2:a6:ba:b8:
         54:06:41:68:9d:cc:20:49:c2:bf:d7:2a:43:23:c9:e1:1f:b2:
         da:7a:df:63:76:3e:ae:85:ed:91:61:60:fb:9f:39:f3:f1:40:
         53:d6:6b:f4:65:11:74:12:53:ce:3a:6b:b9:4f:8c:b1:9e:39:
         5c:3b:3f:c7:34:db:7c:7f:14:e8:2f:a0:4a:0b:bd:80:d1:a2:
         f9:3b:75:b8:a1:8d:f3:ed:58:54:ae:e4:94:c6:e1:f2:14:52:
         0c:67:7b:18:66:fe:c0:a9:98:44:80:f2:8d:92:9e:eb:c3:fd:
         10:1d:d1:e3:fc:ac:c8:a5:e0:09:ac:9a:71:80:e8:18:e8:30:
         fe:24:3b:cb:75:89:7d:a0:6b:d1:ec:25:dd:62:f4:29:86:46:
         3c:2b:99:6d:5f:ad:e3:e3:0a:4e:ef:fe:be:33:f7:de:f7:a3:
         1c:d5:16:83:f3:3c:23:62:24:43:e5:17:5a:10:91:89:fc:6a:
         40:8d:0e:26:95:48:b6:47:ea:d7:c3:de:61:7e:f9:0f:01:25:
         0a:ba:20:64
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUR1ZLNTCZAWNm7eTbauso2snmtmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA1MTcwMTI2MjZaFw0yNDA1MTUwMTMxMjZaMDMxMTAvBgNV
BAMTKDUyRDRFNEY1RUVGNjlDNUY1MkE1RDhBNTk0MkNGMjdFRjM4RjhEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhDgTpm0rm6b/qQxGbIz4641B
mYM4FoTT6oltCxhVdK19+wL8ZvdkguGu0de97E/hBoT4Z2LJdA+6AYSa5Vt0nJVr
vCewsCtMg57cY4u8AZpMXvVYupGTUXI29STWznERNjFXcQ8/x+JT5dHsKpxVa1Lf
ZEYc60U/Bunve6zmMPekx2LPVRrSKvYhVUKodFor3zEO/G7C2NpXXAR5BTF4pVs/
3Q+1YIa56QSmfsJy4XkiaoEeVkUPyQoItOYhUrJm2sLFcfHVNmhFWOmn8hmHLAeE
B+SlzT+BdZX/rQKmQetdXOcqG+emD1yaJAa5gyy/Z0vLA1G9SD5Ezv0W08xPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUUtTk9e72nF9SpdillCzyfvOPjSAwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM0NjE2
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBKwwDQYJKoZIhvcNAQELBQADggEBAEG5KhIArT8LVl4nM/bpF3crEqiV3M8K
e8vFA6U1Q36sKs2r1EzqV1h33B6Iz+yd2Q/1sqa6uFQGQWidzCBJwr/XKkMjyeEf
stp632N2Pq6F7ZFhYPufOfPxQFPWa/RlEXQSU846a7lPjLGeOVw7P8c023x/FOgv
oEoLvYDRovk7dbihjfPtWFSu5JTG4fIUUgxnexhm/sCpmESA8o2SnuvD/RAd0eP8
rMil4AmsmnGA6BjoMP4kO8t1iX2ga9HsJd1i9CmGRjwrmW1frePjCk7v/r4z9973
oxzVFoPzPCNiJEPlF1oQkYn8akCNDiaVSLZH6tfD3mF++Q8BJQq6IGQ=
-----END CERTIFICATE-----