Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3462643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          33r1jOFE4vImJCX5ezbZC32YYXfvJbISphq9uC6xVlw=
Subject key identifier:   A6:1C:D1:4E:FB:C6:EB:17:30:82:9D:6B:CC:89:6C:DE:45:25:0D:B5
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       5017526A2AC531A9584C0BF93D199425C670F3C8
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Fri 12 May 2023 02:29:51 +0000
ROA not before:           Fri 12 May 2023 02:24:51 +0000
ROA not after:            Fri 10 May 2024 02:29:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:4bd::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:52:6a:2a:c5:31:a9:58:4c:0b:f9:3d:19:94:25:c6:70:f3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May 12 02:24:51 2023 GMT
            Not After : May 10 02:29:51 2024 GMT
        Subject: CN=A61CD14EFBC6EB1730829D6BCC896CDE45250DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:a6:74:18:ad:14:36:45:3c:f4:6a:43:7b:
                    d0:e8:7d:77:6b:ca:cb:1f:39:55:c5:ab:ad:ce:f4:
                    10:e7:dd:c3:ce:80:56:2d:5f:74:e2:73:b3:06:53:
                    86:03:02:18:95:c7:a7:39:de:ba:8e:38:2e:e7:49:
                    d9:d1:02:2e:4e:d9:dd:35:8f:64:85:c0:c3:f4:26:
                    b7:95:8a:33:de:bc:f2:8b:92:04:b1:b7:bb:d3:2a:
                    68:c8:02:ed:d2:73:eb:eb:01:a2:51:f8:a8:00:e5:
                    e9:cd:f7:87:fc:6f:f6:73:d7:9e:36:56:3b:27:f3:
                    58:bf:b9:3d:64:f0:3d:a9:9b:e3:c7:3f:0c:c0:11:
                    a7:ee:ce:4e:89:9d:3b:cc:91:10:6b:35:a0:8b:09:
                    42:1a:8b:42:6a:fe:70:62:e6:e3:dd:69:bd:56:18:
                    2f:57:bb:ea:50:57:e7:01:60:3d:61:56:38:02:9a:
                    a7:10:09:92:7e:5a:56:7c:bc:e9:bf:cd:78:9a:da:
                    67:d0:e6:11:a3:64:7e:ae:bb:28:6f:9b:cd:7f:68:
                    f6:7c:59:43:c5:76:10:4c:cc:34:d7:e5:d7:a2:34:
                    61:30:14:7f:1b:92:81:ae:2a:4a:d7:4b:86:f4:98:
                    56:c8:c1:2e:da:b0:aa:bb:a7:e9:1b:b6:5f:ae:04:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1C:D1:4E:FB:C6:EB:17:30:82:9D:6B:CC:89:6C:DE:45:25:0D:B5
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3462643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:23:71:0b:06:42:95:02:ae:60:a2:7c:03:21:a4:e3:50:
         14:00:a7:f6:be:f8:79:f1:4d:07:9b:d2:81:c2:47:7a:50:fa:
         7c:3c:7a:da:15:71:8a:6f:dd:8f:94:d8:5e:30:2e:f9:06:6a:
         e8:bd:0c:2f:e4:0a:80:7a:3e:9e:6a:5b:f5:45:95:a2:ea:a4:
         fb:15:99:de:3c:29:91:1a:43:9d:4d:44:6e:75:ec:3c:04:75:
         9d:76:78:04:00:ea:d1:22:12:db:16:65:e3:47:2b:e5:8a:d7:
         22:95:b0:03:9f:48:f1:ae:2a:b1:9c:5f:6a:cc:00:34:5a:2c:
         ea:82:86:d4:44:2d:86:32:72:5e:ee:c8:da:59:ee:14:f1:ef:
         f6:01:0a:b3:2c:9b:ae:92:3e:a5:d9:f7:67:71:5d:80:48:0f:
         ec:f9:85:a5:66:2f:20:f0:d4:53:e9:15:93:38:4e:76:c3:cd:
         03:4a:e7:61:44:e0:3a:fa:a8:77:0f:1f:70:14:df:84:64:79:
         4e:c0:1e:7e:a4:47:ba:d2:07:57:07:35:ce:a1:0f:d4:3a:66:
         91:cf:b2:8d:1c:57:14:c1:6c:e6:7f:94:34:b9:86:db:e9:3e:
         38:ec:21:d5:c4:5e:4f:f6:50:09:2c:e9:22:31:8e:0c:92:c7:
         d6:5a:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----