Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3537393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663313a3537393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ItFBzOd7wUgLB1472jMH+IOASKqibjnA9f6G5tgyiIw=
Subject key identifier:   8D:50:B8:50:09:1C:12:C2:32:F0:46:75:B6:77:EB:10:49:57:49:83
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       1EA64D8CAA8715741AFB661B930A22839B7CF648
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3537393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 May 2023 23:40:30 +0000
ROA not before:           Mon 08 May 2023 23:35:30 +0000
ROA not after:            Mon 06 May 2024 23:40:30 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:579::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a6:4d:8c:aa:87:15:74:1a:fb:66:1b:93:0a:22:83:9b:7c:f6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: May  8 23:35:30 2023 GMT
            Not After : May  6 23:40:30 2024 GMT
        Subject: CN=8D50B850091C12C232F04675B677EB1049574983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:f0:2e:87:30:5f:45:39:9e:ea:96:5a:aa:
                    36:7b:52:6d:31:b5:b6:f1:4f:dc:13:bc:d3:02:36:
                    09:e1:64:96:00:72:73:1b:82:c1:2d:1c:5d:82:49:
                    9f:fd:5d:2a:0e:10:3c:cb:94:5f:af:ad:2c:7b:ba:
                    78:dd:2a:d8:07:d7:f3:59:2b:9d:0f:23:1b:62:4d:
                    a8:79:10:cc:1b:1f:a0:75:b6:e4:b0:50:34:21:cf:
                    d5:50:f3:aa:d7:4d:89:c9:05:6f:7e:bb:56:95:88:
                    e2:20:b3:8c:31:87:d8:71:6b:8c:39:fb:a1:71:c7:
                    44:8d:06:60:f9:b2:1e:7e:96:af:86:b7:93:42:f3:
                    15:14:4f:ec:57:43:ee:a4:24:e1:a6:94:59:71:04:
                    ab:07:31:9f:43:ca:a3:5f:a3:89:da:31:80:96:d0:
                    96:66:68:05:ca:ae:d1:62:ee:8d:33:8c:86:92:4c:
                    54:57:8d:f5:19:91:84:ac:cc:23:39:ed:8c:df:c5:
                    6a:6f:e1:8b:ab:5b:00:84:42:7d:d4:45:19:ad:b7:
                    3d:d0:4a:6c:08:b5:67:c5:13:fe:d0:c2:88:dc:10:
                    dd:8b:db:0a:e7:b8:ff:f8:43:7b:66:ee:00:14:3a:
                    16:92:b0:e0:da:b4:73:a1:18:21:8f:f8:cf:b3:39:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:B8:50:09:1C:12:C2:32:F0:46:75:B6:77:EB:10:49:57:49:83
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3537393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:579::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:ae:1b:1c:f9:17:c9:ab:d3:86:70:99:73:e4:ff:db:6d:
         5a:4d:0b:96:c0:2d:36:9e:db:95:4a:c6:52:2b:7f:11:59:87:
         34:5a:b0:da:1b:7a:51:38:d8:35:e4:23:07:74:9e:0c:26:8a:
         10:c0:fb:45:e5:4f:22:7c:7b:3b:21:97:8f:5b:7e:82:fe:a7:
         7b:7a:b4:8e:31:72:8b:28:fa:27:11:8d:cd:14:2e:b1:c6:a3:
         b9:f2:8e:00:ea:76:84:db:10:ef:41:86:21:5a:48:a3:80:aa:
         1a:49:9a:30:eb:7e:05:b9:7e:54:46:f8:2a:49:eb:b2:bf:10:
         31:13:3e:ae:86:74:57:f5:a4:01:ea:df:3a:a9:8d:e5:d8:37:
         ba:a3:56:37:9b:ee:ce:16:9a:83:fb:a9:09:fd:85:31:b2:dc:
         a5:de:a8:b0:e7:e5:c6:91:ed:e5:4e:c7:56:f7:00:4b:c1:cd:
         10:b2:df:e9:15:75:a5:97:f6:5d:a3:af:ae:5c:1e:1f:3e:a5:
         0d:2a:e0:b2:3b:33:06:a8:fb:28:bf:0f:07:fa:b2:ed:5f:4c:
         f5:7b:f8:21:46:2c:f2:2f:c7:7b:e5:30:cb:0f:3b:1c:f1:c4:
         e6:8b:80:c2:3e:17:b0:93:3a:66:13:8f:30:3e:65:1d:0c:a2:
         fc:df:ac:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUHqZNjKqHFXQa+2Ybkwoig5t89kgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA1MDgyMzM1MzBaFw0yNDA1MDYyMzQwMzBaMDMxMTAvBgNV
BAMTKDhENTBCODUwMDkxQzEyQzIzMkYwNDY3NUI2NzdFQjEwNDk1NzQ5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vvAuhzBfRTme6pZaqjZ7Um0x
tbbxT9wTvNMCNgnhZJYAcnMbgsEtHF2CSZ/9XSoOEDzLlF+vrSx7unjdKtgH1/NZ
K50PIxtiTah5EMwbH6B1tuSwUDQhz9VQ86rXTYnJBW9+u1aViOIgs4wxh9hxa4w5
+6Fxx0SNBmD5sh5+lq+Gt5NC8xUUT+xXQ+6kJOGmlFlxBKsHMZ9DyqNfo4naMYCW
0JZmaAXKrtFi7o0zjIaSTFRXjfUZkYSszCM57YzfxWpv4YurWwCEQn3URRmttz3Q
SmwItWfFE/7QwojcEN2L2wrnuP/4Q3tm7gAUOhaSsODatHOhGCGP+M+zOQtrAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUjVC4UAkcEsIy8EZ1tnfrEElXSYMwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM1Mzcz
OTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
Bd/BBXkwDQYJKoZIhvcNAQELBQADggEBAIe1rhsc+RfJq9OGcJlz5P/bbVpNC5bA
LTae25VKxlIrfxFZhzRasNobelE42DXkIwd0ngwmihDA+0XlTyJ8ezshl49bfoL+
p3t6tI4xcoso+icRjc0ULrHGo7nyjgDqdoTbEO9BhiFaSKOAqhpJmjDrfgW5flRG
+CpJ67K/EDETPq6GdFf1pAHq3zqpjeXYN7qjVjeb7s4WmoP7qQn9hTGy3KXeqLDn
5caR7eVOx1b3AEvBzRCy3+kVdaWX9l2jr65cHh8+pQ0q4LI7Mwao+yi/Dwf6su1f
TPV7+CFGLPIvx3vlMMsPOxzxxOaLgMI+F7CTOmYTjzA+ZR0MovzfrC8=
-----END CERTIFICATE-----