Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: IAm1D5+/kUfUtGBVJAW9o5dLB5Azq2TJ1jhlQ0mDyK0=
Subject key identifier: 5D:40:CE:D0:6B:D4:FE:84:EC:24:2E:25:6E:D1:EC:39:71:1D:E5:10
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 23CF86B4712B0E156F9472E3EECC94F45EEF8B6A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa
Signing time: Wed 11 Oct 2023 16:22:25 +0000
ROA not before: Wed 11 Oct 2023 16:17:25 +0000
ROA not after: Wed 09 Oct 2024 16:22:25 +0000
asID: 52025
IP address blocks: 2a05:dfc4:171a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cf:86:b4:71:2b:0e:15:6f:94:72:e3:ee:cc:94:f4:5e:ef:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Oct 11 16:17:25 2023 GMT
Not After : Oct 9 16:22:25 2024 GMT
Subject: CN=5D40CED06BD4FE84EC242E256ED1EC39711DE510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:f7:4f:6a:90:c9:24:9e:ac:ef:33:ce:c0:
ed:98:06:48:d7:99:55:aa:87:f4:f0:7a:69:9e:af:
1d:75:77:20:21:96:3f:5b:f2:1e:df:2e:89:1f:f9:
8a:c8:12:1d:36:27:ff:da:19:ff:84:4c:a4:9f:20:
82:ac:4e:b5:08:54:87:f2:00:cf:a6:88:75:16:6b:
86:c0:99:71:75:55:f5:14:86:b5:71:90:2a:14:ce:
53:14:55:d8:4e:81:99:bf:80:90:41:6c:ea:86:37:
29:51:5b:22:2a:a6:3a:04:96:1f:d1:aa:da:e5:4e:
83:a4:90:e5:d5:f6:d6:3a:38:ea:b3:ab:35:da:27:
f7:79:40:74:a5:c2:42:cb:00:fb:10:28:8b:40:a0:
fd:39:58:96:00:0b:ea:84:0d:a7:43:ff:fa:50:7b:
ab:6d:76:c9:05:f8:f6:31:19:fb:d8:e9:19:51:1a:
9e:07:a4:78:e9:f0:9d:02:51:9d:b4:63:ab:23:d5:
bd:8c:47:07:3e:d8:d2:73:26:9b:0d:75:2f:f0:25:
86:b3:88:70:d7:dc:1f:e8:cc:83:00:15:2c:78:bc:
c2:54:77:18:c1:16:1e:a1:fb:b9:5f:b7:58:84:6c:
87:cf:96:e1:68:ee:aa:f5:0d:e4:9f:85:92:4d:f4:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:CE:D0:6B:D4:FE:84:EC:24:2E:25:6E:D1:EC:39:71:1D:E5:10
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:171a::/48
Signature Algorithm: sha256WithRSAEncryption
51:52:c4:c5:2e:b4:ff:9b:c7:e2:01:84:24:23:74:73:2d:e6:
c7:af:cb:77:84:eb:e3:32:a4:2d:89:20:01:5b:ab:22:32:df:
35:f3:80:63:31:36:5f:f9:cd:d7:86:22:06:31:18:c9:50:33:
7e:93:fc:ba:56:53:ec:f0:79:86:86:eb:41:60:a0:ac:f5:1f:
71:24:6c:9c:b8:d1:76:50:ba:e6:16:e9:25:f2:35:b3:ce:c5:
f6:44:aa:f7:ec:d1:9f:35:a1:5f:a3:a3:fa:5c:ff:8b:e8:28:
64:fb:65:3c:d0:f1:d9:7c:5f:ac:e6:2a:7f:1a:d5:1a:62:95:
e3:1c:f1:02:60:cb:30:b0:a4:9a:cb:ee:12:69:ae:a4:f8:1f:
99:82:12:81:4d:b5:97:82:ee:a6:d4:16:f9:13:9b:23:dd:a0:
3a:16:e4:bb:95:30:fe:98:ab:bc:c6:b6:6d:c1:f9:b2:8f:3a:
9a:7b:69:f9:87:ce:45:38:d6:f6:e6:ee:75:16:f6:7e:57:cb:
d7:e6:cf:49:c6:4b:9a:57:0b:07:00:07:ec:4b:e3:e5:96:05:
c8:2b:53:11:71:bf:49:2f:c8:1a:29:4e:bf:01:a7:62:4a:3b:
d0:d9:78:14:db:ea:28:40:0f:f9:3d:c5:27:59:54:6e:73:b7:
08:45:78:e1
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUI8+GtHErDhVvlHLj7syU9F7vi2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzEwMTExNjE3MjVaFw0yNDEwMDkxNjIyMjVaMDMxMTAvBgNV
BAMTKDVENDBDRUQwNkJENEZFODRFQzI0MkUyNTZFRDFFQzM5NzExREU1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu3vdPapDJJJ6s7zPOwO2YBkjX
mVWqh/Twemmerx11dyAhlj9b8h7fLokf+YrIEh02J//aGf+ETKSfIIKsTrUIVIfy
AM+miHUWa4bAmXF1VfUUhrVxkCoUzlMUVdhOgZm/gJBBbOqGNylRWyIqpjoElh/R
qtrlToOkkOXV9tY6OOqzqzXaJ/d5QHSlwkLLAPsQKItAoP05WJYAC+qEDadD//pQ
e6ttdskF+PYxGfvY6RlRGp4HpHjp8J0CUZ20Y6sj1b2MRwc+2NJzJpsNdS/wJYaz
iHDX3B/ozIMAFSx4vMJUdxjBFh6h+7lft1iEbIfPluFo7qr1DeSfhZJN9NopAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUXUDO0GvU/oTsJC4lbtHsOXEd5RAwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYIKwYBBQUHMAuG
c3JzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3Mv
Mi8zMjYxMzAzNTNhNjQ2NjYzMzQzYTMxMzczMTYxM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QXGjANBgkqhkiG9w0BAQsF
AAOCAQEAUVLExS60/5vH4gGEJCN0cy3mx6/Ld4Tr4zKkLYkgAVurIjLfNfOAYzE2
X/nN14YiBjEYyVAzfpP8ulZT7PB5hobrQWCgrPUfcSRsnLjRdlC65hbpJfI1s87F
9kSq9+zRnzWhX6Oj+lz/i+goZPtlPNDx2XxfrOYqfxrVGmKV4xzxAmDLMLCkmsvu
EmmupPgfmYISgU21l4LuptQW+RObI92gOhbku5Uw/pirvMa2bcH5so86mntp+YfO
RTjW9ubudRb2flfL1+bPScZLmlcLBwAH7Evj5ZYFyCtTEXG/SS/IGilOvwGnYko7
0Nl4FNvqKEAP+T3FJ1lUbnO3CEV44Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:30 2025 by rpki-client