Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS27176.roa
File:                     AS27176.roa (raw, json)
Hash identifier:          hIle7cgdoC7lvXL4qPhn0n4DOvLTV+DytyJxSYWlm88=
Subject key identifier:   66:E4:35:26:17:4F:9A:9B:5C:CE:AF:20:D6:86:1C:7F:78:21:96:26
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7CBB954512697B0AD3FC1E9F05203294D1958B3D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS27176.roa
Signing time:             Mon 20 Mar 2023 22:52:34 +0000
ROA not before:           Mon 20 Mar 2023 22:47:34 +0000
ROA not after:            Mon 18 Mar 2024 22:52:34 +0000
asID:                     27176
IP address blocks:        2a0a:6040:9900::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:95:45:12:69:7b:0a:d3:fc:1e:9f:05:20:32:94:d1:95:8b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar 20 22:47:34 2023 GMT
            Not After : Mar 18 22:52:34 2024 GMT
        Subject: CN=66E43526174F9A9B5CCEAF20D6861C7F78219626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:96:97:55:60:e2:87:a8:04:e9:99:d7:86:
                    ed:b1:e4:e3:65:07:36:9b:6d:7a:7f:60:59:f7:1c:
                    5a:cb:75:43:d7:c5:7c:e2:4c:d8:96:36:91:34:31:
                    b8:62:ac:d4:0b:04:62:f6:e4:35:8a:ec:36:4a:d1:
                    ad:ec:e7:d0:9b:be:68:09:2e:3e:6b:36:57:2b:60:
                    46:20:63:a4:1a:91:2f:cb:4c:92:2f:82:58:c5:cb:
                    27:aa:c9:83:39:8f:26:16:f1:b3:18:eb:6c:e5:c4:
                    d7:79:17:0a:98:7d:a6:37:db:83:00:0f:09:42:a8:
                    6a:8b:35:49:ec:18:f5:a9:e5:f6:6b:02:22:30:66:
                    3b:e9:fa:d3:ef:ef:e6:8a:4c:f3:6b:52:60:b9:13:
                    cd:a9:d7:ff:1d:a1:a9:03:6c:84:c7:08:41:91:e1:
                    5c:79:a8:ee:54:f3:cd:09:66:3c:02:0a:88:fe:cc:
                    94:09:77:d3:3c:6f:47:05:bd:b6:6a:4c:8b:05:19:
                    7e:e4:be:a1:ea:af:84:5c:81:34:89:f6:a1:e1:2d:
                    78:6d:3e:b9:4b:08:7f:cf:23:d7:8e:b2:f3:ea:c2:
                    a8:8c:e1:30:0c:d0:82:17:76:50:10:7d:03:bc:73:
                    e7:0b:bd:20:25:1b:8e:56:65:28:b1:12:ff:e9:a4:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:35:26:17:4F:9A:9B:5C:CE:AF:20:D6:86:1C:7F:78:21:96:26
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS27176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:65:58:f7:66:41:58:85:a1:56:aa:06:2e:89:53:9c:69:
         aa:c2:5b:fb:ed:36:ff:fc:60:ea:a7:36:c5:8a:6a:8b:ec:3b:
         61:56:4d:f9:8b:53:b0:03:32:12:cb:24:08:18:cd:42:3a:d8:
         cd:82:96:66:7a:77:a4:ff:dc:3e:b8:11:7a:7f:f0:85:6f:4c:
         08:eb:76:1b:c3:a7:b6:11:da:5f:1d:8f:ef:81:63:e7:79:88:
         67:9d:c3:0a:2d:79:23:15:d9:8c:15:1d:36:44:b3:8e:df:ff:
         b2:33:b5:8f:11:b6:6a:7b:9e:f3:d7:8c:4f:64:7f:04:38:5e:
         ee:61:a4:e9:b9:db:61:18:ab:94:5b:ad:86:44:1c:ac:fa:25:
         3c:d7:1a:7b:fa:46:5f:1f:1c:98:1e:35:bc:1d:60:f0:f2:d7:
         a8:19:36:ca:79:12:05:79:6c:89:78:d7:1f:a8:3e:4a:ed:09:
         02:43:64:fb:2b:14:77:68:10:53:f8:11:f8:41:10:dc:a2:62:
         92:0f:f4:f4:18:af:8d:71:96:39:ea:1c:d4:1a:e1:fb:3d:c6:
         5d:e9:9e:e1:ad:3e:a5:ea:d4:92:55:2a:7d:2d:21:3a:b5:79:
         a9:58:58:f5:b7:16:e9:13:48:e5:c5:37:9d:16:3c:ea:e5:98:
         e0:cc:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org