Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS52025.roa
File:                     AS52025.roa (raw, json)
Hash identifier:          yc30/QttF6v64JloWvH82g8Qx+o+BDvvU0/zcJ+HbyU=
Subject key identifier:   06:9E:0F:9F:FF:0D:11:92:FF:ED:7E:90:0D:E8:D1:3E:49:52:EA:A8
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       25E53691E43590DD59CB4CCF2124FDB17ED47D32
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS52025.roa
Signing time:             Mon 01 May 2023 12:35:12 +0000
ROA not before:           Mon 01 May 2023 12:30:12 +0000
ROA not after:            Mon 29 Apr 2024 12:35:12 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/40 maxlen: 48
                          2a05:dfc1:500::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:36:91:e4:35:90:dd:59:cb:4c:cf:21:24:fd:b1:7e:d4:7d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May  1 12:30:12 2023 GMT
            Not After : Apr 29 12:35:12 2024 GMT
        Subject: CN=069E0F9FFF0D1192FFED7E900DE8D13E4952EAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:7d:91:03:4e:ac:52:d8:80:c6:1d:48:e8:
                    59:0d:a5:78:3b:66:93:98:dc:37:95:24:0c:bb:dc:
                    45:06:d0:41:4a:00:91:66:01:3a:40:1e:c4:ee:cf:
                    0a:44:90:bb:d2:99:a9:bd:eb:73:57:40:53:7f:13:
                    1b:5f:3a:b3:af:01:44:db:fa:4d:b3:b5:2d:bc:dd:
                    b9:0d:8f:a2:31:d4:96:26:ce:55:02:b3:f9:d7:fb:
                    72:f9:f4:03:86:d9:6f:25:de:01:0f:22:98:69:f5:
                    91:79:75:d8:1f:58:44:33:59:74:e8:13:37:c6:4a:
                    78:5e:b2:ca:63:33:bb:7e:02:98:27:90:81:6e:28:
                    fe:ac:6d:1b:54:c3:e6:05:d1:65:12:9d:dd:18:be:
                    ba:fc:c0:8a:a1:ba:3e:cb:6c:35:82:62:9b:ea:44:
                    e0:a1:f2:5f:05:00:30:a7:31:24:6d:0e:b1:a9:ec:
                    77:ef:23:3d:8f:63:ab:f3:8b:69:26:b4:c4:ec:7f:
                    2b:84:fe:14:6d:d1:10:c4:21:ec:3a:ec:a1:ee:f6:
                    62:1f:df:34:62:51:da:f0:b8:17:0e:98:5f:c2:9f:
                    ae:65:ea:74:da:8e:aa:27:31:ed:45:74:db:4b:92:
                    e0:a5:b6:91:67:7c:08:8a:ed:e9:3b:60:cf:98:9d:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9E:0F:9F:FF:0D:11:92:FF:ED:7E:90:0D:E8:D1:3E:49:52:EA:A8
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS52025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/39

    Signature Algorithm: sha256WithRSAEncryption
         c5:a0:67:aa:52:50:6a:61:d7:83:5b:38:a5:f4:7a:07:8b:8c:
         69:2f:13:52:74:71:82:bd:5d:73:60:37:2f:7c:ba:68:6c:98:
         7a:ee:5e:74:77:64:1b:0f:0f:ff:1b:bf:be:ae:10:58:7b:ac:
         17:a3:b9:2f:6e:0e:77:7e:13:df:8b:9e:11:6f:26:16:27:86:
         b2:03:36:ff:16:75:6a:bd:b2:bb:b8:06:b7:68:55:98:76:d1:
         df:32:2b:f5:a0:fe:d4:d3:ee:1e:ca:13:de:23:65:d2:c9:9f:
         53:a3:06:da:12:6e:cc:35:90:29:54:40:a9:5f:b5:86:32:50:
         3f:51:2a:df:87:eb:6a:a6:70:b5:2c:e6:6c:da:71:44:04:23:
         9b:1d:46:3b:64:06:df:4e:ef:ef:eb:ff:90:65:17:9c:38:95:
         b5:6d:ae:6a:54:fa:a1:5a:3f:eb:2e:9a:52:cf:bf:1d:b6:2c:
         f5:00:dd:a3:03:e9:fd:f9:d7:f3:36:3a:9d:d1:9e:93:12:5c:
         55:88:19:cb:a9:b4:8a:54:ab:74:45:cb:db:2f:1a:71:14:78:
         17:a3:81:1f:71:e5:59:fa:8c:a5:ad:d8:f2:80:6f:61:1a:67:
         86:ab:e2:e3:d9:9c:f5:e0:d2:b4:32:a9:e5:37:af:42:c9:98:
         ac:59:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org