Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          ZWSUw6q+4193HV/18E0MKoFUzXqrIJA02o1rBubEu2k=
Subject key identifier:   9E:F5:AB:46:31:89:47:6D:92:53:1D:E5:06:04:B6:37:C0:9D:B9:B8
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       47687797B77DCAB0981AA55C1FA8968A2884F7E7
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Fri 21 Apr 2023 11:46:59 +0000
ROA not before:           Fri 21 Apr 2023 11:41:59 +0000
ROA not after:            Fri 19 Apr 2024 11:46:59 +0000
asID:                     204857
IP address blocks:        2a0a:6040:1000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:68:77:97:b7:7d:ca:b0:98:1a:a5:5c:1f:a8:96:8a:28:84:f7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 21 11:41:59 2023 GMT
            Not After : Apr 19 11:46:59 2024 GMT
        Subject: CN=9EF5AB463189476D92531DE50604B637C09DB9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:ff:95:55:1a:2d:b0:d4:d5:06:b2:21:d4:
                    47:2a:b3:f9:50:e1:46:aa:00:50:be:6c:d4:cf:82:
                    de:4f:d0:2d:68:f4:e0:97:3c:af:62:20:39:2f:f4:
                    ca:37:db:53:e1:df:42:75:3a:f9:ee:79:95:fc:52:
                    e5:23:ae:ee:d4:72:a6:cf:89:34:04:ac:79:df:a2:
                    14:10:c5:9b:5c:5a:57:7d:24:ff:1d:e4:04:20:85:
                    56:79:4e:0d:c1:2a:09:e3:64:cb:bb:e8:8e:cd:c8:
                    4c:94:20:25:5b:df:7e:1e:55:20:5a:e9:22:d7:2f:
                    ad:9b:71:8a:01:d9:2a:ce:83:5d:5d:0a:6d:0d:63:
                    8f:4f:7e:71:88:7d:b9:37:ab:97:e7:dc:81:8b:0b:
                    63:e9:1d:e1:d4:14:b8:65:ac:eb:c0:b0:78:74:ec:
                    cb:e1:15:92:2f:dd:ba:13:87:8d:84:95:e9:32:6f:
                    52:52:a9:de:b4:07:b1:87:e4:67:0e:64:92:e1:d6:
                    22:29:20:e6:bb:b0:42:0a:00:a0:38:15:da:a8:9e:
                    65:3e:e0:7a:31:f6:93:09:8a:82:f3:60:95:99:74:
                    ae:d3:23:45:17:92:03:c9:10:b8:82:53:7a:34:94:
                    57:9a:d6:91:70:45:63:72:1c:05:82:88:62:73:77:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:AB:46:31:89:47:6D:92:53:1D:E5:06:04:B6:37:C0:9D:B9:B8
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:25:ba:7d:47:aa:37:06:5f:af:19:94:86:30:2e:38:e2:94:
         4f:df:1a:8d:b5:5a:5c:e3:b9:15:9f:b7:13:62:80:9f:32:51:
         e8:e7:e0:02:dc:6a:d8:65:98:92:cf:aa:b2:0f:ee:da:47:9d:
         28:98:b0:f6:7c:48:d1:fe:e9:d2:5f:4c:4b:d9:9a:5f:54:42:
         b1:a2:86:fa:d3:aa:17:99:2c:b3:62:4f:93:8c:84:db:11:15:
         54:c4:da:cf:20:c4:a6:bb:4f:5c:c0:96:f5:a4:06:67:84:e5:
         a6:90:f1:cf:48:07:80:20:bb:28:a5:8c:7c:d0:56:95:ca:76:
         90:d2:89:f1:e2:fa:91:ee:8a:4f:e0:e3:c0:b0:82:9b:0d:f0:
         03:3c:7c:71:60:b8:d1:a5:14:a1:17:97:60:98:88:f5:d0:06:
         f7:dc:ac:f0:7f:85:38:13:8d:a2:47:4b:78:d5:de:cb:da:ea:
         5d:41:43:38:b5:e2:b5:ab:e2:56:98:2f:b5:b6:06:8c:81:ea:
         f5:e8:b2:62:c8:e2:40:12:1b:11:56:43:e0:64:91:e7:fd:6d:
         1e:1f:be:7d:37:9b:63:46:65:eb:bf:f3:46:0d:54:67:cc:f4:
         f2:af:ca:9b:2d:20:02:81:f1:cf:42:4f:69:34:23:11:48:81:
         28:84:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org