Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          23OsMkCfroJwQQl94FTrvVKVqMNzJgHucondOWkvmNo=
Subject key identifier:   20:DF:AE:DB:34:28:41:3A:4E:AE:F3:22:85:5D:A1:76:9F:70:FC:53
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       10861981E497EFA1C1DC9712B5CFA12E83ACF86F
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Fri 21 Apr 2023 11:46:59 +0000
ROA not before:           Fri 21 Apr 2023 11:41:59 +0000
ROA not after:            Fri 19 Apr 2024 11:46:59 +0000
asID:                     50224
IP address blocks:        2a0a:6040:1000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:19:81:e4:97:ef:a1:c1:dc:97:12:b5:cf:a1:2e:83:ac:f8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 21 11:41:59 2023 GMT
            Not After : Apr 19 11:46:59 2024 GMT
        Subject: CN=20DFAEDB3428413A4EAEF322855DA1769F70FC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:25:da:56:bd:2a:1a:a0:37:23:35:5c:8c:
                    0c:ae:d1:c1:7e:8a:6f:c0:d2:02:ce:3e:bb:f3:e0:
                    cb:d0:e5:9e:a9:60:c9:e5:41:eb:13:f9:af:7f:5f:
                    d8:77:b4:53:34:55:a5:62:4f:22:a9:f9:21:7f:9d:
                    d1:24:73:68:61:ff:00:e7:3e:13:83:ce:f4:02:a9:
                    ce:d5:ee:c5:e5:c7:bc:5c:51:3c:5c:2b:6b:98:2a:
                    db:5a:e0:79:59:01:0f:60:e2:2d:73:14:6c:f2:0b:
                    40:9e:dc:44:a3:b2:f0:08:b8:dc:a1:87:e9:41:ef:
                    6c:2b:e7:0d:6e:3e:24:c2:3d:ee:ad:cb:ef:0b:8d:
                    01:7e:e5:d1:d7:d5:7e:67:e2:bf:8b:db:6c:68:f4:
                    92:cf:eb:b5:be:e0:93:ce:71:2b:b4:a1:de:a4:7a:
                    97:24:ab:f6:a4:51:3d:d4:0c:05:97:ea:dc:97:97:
                    43:69:a8:bc:36:53:a2:12:87:d1:57:56:53:e7:55:
                    a1:3b:3b:35:58:7b:41:29:09:05:00:f6:41:47:ea:
                    37:b7:e7:d3:5a:b6:4e:fb:1f:43:81:2f:a0:13:2f:
                    12:61:f6:d7:17:82:8b:bd:87:dc:92:13:3c:b7:4f:
                    e2:59:0b:fa:17:66:48:51:0a:8b:2c:2e:52:ed:e6:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DF:AE:DB:34:28:41:3A:4E:AE:F3:22:85:5D:A1:76:9F:70:FC:53
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:56:63:3a:b4:fa:21:60:02:45:2c:b4:9d:b8:98:13:25:
         8f:48:f6:ca:35:62:87:cc:73:16:0f:f4:b7:9f:e5:89:08:c8:
         75:fd:f5:da:76:06:63:54:7d:e5:3a:21:61:72:62:3a:fb:77:
         04:64:e8:62:e4:72:08:bd:46:81:de:26:39:0d:55:4f:55:e2:
         e1:77:e1:13:56:4f:ac:a5:c3:cd:c5:bb:28:18:e7:23:04:8d:
         01:e3:df:36:44:b4:17:62:20:1b:1f:99:e7:40:cc:05:f3:33:
         89:4a:f7:cf:29:e0:44:62:69:22:45:e6:28:9f:f4:1f:c4:82:
         c3:78:39:2c:e1:97:2b:0e:91:ae:48:cb:69:e3:97:73:ec:eb:
         48:07:44:1b:96:5a:ee:bb:d8:3a:eb:94:23:12:d0:db:af:2f:
         43:ae:33:53:d8:d7:57:71:e7:ec:be:4e:6c:b2:e9:f6:b5:b3:
         6f:7b:77:7d:a4:03:94:75:f5:2e:00:f5:ee:39:0f:27:72:5f:
         69:3c:ea:2f:97:08:3b:ff:0d:e3:a1:ea:c4:13:b7:21:be:f8:
         fa:a5:01:72:86:5b:7b:2a:bd:a7:f2:7d:f7:0f:4c:f5:06:df:
         27:c5:69:9e:f4:0f:84:51:e3:7b:10:28:a6:70:1d:49:f7:65:
         22:89:2f:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUEIYZgeSX76HB3JcStc+hLoOs+G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yMzA0MjExMTQxNTlaFw0yNDA0MTkxMTQ2NTlaMDMxMTAvBgNV
BAMTKDIwREZBRURCMzQyODQxM0E0RUFFRjMyMjg1NURBMTc2OUY3MEZDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjTyXaVr0qGqA3IzVcjAyu0cF+
im/A0gLOPrvz4MvQ5Z6pYMnlQesT+a9/X9h3tFM0VaViTyKp+SF/ndEkc2hh/wDn
PhODzvQCqc7V7sXlx7xcUTxcK2uYKtta4HlZAQ9g4i1zFGzyC0Ce3ESjsvAIuNyh
h+lB72wr5w1uPiTCPe6ty+8LjQF+5dHX1X5n4r+L22xo9JLP67W+4JPOcSu0od6k
epckq/akUT3UDAWX6tyXl0NpqLw2U6ISh9FXVlPnVaE7OzVYe0EpCQUA9kFH6je3
59Natk77H0OBL6ATLxJh9tcXgou9h9ySEzy3T+JZC/oXZkhRCossLlLt5tebAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUIN+u2zQoQTpOrvMihV2hdp9w/FMwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYI
KwYBBQUHMAuGaHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDM1MzAzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAEDANBgkqhkiG9w0BAQsFAAOC
AQEASoBWYzq0+iFgAkUstJ24mBMlj0j2yjVih8xzFg/0t5/liQjIdf312nYGY1R9
5TohYXJiOvt3BGToYuRyCL1Ggd4mOQ1VT1Xi4XfhE1ZPrKXDzcW7KBjnIwSNAePf
NkS0F2IgGx+Z50DMBfMziUr3zyngRGJpIkXmKJ/0H8SCw3g5LOGXKw6RrkjLaeOX
c+zrSAdEG5Za7rvYOuuUIxLQ268vQ64zU9jXV3Hn7L5ObLLp9rWzb3t3faQDlHX1
LgD17jkPJ3JfaTzqL5cIO/8N46HqxBO3Ib74+qUBcoZbeyq9p/J99w9M9QbfJ8Vp
nvQPhFHjexAopnAdSfdlIokvSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org