Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a35333a3a2f34382d3438203d3e203630333130.roa
File:                     326130613a363034303a35333a3a2f34382d3438203d3e203630333130.roa (raw, json)
Hash identifier:          o3UOXQZ/T3NrGdCtFdPKjpnlIoc7FGJyZf5iPEt4qq8=
Subject key identifier:   52:36:56:D6:6F:CC:6B:98:F5:8D:B4:E4:A3:CB:96:36:9B:B3:D9:BC
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       4E5E30E40424144A0B07E2D2E48BBBD6D3F40CAA
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a35333a3a2f34382d3438203d3e203630333130.roa
Signing time:             Wed 03 May 2023 23:16:41 +0000
ROA not before:           Wed 03 May 2023 23:11:41 +0000
ROA not after:            Wed 01 May 2024 23:16:41 +0000
asID:                     60310
IP address blocks:        2a0a:6040:53::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:30:e4:04:24:14:4a:0b:07:e2:d2:e4:8b:bb:d6:d3:f4:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: May  3 23:11:41 2023 GMT
            Not After : May  1 23:16:41 2024 GMT
        Subject: CN=523656D66FCC6B98F58DB4E4A3CB96369BB3D9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:2c:33:1d:7c:90:6c:b2:4c:81:6f:27:fd:
                    b5:89:cd:b0:1b:ba:59:f1:67:30:30:6a:e5:83:a8:
                    c9:90:ca:20:13:f0:02:3b:61:1b:91:27:66:0c:7f:
                    7d:e6:8f:b7:73:75:29:f6:ac:d4:06:11:1b:df:f3:
                    15:7f:12:b0:77:d7:a4:18:9d:68:8c:dc:cb:17:e4:
                    e2:62:ef:1b:2f:20:12:8f:89:05:a7:af:21:41:d6:
                    1d:c8:30:49:39:8d:53:a4:03:a1:f8:50:8a:6b:b7:
                    3e:e3:7e:9d:b1:c5:1c:47:40:c5:aa:a9:66:6b:c5:
                    51:28:0b:f1:32:6c:b6:6f:9a:56:1b:44:75:3f:cc:
                    32:ac:34:ca:fb:3b:23:1f:73:c4:18:98:5a:57:70:
                    1d:55:b6:6f:82:ed:57:08:aa:12:3b:94:5e:ea:a5:
                    c8:df:82:06:ca:02:19:f3:ad:07:f2:cb:00:f2:b7:
                    40:d9:88:0f:8f:d5:ed:4d:f5:c9:10:e2:dd:21:a7:
                    6f:d8:95:87:29:e2:61:e5:9b:db:25:25:12:4a:b7:
                    a3:fe:55:0a:91:22:66:48:ec:3e:68:eb:a1:ad:96:
                    fb:8b:b1:63:90:91:e7:bc:b1:8e:f8:f1:49:20:1c:
                    44:44:8b:dd:f4:b8:6c:c1:f9:ed:4c:70:96:68:b1:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:56:D6:6F:CC:6B:98:F5:8D:B4:E4:A3:CB:96:36:9B:B3:D9:BC
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a35333a3a2f34382d3438203d3e203630333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:3c:24:c3:2f:f8:64:39:c2:38:1a:62:63:96:15:c4:0f:20:
         4e:48:1e:a3:3e:8e:90:20:cb:9e:26:00:36:5f:5d:64:d8:86:
         45:74:03:c7:e2:7d:47:19:ef:c1:4d:5b:e6:56:28:ba:c8:56:
         f6:d9:ae:d0:c9:ff:ad:5e:ec:57:01:6d:72:d0:75:dd:42:39:
         97:52:58:78:22:75:e8:6d:34:e5:63:f8:34:43:57:73:17:e8:
         c6:46:ea:d8:f5:0a:1a:a8:47:b1:fd:87:0b:52:44:03:a2:3c:
         fe:0e:7a:1b:da:0f:e9:e4:84:3a:52:bc:82:cb:65:7d:67:4a:
         68:3f:56:ce:c7:7b:28:49:c5:47:65:c1:db:b9:26:75:2f:50:
         23:cc:de:a5:53:72:48:78:49:17:c1:30:ce:f0:60:dc:0b:97:
         4f:55:02:64:c3:0a:47:31:d9:be:43:e4:c9:c3:33:2f:e1:e3:
         19:7b:09:e1:b5:c3:22:42:71:80:1f:76:5c:9c:3e:fa:3b:db:
         3e:1a:e3:dd:99:bc:4f:2a:7a:cd:8c:2b:70:1d:6a:36:b0:83:
         9a:60:3a:9a:0c:d0:df:b7:4d:2b:47:87:4f:7c:61:64:1b:23:
         6e:9e:da:e5:9e:ac:eb:4c:85:4e:52:b2:a4:92:a6:27:b9:e4:
         43:b8:e6:d7
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUTl4w5AQkFEoLB+LS5Iu71tP0DKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yMzA1MDMyMzExNDFaFw0yNDA1MDEyMzE2NDFaMDMxMTAvBgNV
BAMTKDUyMzY1NkQ2NkZDQzZCOThGNThEQjRFNEEzQ0I5NjM2OUJCM0Q5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXSwzHXyQbLJMgW8n/bWJzbAb
ulnxZzAwauWDqMmQyiAT8AI7YRuRJ2YMf33mj7dzdSn2rNQGERvf8xV/ErB316QY
nWiM3MsX5OJi7xsvIBKPiQWnryFB1h3IMEk5jVOkA6H4UIprtz7jfp2xxRxHQMWq
qWZrxVEoC/EybLZvmlYbRHU/zDKsNMr7OyMfc8QYmFpXcB1Vtm+C7VcIqhI7lF7q
pcjfggbKAhnzrQfyywDyt0DZiA+P1e1N9ckQ4t0hp2/YlYcp4mHlm9slJRJKt6P+
VQqRImZI7D5o66GtlvuLsWOQkee8sY748UkgHEREi930uGzB+e1McJZoscc9AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUUjZW1m/Ma5j1jbTko8uWNpuz2bwwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzNTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzYzMDMzMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAUzANBgkqhkiG9w0BAQsFAAOCAQEA
rzwkwy/4ZDnCOBpiY5YVxA8gTkgeoz6OkCDLniYANl9dZNiGRXQDx+J9RxnvwU1b
5lYoushW9tmu0Mn/rV7sVwFtctB13UI5l1JYeCJ16G005WP4NENXcxfoxkbq2PUK
GqhHsf2HC1JEA6I8/g56G9oP6eSEOlK8gstlfWdKaD9Wzsd7KEnFR2XB27kmdS9Q
I8zepVNySHhJF8EwzvBg3AuXT1UCZMMKRzHZvkPkycMzL+HjGXsJ4bXDIkJxgB92
XJw++jvbPhrj3Zm8Typ6zYwrcB1qNrCDmmA6mgzQ37dNK0eHT3xhZBsjbp7a5Z6s
60yFTlKypJKmJ7nkQ7jm1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org