Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          LDGr+fBcnYqaBwbCwHPpUDnwgCTiCd+P39QK1uv1mDs=
Subject key identifier:   BE:B2:C3:58:DB:08:B3:63:00:68:F9:3E:79:85:04:10:8E:C4:0B:01
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       49E4557DB0D3BF0CED9688F91116D48A19F46FF0
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Fri 21 Apr 2023 11:46:59 +0000
ROA not before:           Fri 21 Apr 2023 11:41:59 +0000
ROA not after:            Fri 19 Apr 2024 11:46:59 +0000
asID:                     204857
IP address blocks:        2a0a:6040:6000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:55:7d:b0:d3:bf:0c:ed:96:88:f9:11:16:d4:8a:19:f4:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 21 11:41:59 2023 GMT
            Not After : Apr 19 11:46:59 2024 GMT
        Subject: CN=BEB2C358DB08B3630068F93E798504108EC40B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:46:c0:4a:82:26:48:7d:c1:52:07:eb:c1:
                    ce:e3:67:82:f4:06:d2:a0:a2:41:ce:02:79:0c:b8:
                    eb:dd:a6:a9:da:4d:b8:be:e4:83:57:db:fd:9f:bf:
                    e6:89:1b:a6:6d:cd:aa:25:23:6f:a7:ad:71:1a:13:
                    72:d1:6a:5c:9b:b6:c0:c9:cc:85:07:29:aa:dd:dd:
                    a2:a4:fb:d5:9f:e1:b8:21:6c:f3:38:5d:fc:6f:af:
                    30:0a:48:41:98:cf:37:f9:82:20:c8:a5:c4:e3:f7:
                    c4:c9:4d:45:07:74:7d:d7:15:29:60:3e:c1:54:72:
                    82:0d:dd:b5:be:a9:9e:3d:6c:f5:ff:47:83:f2:5e:
                    cd:f7:de:da:aa:43:c4:a7:63:f2:6f:29:c5:50:d1:
                    0e:d6:6f:6f:f9:b3:4a:4e:71:03:28:37:57:93:d0:
                    bc:80:b8:01:49:74:55:3c:c3:58:05:cd:5c:48:21:
                    61:74:a9:d0:92:53:c3:26:55:d4:c0:aa:3f:57:05:
                    00:08:0d:d0:ed:e8:e1:79:a0:9b:7e:37:fa:f3:52:
                    a4:a0:b1:36:cc:32:df:a2:e3:f4:ab:1d:eb:ff:bb:
                    01:45:a4:7d:2b:45:5e:cd:35:87:dc:42:b9:8e:fb:
                    f1:38:15:4e:43:22:8e:58:d3:50:85:23:2f:d2:45:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B2:C3:58:DB:08:B3:63:00:68:F9:3E:79:85:04:10:8E:C4:0B:01
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:94:c2:b0:1d:c7:21:47:ee:46:32:6c:7e:42:5f:ae:09:d2:
         a6:a6:e1:07:b5:87:41:49:6e:e3:50:f3:03:64:f9:2c:59:6d:
         13:77:65:0d:7a:59:cb:61:fb:bb:46:16:a2:c2:08:12:71:86:
         8e:c8:66:aa:85:6d:d9:ac:3b:62:34:03:fa:e9:93:aa:6f:2f:
         57:1e:18:95:9a:27:53:2c:ea:0c:cd:cd:4d:d5:64:25:a2:c5:
         ba:23:7c:00:66:be:e8:28:e6:05:cc:2c:22:a6:17:78:52:65:
         e8:7c:25:03:83:3e:f9:9d:22:4d:b0:2a:e4:4e:9e:35:cc:1f:
         a7:7f:84:20:27:cc:b3:90:e7:74:25:5c:2b:1f:48:6a:e5:8b:
         07:02:8a:5a:e2:a6:0e:82:19:c3:86:11:5e:aa:ee:a6:1f:d3:
         c7:28:d8:1a:e7:af:78:05:65:dc:a9:30:d3:4a:ee:42:4a:bd:
         29:6a:ce:e9:60:9e:65:57:4c:06:c7:a6:c7:e9:2d:1e:d8:bb:
         66:da:2c:e4:2a:64:b7:09:d1:70:03:ba:40:11:3a:e1:6e:26:
         4c:e4:d0:a1:e6:e7:60:af:59:a1:58:16:77:46:a0:14:9f:92:
         c5:6e:3b:12:13:6b:cc:5c:1d:29:cc:0e:ca:c9:67:e3:69:d4:
         2c:b1:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org