Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363034303a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a363034303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          soB4zKkhh9h+vVBhqccm+Rt4+TrHalNEdh14cuP6OsY=
Subject key identifier:   C0:0F:71:C1:9B:BF:ED:6E:7F:E1:CB:07:90:B9:BB:FB:60:17:81:1F
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       5F8D1734A15CB719E19E756FDDBE4797879CB5C9
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363034303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sun 23 Apr 2023 13:49:17 +0000
ROA not before:           Sun 23 Apr 2023 13:44:17 +0000
ROA not after:            Sun 21 Apr 2024 13:49:17 +0000
asID:                     50224
IP address blocks:        2a0a:6040:6040::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:17:34:a1:5c:b7:19:e1:9e:75:6f:dd:be:47:97:87:9c:b5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 23 13:44:17 2023 GMT
            Not After : Apr 21 13:49:17 2024 GMT
        Subject: CN=C00F71C19BBFED6E7FE1CB0790B9BBFB6017811F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:e7:73:bf:86:89:5b:40:9f:dc:1e:35:c6:
                    1d:fb:9d:01:ad:6b:bb:71:29:2a:d1:3b:54:a4:b1:
                    c9:63:f3:0c:98:3c:1f:d5:8a:71:f0:6d:b0:07:47:
                    09:f6:9b:b6:1f:b4:88:b7:1a:43:37:83:d8:f2:b2:
                    6d:c7:84:33:f7:84:43:3b:bd:f5:51:9e:8c:17:28:
                    00:22:5c:81:d7:b3:0d:02:70:0d:87:95:e4:e8:30:
                    4f:32:22:ba:33:db:ea:c3:3f:b5:dd:63:f4:2b:b3:
                    2d:a7:1c:8d:1d:c3:55:4d:17:bb:c5:fc:af:51:d5:
                    af:b5:c3:57:25:06:f8:bd:1a:8d:60:08:d3:c4:8b:
                    e9:e4:58:e0:08:6e:23:d6:89:e8:ec:11:08:76:cb:
                    5d:dd:1d:55:cf:9e:a0:ba:b9:98:82:18:ea:3f:71:
                    f2:c0:29:68:47:26:2c:38:63:61:e5:42:bd:45:cb:
                    fe:a0:d5:a8:9c:50:a2:b2:db:50:08:bb:5d:ac:e3:
                    88:4a:21:70:7a:18:08:cd:0d:a2:42:63:ac:54:55:
                    54:6a:53:cb:03:d3:bd:97:a9:65:41:90:55:96:95:
                    1c:45:e8:b2:9d:b1:55:7e:1f:d5:b2:43:ac:49:42:
                    c5:5f:3b:31:8b:b6:8a:a3:9d:67:fb:6f:e8:65:c8:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:71:C1:9B:BF:ED:6E:7F:E1:CB:07:90:B9:BB:FB:60:17:81:1F
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363034303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:91:89:bf:4f:46:21:d0:5f:43:43:73:44:88:4f:8b:4e:
         29:0e:fe:32:b4:e5:59:b2:90:80:bf:33:11:43:9f:46:50:aa:
         5b:b5:a6:20:5c:e0:da:70:45:e6:cc:28:0d:2b:9b:c6:7a:b9:
         fc:a9:70:50:5c:29:b5:93:13:53:ca:ad:47:be:56:d3:b2:5f:
         80:22:d0:27:d6:2a:ea:78:9d:18:f1:a4:43:37:c8:98:89:b7:
         07:28:cc:02:77:55:de:ac:89:0e:6e:24:fb:21:17:a2:e0:99:
         97:8f:95:c8:35:9d:8a:6d:3c:b9:84:8e:35:2e:f8:fc:d7:9e:
         4c:46:14:41:42:aa:a1:db:c0:65:11:45:7b:01:17:57:1e:dc:
         7e:d0:2b:36:1a:14:87:ea:8e:dc:dd:f7:fd:4c:48:2a:38:7f:
         71:b9:75:13:a0:45:20:b7:c1:80:a5:bb:ce:ff:80:88:c4:45:
         5a:4a:cf:be:f0:99:2c:f6:44:18:66:96:0b:16:2e:e6:e8:50:
         ae:37:92:20:5d:81:4b:73:54:86:ea:c0:d0:b8:48:31:f8:4c:
         0f:5f:27:f5:f7:50:58:d7:a3:21:25:f1:76:c3:bc:cb:1a:82:
         52:ba:d3:eb:50:67:99:a9:38:9a:a6:a3:97:41:b0:31:11:e9:
         64:01:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org