Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
File:                     326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          r850O4e8J3WwRRNkYjyYw5L1s6SQbDU3Qpds80gsNy4=
Subject key identifier:   78:E6:44:17:F7:A5:5D:28:BE:D4:BA:61:67:91:F1:D9:32:AB:6A:11
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       389A2B68EA6CFD1454BC8CD3A11DA9D03E1D4CCB
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Fri 21 Apr 2023 11:46:59 +0000
ROA not before:           Fri 21 Apr 2023 11:41:59 +0000
ROA not after:            Fri 19 Apr 2024 11:46:59 +0000
asID:                     203635
IP address blocks:        2a0a:6040:60fd::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9a:2b:68:ea:6c:fd:14:54:bc:8c:d3:a1:1d:a9:d0:3e:1d:4c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 21 11:41:59 2023 GMT
            Not After : Apr 19 11:46:59 2024 GMT
        Subject: CN=78E64417F7A55D28BED4BA616791F1D932AB6A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:c2:0a:15:fd:0c:44:72:b2:2f:56:61:fa:
                    b8:29:31:fb:7b:b7:a5:e2:ff:2d:5b:dc:3d:95:ce:
                    94:51:97:15:2f:89:70:a9:c9:e2:ac:90:c4:29:88:
                    a4:81:8e:c0:ed:2f:70:b1:5b:06:25:82:4c:8e:5f:
                    e0:cb:4a:c8:ce:57:9b:75:a6:72:47:7b:96:3e:d9:
                    d2:74:a1:6e:74:18:0c:61:81:1d:5f:54:73:bc:89:
                    9e:a6:3e:43:86:69:99:a0:c7:ad:57:dd:f5:e7:f9:
                    ae:b4:e1:be:8f:d1:5e:b9:91:8d:43:a4:28:44:4f:
                    18:93:90:57:f1:f4:fa:d5:82:9c:b5:a2:1a:a4:5c:
                    9d:ca:89:44:7d:0c:2f:fe:50:38:9b:33:ee:19:71:
                    a3:73:78:a6:77:38:2e:6a:31:6b:1a:7c:eb:af:37:
                    5c:8e:05:b8:9d:64:15:3a:c5:af:9a:a5:b8:70:7a:
                    d2:4e:77:d0:42:e2:2f:e4:e2:1c:38:2d:23:5c:4f:
                    c2:cf:2b:ad:68:ff:1a:6f:f7:70:f7:d8:e8:bd:34:
                    c2:22:28:72:3f:ed:de:6d:6f:e3:39:9c:35:1b:5d:
                    79:62:da:92:9f:a5:94:a3:d1:fa:1d:06:63:d9:38:
                    f2:46:da:05:7a:5a:b7:6d:f6:e0:a5:02:fa:b8:79:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:44:17:F7:A5:5D:28:BE:D4:BA:61:67:91:F1:D9:32:AB:6A:11
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:60fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:57:8f:26:25:80:9c:ad:ca:83:98:ef:8f:eb:1e:dc:70:
         17:3e:9c:7c:58:ec:75:a4:24:8c:7f:c7:ae:50:8c:3c:f1:7a:
         d1:6a:26:1c:60:b2:49:26:c3:e3:99:b4:e5:80:51:ca:6b:ed:
         0a:3b:f1:aa:12:3f:f7:92:39:d8:4e:70:f6:be:b0:bc:e3:79:
         59:d5:36:91:70:16:03:3d:61:11:61:b8:f7:61:07:ba:46:bb:
         03:16:64:88:09:4d:ae:4f:a0:91:93:fa:5b:33:56:90:e3:47:
         3e:a6:c8:95:c1:7e:c1:b8:0c:62:8c:20:57:da:62:3d:fb:e9:
         a1:11:8d:a1:12:fd:92:b1:d0:62:fc:4d:8e:a4:0f:c3:3e:8a:
         bf:b1:fc:66:c2:f5:dc:0d:53:2b:74:98:1c:12:52:0a:fc:5c:
         f4:45:b7:de:92:30:48:60:2e:e2:89:1f:ef:0e:24:3b:80:04:
         86:51:b9:9e:66:30:e3:20:c0:52:d3:c0:35:a4:92:9c:35:f1:
         0b:5d:24:e2:ea:f8:22:1c:34:09:58:b0:11:35:00:14:cb:0d:
         7a:e3:0b:77:b5:32:26:8e:e3:88:0d:b1:52:2c:b9:a3:0b:c8:
         7c:15:04:36:01:d3:0a:b3:e0:60:cf:39:70:b3:22:db:9a:eb:
         2b:bc:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org