Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203539393230.roa
File:                     326130373a353463313a363030303a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier:          J1LIqVqryKOEqgdfV6b2nFEysNWgq64NaC9lNdcOCoo=
Subject key identifier:   71:9B:E9:2E:86:16:83:85:7F:8D:EC:9E:EC:4C:95:AF:39:AE:53:AC
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       67709D6B02D637339C970C5AC6BA815C86752BF3
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:01:51 +0000
ROA not before:           Tue 19 Dec 2023 12:56:51 +0000
ROA not after:            Tue 17 Dec 2024 13:01:51 +0000
asID:                     59920
IP address blocks:        2a07:54c1:6000::/36 maxlen: 36
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:70:9d:6b:02:d6:37:33:9c:97:0c:5a:c6:ba:81:5c:86:75:2b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Dec 19 12:56:51 2023 GMT
            Not After : Dec 17 13:01:51 2024 GMT
        Subject: CN=719BE92E861683857F8DEC9EEC4C95AF39AE53AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:18:1d:21:a0:91:04:ff:9f:17:4a:84:42:30:
                    79:4c:c2:42:a1:20:3c:88:3b:37:97:f1:ef:bf:9e:
                    28:72:f9:ac:d2:15:4a:1a:79:89:0f:14:e8:de:b6:
                    77:42:6a:4d:19:1e:22:b2:39:6c:d4:39:9f:46:55:
                    7e:93:57:2e:2b:ff:00:8a:3c:a9:bd:f5:23:e8:5f:
                    b5:55:0e:b0:dc:a7:bb:5e:8b:6d:4e:12:95:1a:38:
                    61:9a:2a:65:67:28:fb:8b:1c:ed:d3:e7:34:2c:aa:
                    39:85:1f:b0:f7:08:89:e8:c0:70:0b:fa:f8:ae:7e:
                    72:7a:0f:6f:20:70:8c:70:7a:b5:cf:ad:2a:32:ad:
                    f5:e0:7c:76:85:28:ae:ad:8a:6d:80:2d:1f:9c:56:
                    27:80:aa:f4:17:d1:a1:b4:12:f4:96:60:2a:e0:0c:
                    00:ca:38:fc:b4:4c:2b:c3:27:85:3c:87:19:0c:28:
                    63:30:c9:7a:f1:c5:e5:4b:f2:cc:75:c8:a7:3f:b5:
                    f7:7f:7f:25:57:5d:e5:5f:12:d8:51:35:f2:e2:b8:
                    a4:cd:ec:f2:ab:e5:51:b2:e0:81:51:ce:c9:5c:eb:
                    43:bf:74:0d:1c:40:0f:f0:ff:1d:db:1a:50:c9:f8:
                    5b:14:49:19:71:0d:b7:7c:5d:08:b6:11:31:ee:bc:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:E9:2E:86:16:83:85:7F:8D:EC:9E:EC:4C:95:AF:39:AE:53:AC
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:61:5b:d9:69:ac:cf:b1:38:9b:38:f3:10:a2:94:11:f3:
         43:8e:ff:1b:03:38:95:de:97:47:70:0f:1a:20:53:cb:98:bf:
         45:0d:c0:ce:dd:cd:8d:df:34:7e:2c:e1:65:b4:e9:ac:ff:4f:
         3a:23:b7:70:bd:98:3f:0a:b8:f9:9a:ad:a5:ee:84:e6:f2:16:
         77:d6:8c:e7:56:fe:6b:16:a2:ce:f7:fc:39:a1:e7:9e:b7:2c:
         1a:df:8d:cf:65:be:05:41:01:0c:7d:9f:a2:51:48:99:15:69:
         38:b0:b7:33:af:d6:ab:0e:72:99:25:36:46:b7:fa:13:4e:73:
         f2:d4:f3:6e:6d:70:d9:df:f0:05:52:dd:a5:a1:c2:23:f8:9a:
         4a:2c:b0:4d:f0:b2:71:99:bd:ed:d4:53:76:8a:3a:84:30:24:
         f7:7a:e0:4b:1b:82:8e:b5:b3:4c:b5:38:ca:9e:f3:97:01:89:
         0e:9d:be:7b:ea:ba:f0:61:8f:29:2a:6a:cf:fd:a0:5e:d4:49:
         ee:52:0d:e8:76:ed:a6:d8:5c:b1:90:2b:09:76:60:db:82:8a:
         d1:8f:95:2e:58:0f:a6:12:0f:b1:93:99:4a:43:28:22:8b:db:
         ec:c3:5f:c0:d9:27:50:ba:38:0c:9f:95:3d:c8:41:ff:92:91:
         c2:43:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:29 2025 by rpki-client