Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/178A59AAF27611EA80582971F8AEA228.roa
File:                     178A59AAF27611EA80582971F8AEA228.roa (raw, json)
Hash identifier:          YEseV+Myrt4yr0w8Mrh6FNgP1r9CMXASxliTHalqcoA=
Subject key identifier:   0E:A1:17:1E:46:BF:46:6F:2D:2D:DE:DC:59:A7:33:8E:98:23:B4:CD
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0247
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/178A59AAF27611EA80582971F8AEA228.roa
Signing time:             Wed 09 Sep 2020 08:26:01 +0000
ROA not before:           Wed 09 Sep 2020 08:25:54 +0000
ROA not after:            Fri 09 Sep 2022 08:25:54 +0000
asID:                     61317
IP address blocks:        102.165.11.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  9 08:25:54 2020 GMT
            Not After : Sep  9 08:25:54 2022 GMT
        Subject: CN=5f589199-de81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:2d:fe:fc:44:36:d8:63:75:24:60:e9:f7:
                    11:fd:6f:27:7c:a9:51:9f:54:98:84:1b:c0:f1:93:
                    39:01:49:38:66:39:87:71:15:41:39:b1:e2:97:bd:
                    ca:da:53:b9:27:ff:ee:19:cb:b8:73:9d:ad:e3:23:
                    a5:75:25:c5:b1:6b:fd:85:8f:db:62:c5:22:e3:cb:
                    4f:90:46:48:13:dd:2c:c8:0c:c4:b1:08:9d:f6:56:
                    58:e0:f9:7d:3f:b4:30:b6:db:9b:f4:d1:53:3f:6f:
                    4f:8d:ee:74:1e:62:13:6b:f8:13:10:f9:f8:3e:e0:
                    ad:63:f8:a9:38:69:77:fc:f7:55:78:0f:8c:99:b5:
                    08:95:6f:9c:e8:d2:03:24:62:05:02:d8:77:f9:aa:
                    10:22:ec:8a:5d:e2:c3:be:3b:38:05:1d:0a:a9:d1:
                    98:88:24:77:5a:aa:c6:5e:8a:a2:4e:eb:d1:74:f1:
                    98:52:e6:f7:4b:33:01:33:dd:9b:63:36:21:ca:7b:
                    c8:21:e2:04:2d:e7:42:95:24:37:e9:f3:83:11:e5:
                    cd:6d:a2:0e:c6:dd:a3:99:7a:02:19:2c:73:e2:b3:
                    c4:5d:e6:94:7b:15:fe:d0:7e:1c:27:23:0f:48:bf:
                    c1:21:db:ce:49:2f:29:2a:5d:c2:17:8b:b5:a8:1a:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:17:1E:46:BF:46:6F:2D:2D:DE:DC:59:A7:33:8E:98:23:B4:CD
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/178A59AAF27611EA80582971F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:dd:97:5c:a7:b0:56:13:6e:7a:43:17:c8:0e:64:5c:c5:
         90:a1:bf:09:0f:7f:41:b9:e2:c8:5f:3f:c8:63:46:89:9e:c6:
         43:9a:d3:5e:27:52:a0:a9:02:f7:2e:4d:8d:87:08:e0:5b:3c:
         4a:4e:93:cc:47:b6:6f:7b:51:f7:2d:a5:64:bf:3c:50:f1:11:
         9d:5e:f4:41:89:1e:7b:ea:9a:bb:71:e3:cd:f8:08:ad:2c:84:
         1c:8e:d8:be:07:97:d1:48:94:68:a7:c8:15:35:00:58:29:2b:
         0d:3a:32:b2:d0:f3:15:a4:d5:ab:84:60:be:68:07:64:8b:3b:
         41:4f:78:2b:b1:64:42:c1:58:c7:1f:a4:39:5b:e8:fb:f8:ba:
         73:36:3a:19:c3:7b:c8:f0:8f:25:0e:2c:d8:44:e0:17:2a:cb:
         68:98:e2:b5:ab:21:63:b1:9b:40:79:d6:39:6a:16:5f:73:cb:
         33:36:3c:c8:6b:cc:03:68:b0:49:40:79:7b:81:e6:fd:d0:8e:
         82:b0:bb:1c:5d:30:1c:af:84:9b:12:dd:43:c9:8b:ae:2a:61:
         14:90:56:7c:e3:a1:26:a4:b2:42:0d:51:31:7d:39:17:57:df:
         82:3c:09:17:f6:38:3a:4a:53:33:a4:2a:90:95:1b:97:a0:01:
         62:b7:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org