Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/2886DDDAD4F911EB8E866269F8AEA228.roa
File:                     2886DDDAD4F911EB8E866269F8AEA228.roa (raw, json)
Hash identifier:          DO8t5B4hhlg69rTAxnMvqPS/yruoreCVbL3MuBXmh6Q=
Subject key identifier:   45:DA:3D:7F:EF:97:D2:8C:55:51:2F:02:B0:C9:0B:18:0A:BE:78:E5
Certificate issuer:       /CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Certificate serial:       08
Authority key identifier: ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/2886DDDAD4F911EB8E866269F8AEA228.roa
Signing time:             Thu 24 Jun 2021 14:33:36 +0000
ROA not before:           Thu 24 Jun 2021 14:33:31 +0000
ROA not after:            Thu 22 Jun 2023 14:33:31 +0000
asID:                     36943
IP address blocks:        2c0f:fe90::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
        Validity
            Not Before: Jun 24 14:33:31 2021 GMT
            Not After : Jun 22 14:33:31 2023 GMT
        Subject: CN=60d497c0-76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:72:c2:61:b0:ad:0a:0f:9e:21:91:90:10:
                    de:0e:c9:d7:c9:90:58:27:d8:91:87:6d:43:df:29:
                    42:60:ea:bc:4f:af:43:5c:1d:3c:14:72:04:c3:1d:
                    dc:f3:ea:3a:2d:c5:31:a6:4c:9f:71:af:97:7b:95:
                    6f:62:2b:c1:80:ad:87:c3:17:f4:f9:65:e3:4e:03:
                    e9:90:bb:45:f8:1d:5f:7e:f0:66:73:de:8a:4a:45:
                    5a:79:08:7b:d2:65:f0:de:31:b8:44:43:5a:79:a1:
                    d2:4d:dc:61:83:39:f0:9a:72:91:f4:b0:20:db:a9:
                    f6:1a:6f:a8:15:68:9e:c8:8f:39:e0:8f:27:95:48:
                    92:13:63:70:af:cf:a9:4b:12:4e:0f:cd:da:46:d5:
                    1a:3d:1a:1c:56:e9:a2:f1:ec:c5:7c:e1:c7:93:72:
                    be:08:8c:6b:fb:c4:48:7a:66:a1:5f:c9:22:7a:0f:
                    a0:6b:af:42:b1:67:40:61:c8:b9:be:2e:d4:56:91:
                    7f:c4:4e:34:b0:e4:75:d9:69:c9:6d:6b:d1:1f:7c:
                    ab:ed:87:ec:a2:a1:ae:37:1c:30:41:e6:df:e1:be:
                    88:06:d3:60:26:b3:50:ba:0c:f4:32:5f:f0:f5:b3:
                    c8:33:b0:9a:19:53:a1:86:a1:e4:17:cf:34:5d:34:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:3D:7F:EF:97:D2:8C:55:51:2F:02:B0:C9:0B:18:0A:BE:78:E5
            X509v3 Authority Key Identifier:
                keyid:ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/7WycK99282JlWn4Ee5dtsrDQK-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/2886DDDAD4F911EB8E866269F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fe90::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:43:30:e3:6b:16:5c:fe:9a:1f:56:7b:9a:7d:d1:71:7c:
         f9:49:78:cb:7f:73:b0:d3:e7:dd:5a:43:ce:f4:78:5c:49:bd:
         5d:77:ba:8d:52:b1:ab:25:98:03:0b:8d:b3:35:26:83:f3:5a:
         9b:26:43:d2:03:2c:f4:3a:e7:cd:dd:22:fc:4a:c2:a8:80:79:
         18:e7:ba:86:0f:57:a6:0e:12:07:f9:e6:d6:66:3b:74:d9:71:
         0b:18:04:97:71:98:80:34:5d:cf:3a:99:fb:94:26:ec:bc:09:
         42:34:fe:2f:55:84:e7:c4:3a:3d:fa:5d:17:df:df:09:fe:f6:
         32:ef:c5:f4:07:12:66:b7:5d:fd:97:6b:3c:f2:83:5d:76:67:
         ce:b2:d6:9f:f1:5a:a4:d3:25:4a:cb:0b:be:8c:b8:41:ff:63:
         65:ad:9d:71:d2:bf:60:2c:81:3f:63:3e:b2:59:f6:63:b6:33:
         eb:c1:42:33:6d:dd:20:d0:c4:c5:c1:f3:c0:f8:60:6b:62:ca:
         4c:23:32:f0:ea:69:65:3b:62:84:43:1e:ae:86:c1:82:20:84:
         43:e3:60:47:41:45:0a:50:f5:9f:a0:0c:91:21:23:1b:e2:c0:
         b8:4d:10:2f:71:aa:6f:02:cf:37:51:f8:3b:c6:9c:75:80:01:
         c1:2a:05:41
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MUJFM0FGMTEwLwYDVQQFEyhFRDZDOUMyQkRGNzZGMzYyNjU1QTdFMDQ3Qjk3NkRC
MkIwRDAyQkVDMB4XDTIxMDYyNDE0MzMzMVoXDTIzMDYyMjE0MzMzMVowGDEWMBQG
A1UEAxMNNjBkNDk3YzAtNzZlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6CcsJhsK0KD54hkZAQ3g7J18mQWCfYkYdtQ98pQmDqvE+vQ1wdPBRyBMMd
3PPqOi3FMaZMn3Gvl3uVb2IrwYCth8MX9Pll404D6ZC7RfgdX37wZnPeikpFWnkI
e9Jl8N4xuERDWnmh0k3cYYM58JpykfSwINup9hpvqBVonsiPOeCPJ5VIkhNjcK/P
qUsSTg/N2kbVGj0aHFbpovHsxXzhx5NyvgiMa/vESHpmoV/JInoPoGuvQrFnQGHI
ub4u1FaRf8RONLDkddlpyW1r0R98q+2H7KKhrjccMEHm3+G+iAbTYCazULoM9DJf
8PWzyDOwmhlToYah5BfPNF00d4kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRF2j1/
75fSjFVRLwKwyQsYCr545TAfBgNVHSMEGDAWgBTtbJwr33bzYmVafgR7l22ysNAr
7DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTFCRTMvNDFBQ0ZEQjJEMzY5MTFFQkFDM0FFQTVCRjhBRUEyMjgvN1d5Y0s5
OTI4MkpsV240RWU1ZHRzckRRSy13LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvN1d5Y0s5OTI4MkpsV240RWU1ZHRzckRRSy13LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTFCRTMvNDFBQ0ZEQjJEMzY5MTFFQkFDM0FFQTVCRjhB
RUEyMjgvMjg4NkREREFENEY5MTFFQjhFODY2MjY5RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP/pAwDQYJKoZIhvcNAQEL
BQADggEBACb9QzDjaxZc/pofVnuafdFxfPlJeMt/c7DT591aQ870eFxJvV13uo1S
saslmAMLjbM1JoPzWpsmQ9IDLPQ6583dIvxKwqiAeRjnuoYPV6YOEgf55tZmO3TZ
cQsYBJdxmIA0Xc86mfuUJuy8CUI0/i9VhOfEOj36XRff3wn+9jLvxfQHEma3Xf2X
azzyg112Z86y1p/xWqTTJUrLC76MuEH/Y2WtnXHSv2AsgT9jPrJZ9mO2M+vBQjNt
3SDQxMXB88D4YGtiykwjMvDqaWU7YoRDHq6GwYIghEPjYEdBRQpQ9Z+gDJEhIxvi
wLhNEC9xqm8CzzdR+DvGnHWAAcEqBUE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org