Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/6E520064BFD711EC8E0506D65A40D577.roa
File:                     6E520064BFD711EC8E0506D65A40D577.roa (raw, json)
Hash identifier:          NdGvOCdc4leZLFxsrwsMGb28vcfBOcALO/etp65BHWU=
Subject key identifier:   4A:B4:10:59:29:54:0C:A1:EF:43:30:E8:37:7F:89:05:98:2D:22:91
Certificate issuer:       /CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Certificate serial:       0141
Authority key identifier: ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/6E520064BFD711EC8E0506D65A40D577.roa
Signing time:             Tue 19 Apr 2022 11:54:13 +0000
ROA not before:           Tue 19 Apr 2022 11:54:09 +0000
ROA not after:            Fri 19 Apr 2024 11:54:09 +0000
asID:                     36943
IP address blocks:        41.185.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
        Validity
            Not Before: Apr 19 11:54:09 2022 GMT
            Not After : Apr 19 11:54:09 2024 GMT
        Subject: CN=625ea2e5-fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:7e:bf:e6:b2:86:41:90:4e:6b:c8:63:5b:
                    d1:d5:42:8e:3e:5f:07:f1:6a:05:0b:be:72:b3:79:
                    1e:8b:24:93:be:69:c4:fd:82:8a:f3:89:1d:2c:9a:
                    b1:02:56:fd:ab:23:ba:48:da:40:af:be:d2:6e:a3:
                    f6:89:40:d8:62:20:39:8a:b3:6a:a7:51:99:63:19:
                    64:b1:45:d9:d9:a4:bc:8f:93:87:98:bb:17:36:b8:
                    5a:82:d2:68:fa:0e:17:82:22:4b:09:50:39:49:97:
                    4f:a3:7c:53:f1:3b:ab:00:64:44:96:c2:3c:11:e4:
                    b5:10:ba:5f:86:a0:c9:42:fb:56:04:3c:ed:41:5a:
                    ea:f7:7a:ca:71:6b:51:cf:1e:0b:8d:c5:36:05:d3:
                    a1:ab:41:0e:6a:57:8e:df:f3:9b:e7:28:39:ce:42:
                    b0:8e:2f:78:5d:a1:1f:56:2f:3a:b9:9e:30:6c:f3:
                    2c:41:b2:b9:52:81:6b:95:d9:30:1b:9f:a9:3b:99:
                    f4:34:d3:d3:b0:a2:ed:44:a2:4b:fb:75:9e:a4:3b:
                    ee:0b:f2:f2:fd:d9:eb:d7:e9:19:ac:6d:21:e2:48:
                    f9:f1:54:e9:50:73:a7:d2:1a:6f:cd:a8:b0:ab:bc:
                    ca:a4:a8:e3:7d:74:ac:87:e7:e1:66:1b:ec:b4:38:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:10:59:29:54:0C:A1:EF:43:30:E8:37:7F:89:05:98:2D:22:91
            X509v3 Authority Key Identifier:
                keyid:ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/7WycK99282JlWn4Ee5dtsrDQK-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/6E520064BFD711EC8E0506D65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.185.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:c5:7b:1f:e2:78:9b:13:cc:a3:30:99:df:43:79:bc:d6:
         c4:63:98:f5:3b:88:c1:94:e1:b9:95:b0:d4:4a:c2:ac:01:b0:
         7f:33:cd:19:8a:f2:0c:35:de:aa:8f:bb:5a:ff:b0:f7:f4:49:
         a2:69:3d:8c:f9:ed:39:4d:20:db:26:66:d2:3b:18:6e:93:33:
         56:2a:26:f6:bc:5c:61:9a:01:db:1c:24:49:74:38:4e:0a:ac:
         68:3c:e6:23:33:f7:ca:19:c2:3b:45:54:42:88:06:e9:97:24:
         00:a1:02:5c:cf:2b:fd:21:77:0f:d9:1f:60:69:5c:3e:12:59:
         b4:20:0d:a0:83:ea:03:5c:73:7d:dc:3b:10:a4:3d:4c:17:ad:
         65:dc:3b:db:af:9d:d9:83:9e:4a:42:75:3f:8c:1d:97:f8:a5:
         87:42:eb:22:04:a7:6c:73:5e:3e:b9:b3:b1:ee:4d:e7:5c:4d:
         ae:93:71:4f:a1:40:3b:ee:f3:89:fd:b8:39:24:8e:23:cf:b3:
         1d:48:30:c1:7a:91:27:f6:1e:ff:cc:61:96:81:3e:26:12:1d:
         e2:75:a6:0f:b2:b7:7d:0c:93:78:e1:a7:a0:d6:bc:e2:f4:8b:
         4c:5f:d6:1c:3b:ea:d1:c7:71:c2:2f:9d:c5:53:76:d0:74:4a:
         13:77:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org