Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
File:                     4847ABD2CA2911ED80934498F1222468.roa (raw, json)
Hash identifier:          nNL86OT9b+HJ48R4J42OBGnX4oceTZrCL0ZorHMUv1M=
Subject key identifier:   C8:2F:0F:B0:BB:3C:AC:18:98:F6:40:D0:B1:30:E2:67:66:D3:D2:5D
Certificate issuer:       /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial:       02
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
Signing time:             Fri 24 Mar 2023 09:50:17 +0000
ROA not before:           Fri 24 Mar 2023 09:50:13 +0000
ROA not after:            Sun 24 Mar 2024 09:50:13 +0000
asID:                     327906
IP address blocks:        102.217.144.0/22 maxlen: 24
                          2c0f:f008::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Validity
            Not Before: Mar 24 09:50:13 2023 GMT
            Not After : Mar 24 09:50:13 2024 GMT
        Subject: CN=641d7259-d2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:96:59:71:54:f7:a8:d7:9b:b6:e8:2b:65:c8:
                    1c:05:f6:03:85:e6:f0:8a:c1:22:2f:60:25:21:68:
                    1f:3a:48:48:60:70:aa:0d:6c:06:6f:35:6f:cc:4f:
                    87:81:06:7f:8e:76:48:18:e8:42:e1:da:49:e4:72:
                    92:ad:0f:78:33:e5:44:76:2e:4d:9a:e6:9c:77:df:
                    69:ac:a3:c4:d5:8e:3a:32:5e:8f:e4:59:dc:6a:8a:
                    42:a2:d6:ff:11:6c:f2:f9:8c:23:a7:39:1b:89:45:
                    2a:14:33:33:18:9e:8c:7d:a2:bf:46:d7:a3:66:58:
                    db:3a:99:98:88:68:66:9f:04:08:52:e0:98:33:64:
                    d5:76:65:54:3b:93:b2:fb:c4:35:2a:4d:17:b9:1d:
                    cd:ed:4d:a0:30:ba:2c:86:c8:24:c6:6a:b5:73:19:
                    be:99:00:56:ee:b3:36:d1:15:25:a6:b3:b3:b7:21:
                    ed:d4:8b:9a:86:50:5a:5c:b6:a1:51:29:c2:2b:23:
                    5f:aa:a7:42:0b:45:af:71:3a:a3:2e:8b:d3:88:12:
                    bd:e7:93:9a:49:86:86:90:16:ea:82:fa:00:c7:a6:
                    51:77:55:26:40:85:3c:cb:1f:aa:43:97:07:48:8c:
                    c9:bd:de:6b:47:18:a8:02:1d:78:90:1a:f4:62:79:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:0F:B0:BB:3C:AC:18:98:F6:40:D0:B1:30:E2:67:66:D3:D2:5D
            X509v3 Authority Key Identifier:
                keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.144.0/22
                IPv6:
                  2c0f:f008::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:ed:02:ac:75:07:a8:fb:a6:96:c1:ce:9e:b1:36:61:48:
         09:47:3c:b1:d9:46:1c:79:bf:67:9c:f8:ee:a4:07:7d:ef:da:
         ff:d0:d3:a7:3d:cf:97:04:71:63:f8:65:0b:66:24:bd:a8:42:
         c9:eb:d7:f9:ea:41:39:d3:1b:95:33:d4:2a:aa:16:7e:b3:5f:
         9d:4a:a2:45:1e:06:2a:50:8a:9f:fc:18:c8:74:d7:ef:b5:2d:
         3d:ae:4c:59:11:52:6f:18:ca:d9:54:1b:35:af:b2:89:bd:60:
         56:b3:7b:81:f8:0b:fd:f3:b5:fc:79:52:0e:21:0c:08:4c:30:
         10:e4:4f:a9:0f:c1:a3:d6:32:0f:b4:10:07:9d:17:d9:0b:ff:
         69:cb:70:ae:c5:fc:5e:f3:af:1d:67:aa:35:c7:62:57:80:d0:
         1a:37:04:d7:ab:69:d2:62:ce:e9:e7:1e:1e:e8:53:05:fe:4f:
         15:65:7a:18:c8:5f:3e:34:6a:4e:77:bf:f6:32:04:60:5b:fb:
         0e:ac:84:6c:42:b4:b3:0e:6d:f0:2e:9d:9c:bc:23:dc:c4:12:
         38:c5:72:80:c2:0b:40:99:be:05:9a:9a:39:8a:84:64:09:0f:
         d4:d6:da:2f:4a:d5:b3:80:bd:b4:bf:cf:35:3d:a3:e6:cc:18:
         f4:be:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org