Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/901C51AA532311EE90F1DE4B4AD9E6FC.roa
File:                     901C51AA532311EE90F1DE4B4AD9E6FC.roa (raw, json)
Hash identifier:          ooKr3JVNcIqxZd1Qp4o9CH9aQitfLqmAUrC1Nh4c3xs=
Subject key identifier:   1E:CA:A9:85:97:43:D0:C9:21:99:99:DB:72:FE:49:F4:DF:17:F6:C4
Certificate issuer:       /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial:       0C
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/901C51AA532311EE90F1DE4B4AD9E6FC.roa
Signing time:             Thu 14 Sep 2023 17:24:30 +0000
ROA not before:           Thu 14 Sep 2023 17:24:27 +0000
ROA not after:            Sat 14 Oct 2023 17:24:27 +0000
asID:                     37672
IP address blocks:        41.216.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
        Validity
            Not Before: Sep 14 17:24:27 2023 GMT
            Not After : Oct 14 17:24:27 2023 GMT
        Subject: CN=650341ce-2634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:c0:47:91:d5:db:0c:9f:5d:19:81:bb:01:
                    21:7f:66:eb:96:34:a3:c8:2f:a9:8d:7b:db:d2:56:
                    fc:d7:98:bf:21:65:3c:df:64:de:6f:0f:ca:f3:e5:
                    14:d9:56:f2:e6:da:1b:4c:d7:50:04:bc:be:fe:ab:
                    b9:9c:df:7b:ef:d4:e9:f1:93:48:84:51:e2:66:97:
                    a1:4b:7e:f8:73:3d:00:7a:bf:ad:90:5d:d1:5e:07:
                    90:42:ad:c9:cc:14:c6:7c:0f:04:cd:a6:65:90:d8:
                    d4:85:7a:b8:4d:72:b3:fa:2b:d2:0f:58:1b:14:10:
                    4b:d1:18:64:5d:a9:d8:eb:21:09:1a:cf:81:3d:25:
                    02:fe:dd:c0:7e:a5:fe:e5:d4:a1:cc:be:4a:7e:f0:
                    08:de:b9:c3:55:0b:17:50:ac:5f:e2:f3:42:b7:d1:
                    b6:be:63:26:76:66:f9:69:2c:9c:57:c6:4f:cf:a6:
                    67:b4:3e:4c:3b:f1:30:69:6c:88:38:e8:65:0f:44:
                    be:bf:a3:0e:6d:1e:e6:7c:cd:0b:00:f7:4d:80:b3:
                    7d:9b:4f:87:e7:84:25:3f:dc:c1:a7:03:bd:fb:6d:
                    4d:d4:f5:17:13:21:f9:45:ca:82:16:c7:14:67:da:
                    8a:75:0e:bc:0b:c5:98:bb:53:8a:20:f3:ba:0a:f5:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:A9:85:97:43:D0:C9:21:99:99:DB:72:FE:49:F4:DF:17:F6:C4
            X509v3 Authority Key Identifier:
                keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/901C51AA532311EE90F1DE4B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:a4:31:8c:b7:66:9e:28:94:1e:18:8a:ff:0c:5d:07:9b:
         de:1e:95:23:5f:d3:32:20:d6:05:63:5b:61:88:37:11:c0:8e:
         93:58:9e:d3:ae:c1:35:c0:6b:6a:39:37:9d:94:08:2c:10:49:
         8a:ca:ee:52:64:5b:fe:0e:c0:1d:ff:84:fe:8c:0b:34:08:aa:
         df:2c:e6:a4:0d:17:1e:0b:f1:24:a9:50:b0:7b:43:54:0b:ed:
         22:91:cd:6c:0a:a4:2e:74:32:a3:36:f4:f1:e6:54:8e:90:76:
         91:51:fa:f2:ea:f5:20:f5:4f:d1:eb:41:00:a4:a6:fb:3d:d6:
         c1:e9:db:cb:d0:f1:f9:d5:f8:da:62:bc:0f:09:96:b1:b5:8b:
         f3:e3:11:a5:41:bb:87:67:58:8e:81:7e:e1:7e:ed:ca:6a:92:
         88:3f:36:80:92:8f:0f:ac:2d:c8:c3:5d:47:6d:1e:1a:8f:c3:
         d3:dd:ed:d2:79:1e:e4:6e:8c:ff:5c:90:80:b5:cb:fc:e4:50:
         68:41:47:1c:de:c3:61:49:91:2b:57:3b:dd:29:0d:03:af:25:
         a6:76:59:d4:0c:c1:0e:b4:fa:9c:81:65:9d:13:53:eb:7f:a6:
         56:9b:84:7d:7b:e0:75:84:8b:8d:fe:a6:15:b0:54:69:d7:ec:
         64:00:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org