Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/8279BD26E0D211E8A05F7220F8AEA228.roa
File:                     8279BD26E0D211E8A05F7220F8AEA228.roa (raw, json)
Hash identifier:          9qd4rHmG/otGoxfFkIpDSJ+xnE9OxA9N8zvyQma7KZ8=
Subject key identifier:   6A:9C:4F:CA:DB:F1:9F:D0:56:6C:D0:87:56:9B:BA:0C:EA:36:A0:E7
Certificate issuer:       /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial:       06
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/8279BD26E0D211E8A05F7220F8AEA228.roa
Signing time:             Mon 05 Nov 2018 08:12:18 +0000
ROA not before:           Mon 05 Nov 2018 08:12:12 +0000
ROA not after:            Sat 31 Dec 2022 08:12:12 +0000
asID:                     36915
IP address blocks:        41.207.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
        Validity
            Not Before: Nov  5 08:12:12 2018 GMT
            Not After : Dec 31 08:12:12 2022 GMT
        Subject: CN=5bdffb62-b862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:36:c4:d0:5e:79:1c:4b:f1:ac:97:23:d1:
                    a2:9d:35:6a:75:51:b0:7c:48:49:ec:50:db:b7:82:
                    80:62:3c:93:f2:0c:92:d2:da:9d:4b:38:61:09:58:
                    93:b2:49:9f:79:f3:dd:f3:7d:bd:55:8e:bd:05:f5:
                    4f:f4:8d:a7:17:bd:7c:b5:18:cc:73:61:8e:2b:3b:
                    4b:ec:04:85:25:a7:af:09:e0:a6:90:b1:a9:9d:ea:
                    45:06:66:07:4a:76:1b:dc:a3:ca:0b:fb:59:4d:65:
                    91:be:75:3a:00:24:5b:1c:97:83:63:45:06:cd:cf:
                    99:e9:f7:b9:e0:5a:e0:4c:5e:86:e5:2c:65:96:a3:
                    7b:46:cb:17:f6:1a:41:85:4a:80:04:c2:ac:d9:81:
                    a9:8a:51:fa:fc:ef:8a:3e:05:ce:d4:23:f3:76:16:
                    ef:59:d4:43:a8:43:3b:52:bf:46:e7:1f:c1:b7:23:
                    31:6e:a2:64:7e:4a:1e:09:8f:c1:77:34:b3:4d:03:
                    d9:70:bb:8d:76:4c:77:e9:40:71:96:4b:ad:12:d2:
                    75:fb:65:ec:03:23:32:64:26:02:50:91:c0:a3:3a:
                    ca:91:ed:f8:c2:68:92:c8:47:97:1c:06:9c:a6:d4:
                    7b:07:0f:27:5f:65:92:9f:fc:f5:6e:2f:7e:83:cb:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:4F:CA:DB:F1:9F:D0:56:6C:D0:87:56:9B:BA:0C:EA:36:A0:E7
            X509v3 Authority Key Identifier:
                keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/8279BD26E0D211E8A05F7220F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:65:7c:df:06:a8:19:b3:d7:11:bd:99:73:7d:3f:ca:60:8c:
         57:a9:f7:e6:a7:7b:da:6f:99:78:04:c9:e3:bb:ff:bc:2a:81:
         37:da:57:42:25:f9:56:f1:bf:85:96:4e:51:f0:b4:bd:7c:b6:
         07:db:74:2a:88:3b:bf:bc:80:a5:19:ce:53:10:87:cc:1b:72:
         0b:03:14:3b:c8:99:15:96:c4:ae:88:f9:36:b4:54:af:b0:73:
         0d:e1:5b:02:c0:ff:97:ab:bc:1e:2d:95:ee:05:6f:0c:98:f5:
         c0:6b:d4:4a:ec:58:da:16:00:31:9d:4b:cc:25:7a:5c:92:cd:
         23:60:c7:ce:4e:61:10:53:8b:1a:70:19:ef:ea:8a:6e:64:9a:
         18:20:ba:ea:5c:7d:b6:46:03:85:90:da:57:30:2a:29:d7:a2:
         33:9b:06:09:2b:3a:ce:b0:34:b3:59:18:1c:d4:27:bf:dc:82:
         cc:03:6e:e2:3c:14:02:b2:8b:b8:f0:88:9d:27:e8:b6:44:a6:
         06:86:2f:fb:81:6b:80:a8:93:3d:17:20:46:22:32:ad:f6:e8:
         45:46:fc:b6:13:69:35:b9:0a:4c:b7:8f:ec:19:b9:33:e6:1e:
         6b:9a:28:57:b5:b1:b0:17:b2:f8:c3:cd:24:bd:13:9f:49:cd:
         c2:79:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org