Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
File:                     84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa (raw, json)
Hash identifier:          lV7hz27+4oGzV1vLaumyOEWVSBLHdgnR+iOyUAlRJdA=
Subject key identifier:   AC:3F:30:60:75:41:EC:45:5A:36:18:39:00:A5:F3:5B:E2:58:F7:D9
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       0D
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
Signing time:             Thu 30 Sep 2021 08:43:43 +0000
ROA not before:           Thu 30 Sep 2021 08:43:40 +0000
ROA not after:            Sat 30 Sep 2023 08:43:40 +0000
asID:                     328327
IP address blocks:        102.140.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 08:43:40 2021 GMT
            Not After : Sep 30 08:43:40 2023 GMT
        Subject: CN=615578bf-239e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:b5:4a:62:79:0e:af:27:fe:d6:43:c8:9d:
                    39:8e:cd:ee:86:96:d1:73:2a:d8:17:8c:28:3d:8e:
                    81:e4:af:69:6a:4c:95:94:53:97:9d:b7:17:c2:a1:
                    af:e2:b4:7c:ae:62:8c:26:92:c3:c3:62:24:1f:e4:
                    36:2a:d0:10:7a:f9:75:a9:d1:f7:0f:3b:25:ed:9c:
                    88:72:94:5a:81:87:d5:27:76:40:15:c4:3c:3a:45:
                    98:d2:19:46:a1:74:b0:a3:49:de:f6:ec:4f:13:0f:
                    06:8a:92:df:b8:ac:cd:e4:eb:80:88:d2:8d:15:b7:
                    82:c6:79:61:d2:d9:81:44:f5:86:77:7a:d1:9e:01:
                    03:39:81:b4:3b:24:4a:dd:db:53:03:03:8c:a0:d7:
                    e6:e9:5a:23:38:7b:e0:71:54:41:c6:f4:78:9b:3f:
                    ad:9a:4c:50:2b:d6:7d:ab:4e:28:63:b7:b6:5e:cd:
                    05:59:86:3a:fa:34:ec:f6:db:9c:6e:62:56:03:78:
                    79:44:63:a6:a7:bc:e4:72:97:62:8f:0e:2e:25:1e:
                    b3:53:3f:57:7f:aa:03:2a:1e:f6:1b:16:15:17:ce:
                    e7:74:26:99:33:10:1d:a4:d6:9f:8d:38:fd:02:41:
                    73:47:95:05:7e:84:b5:74:31:2c:f3:03:2b:48:a4:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:30:60:75:41:EC:45:5A:36:18:39:00:A5:F3:5B:E2:58:F7:D9
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:3b:f7:46:88:97:7e:8d:8f:4f:2d:26:5e:34:bb:f0:4a:
         1e:ee:6b:f0:3c:5d:4d:d2:65:63:56:c5:64:29:38:f0:7e:bb:
         e1:6f:fe:40:02:c8:2f:dd:89:ea:b3:87:5e:25:af:48:a9:83:
         89:94:bd:54:06:d7:7a:de:b3:96:ba:4d:bb:1d:c8:4c:74:23:
         ff:71:d3:49:3c:25:33:32:51:6a:d7:d9:00:e3:9c:46:9f:6b:
         c0:bb:3b:1f:34:9e:88:3c:61:a4:5d:8d:d9:78:b8:a7:75:ed:
         22:63:36:60:9b:af:d4:61:5a:9b:03:e1:13:03:62:14:2c:04:
         f0:44:31:a7:d9:54:12:3d:18:11:2d:88:38:fc:5a:3d:43:be:
         25:86:b7:44:3e:3e:31:0b:05:65:22:88:a9:ba:87:d8:20:d1:
         13:e7:e7:e7:85:86:c7:39:a9:a1:12:c9:d8:ad:ce:a8:9f:d6:
         be:22:8a:1d:4c:f1:a9:f1:ab:41:ce:d2:f6:9b:51:48:de:35:
         57:ce:c3:35:ef:59:bd:64:77:3a:5e:f2:2c:1a:da:69:85:cb:
         57:8c:b9:5e:3f:a7:1f:5f:6c:50:81:6e:c3:fb:15:0f:33:d1:
         66:5d:a6:df:50:b1:49:80:f0:ef:50:5d:bd:8f:f0:9c:40:1a:
         fd:59:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org