Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2150990A2CC611ECA1001A00D8A014CE.roa
File:                     2150990A2CC611ECA1001A00D8A014CE.roa (raw, json)
Hash identifier:          zA/CvhIWwZS1yHhOzH2IJDEKs3HCs/dbKm72iiC25t8=
Subject key identifier:   59:2D:A0:65:74:BE:11:A8:4A:2F:B7:4C:48:B0:F4:CA:E6:5F:E9:DF
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       011A
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2150990A2CC611ECA1001A00D8A014CE.roa
Signing time:             Thu 14 Oct 2021 08:10:02 +0000
ROA not before:           Thu 14 Oct 2021 08:09:58 +0000
ROA not after:            Fri 14 Oct 2022 08:09:58 +0000
asID:                     328227
IP address blocks:        156.0.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Oct 14 08:09:58 2021 GMT
            Not After : Oct 14 08:09:58 2022 GMT
        Subject: CN=6167e5da-8ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:f5:8c:10:78:ff:7c:de:89:fa:09:bc:6d:
                    ac:72:d2:a1:36:6d:c6:25:ee:ce:9e:a6:ee:e4:8f:
                    f3:52:31:3f:ca:76:23:d7:d7:ea:de:9f:95:9c:c2:
                    f2:91:af:e3:eb:7b:5d:33:94:0b:17:59:74:12:ce:
                    8a:a3:a3:6d:91:08:24:6c:6c:32:28:c0:93:9e:20:
                    72:c4:68:47:af:53:60:2b:33:10:18:61:13:b8:2e:
                    13:1e:7e:27:9a:29:4f:57:17:df:8e:87:08:81:e8:
                    62:c7:9f:f9:4c:24:c7:8b:fc:bd:07:03:44:b0:89:
                    f9:90:90:50:9c:3b:e4:60:80:64:b2:e1:bf:05:bf:
                    0c:b5:4a:e7:52:4b:78:db:b2:74:13:75:98:f2:ce:
                    78:77:46:bb:41:98:6a:bd:48:3d:47:a1:a1:26:7d:
                    c1:db:2d:52:14:a4:17:27:21:87:55:ef:41:26:f6:
                    b8:a5:d1:ba:29:a8:e9:ad:a0:c6:55:be:c3:41:1f:
                    83:bd:5d:cb:ac:5a:1b:0d:1d:6f:72:d7:9f:6f:a0:
                    ff:25:06:69:99:c9:69:2d:cb:f8:6b:45:83:ac:65:
                    e8:b7:2b:86:46:20:88:6d:07:db:62:13:09:bd:ae:
                    9b:83:b6:cb:fa:70:45:e9:39:2d:12:1b:08:94:60:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:A0:65:74:BE:11:A8:4A:2F:B7:4C:48:B0:F4:CA:E6:5F:E9:DF
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2150990A2CC611ECA1001A00D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:86:0f:e8:8e:0d:45:0d:d4:01:55:c1:c5:45:a5:bd:d8:2c:
         2b:68:08:b3:02:f7:18:d3:63:8d:09:b2:d0:1c:19:38:a7:80:
         23:cd:96:26:c9:b3:5e:7f:f1:32:c9:48:bd:29:cb:fd:e4:52:
         1f:fe:69:f8:60:6a:64:2f:8c:72:d2:d1:19:19:5d:88:bb:0b:
         00:e3:11:51:33:0e:41:08:b0:c4:47:fe:5a:09:60:10:52:37:
         7a:54:6f:97:2f:c2:3d:c2:23:af:7f:dd:59:75:47:c2:13:89:
         61:33:42:1b:a1:39:ac:a8:d2:8c:cd:cf:c7:24:68:08:ad:99:
         5f:de:0c:22:79:43:51:40:eb:23:a3:c5:c0:8e:b6:c2:9b:b1:
         5b:34:22:24:ab:3e:00:21:c2:ce:1a:7f:73:c9:24:0b:87:4b:
         91:2e:03:ab:14:4c:ea:51:d0:9c:7d:45:65:39:46:c6:29:a8:
         ac:b9:dd:6b:76:4d:51:27:5c:64:3b:9a:ab:eb:94:73:6d:c9:
         f6:60:77:87:ad:55:5a:9d:9a:a5:86:ac:67:d7:a0:d6:84:21:
         37:90:e3:02:d4:72:76:a1:fc:a0:ca:8d:03:02:3a:97:06:5b:
         82:ce:2e:50:9a:d2:d0:b8:70:2f:61:aa:e9:4e:02:2d:05:2a:
         56:ad:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org