Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/553E1E48962C11ECB80BB2E75A40D577.roa
File:                     553E1E48962C11ECB80BB2E75A40D577.roa (raw, json)
Hash identifier:          G+cnuzfTG89AAbUiD1rFvRUzH5dWIq0saJ8g/jHIcMo=
Subject key identifier:   7E:66:DC:D8:10:46:19:5D:65:2C:AA:F6:B8:9A:B9:C2:69:37:33:3C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       02
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/553E1E48962C11ECB80BB2E75A40D577.roa
Signing time:             Fri 25 Feb 2022 11:16:09 +0000
ROA not before:           Fri 25 Feb 2022 11:16:06 +0000
ROA not after:            Sun 25 Feb 2024 11:16:06 +0000
asID:                     61318
IP address blocks:        196.251.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 11:16:06 2022 GMT
            Not After : Feb 25 11:16:06 2024 GMT
        Subject: CN=6218ba79-9836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:c8:ec:ae:fb:f4:6f:e0:53:4d:f8:ae:5a:
                    30:12:2d:9f:10:44:cb:ec:b5:8b:5e:34:72:ff:94:
                    67:07:91:91:1d:63:2b:0b:bf:cb:7e:ec:6e:a3:a2:
                    95:66:c6:61:72:bb:28:1a:c7:0d:98:85:83:de:00:
                    2f:d0:e4:3f:ee:da:5c:4e:28:11:03:73:7c:6d:95:
                    55:33:a3:81:b3:c1:4b:50:12:a7:61:02:e6:3c:99:
                    11:2e:3e:56:b4:ca:27:01:07:9e:c3:cf:7d:97:1b:
                    09:2b:15:f2:de:a8:c0:58:70:cf:f5:a4:c1:e2:39:
                    9e:e6:60:dc:4d:d0:94:2c:62:70:0a:99:8e:37:b4:
                    e7:de:54:57:9d:f5:aa:bd:78:6f:09:77:d0:83:af:
                    8d:8b:18:c1:1b:7a:03:4c:d1:34:02:bd:42:35:91:
                    b7:2e:00:b6:30:04:c4:0e:0f:5d:ea:d8:55:31:e4:
                    55:14:06:03:05:34:d6:5d:9e:b4:5d:a9:c9:42:4b:
                    44:07:0d:f5:9d:46:cb:81:81:8b:25:d5:f7:48:69:
                    14:fb:4b:b7:cc:c1:0e:b3:71:01:d4:44:ac:4c:62:
                    92:5d:c2:94:72:7b:1e:41:5b:ca:77:f5:40:ba:c8:
                    cf:8b:a0:04:f6:92:f7:bc:11:3a:59:2f:ff:d5:8c:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:DC:D8:10:46:19:5D:65:2C:AA:F6:B8:9A:B9:C2:69:37:33:3C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/553E1E48962C11ECB80BB2E75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:90:cf:d7:0c:78:db:d4:ec:a7:d3:69:c7:27:fb:c4:d0:
         fa:da:70:6e:d3:f9:f2:7d:eb:21:01:a7:8a:7f:69:ee:49:1d:
         3f:2c:bc:f5:8f:7c:80:6e:59:d9:6d:03:b5:70:d9:ba:11:83:
         82:3f:b5:e2:35:64:50:c7:d1:83:08:97:b0:3d:bf:b8:af:7c:
         44:0e:88:aa:49:cd:de:3e:f8:b0:aa:58:51:2e:7b:5c:e0:c9:
         5a:8b:c9:2b:0e:b3:32:6d:e8:47:a2:b2:d9:ef:4b:3b:d4:3b:
         dd:4d:32:db:1d:3d:c2:57:23:c7:a2:c7:15:2c:cd:54:3b:1c:
         20:31:37:ec:5e:3e:82:d7:c6:30:6f:09:a9:a4:a7:19:bc:d6:
         a0:da:3b:ce:e6:6e:a8:91:bf:41:78:6d:81:38:15:63:8d:10:
         6b:3f:0e:84:bd:44:25:5c:b4:00:7d:45:74:e2:81:f1:0f:b8:
         13:86:dc:fb:a8:3d:5d:06:e7:9d:b0:46:36:de:9a:2e:f3:41:
         30:4e:39:af:4b:9d:26:1c:36:7a:8c:cb:59:46:17:ab:17:0c:
         8d:92:64:03:e8:4a:f3:12:34:66:54:ba:43:34:81:87:40:4d:
         1c:6b:2f:45:f9:26:3a:30:0f:ea:81:1b:0e:97:14:67:9e:cf:
         78:d5:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org