Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/362448CCD97911EB9BC56357F8AEA228.roa
File:                     362448CCD97911EB9BC56357F8AEA228.roa (raw, json)
Hash identifier:          SqIJFIyzFslozohJz4ZBJVlWMEHvyk4HOpQ+q34EwSI=
Subject key identifier:   6F:BA:AF:A8:B1:7B:89:90:1C:74:2B:83:B8:A8:67:83:47:AD:80:3C
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       01B4
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/362448CCD97911EB9BC56357F8AEA228.roa
Signing time:             Wed 30 Jun 2021 08:00:19 +0000
ROA not before:           Wed 30 Jun 2021 08:00:14 +0000
ROA not after:            Fri 30 Jun 2023 08:00:14 +0000
asID:                     328608
IP address blocks:        102.219.64.0/22 maxlen: 24
                          102.223.44.0/22 maxlen: 24
                          102.223.196.0/22 maxlen: 24
                          102.223.199.0/24 maxlen: 24
                          2c0f:ebd0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Jun 30 08:00:14 2021 GMT
            Not After : Jun 30 08:00:14 2023 GMT
        Subject: CN=60dc2493-e2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:df:a0:ff:0a:12:76:97:2d:d8:2e:02:90:
                    f3:50:18:f8:41:76:b3:d9:9b:49:ee:97:b2:6c:37:
                    69:26:3d:11:4f:ce:06:56:6e:a5:b6:e4:62:b5:25:
                    68:e5:95:55:fc:f8:c3:06:6f:69:96:e1:3b:39:c1:
                    0a:ce:2a:72:6b:1e:8d:3b:23:1b:2e:8d:bb:f7:7c:
                    dc:9f:a8:b7:cb:38:d9:ad:7b:b6:26:92:08:3a:56:
                    2e:48:43:f0:00:02:72:7e:a4:fa:a7:0a:ff:1b:ba:
                    7e:9f:2d:51:e9:43:9f:e8:8a:4d:bc:df:18:9c:28:
                    68:ac:1c:6e:bb:97:eb:00:5f:b2:c9:19:60:43:37:
                    66:f2:1d:30:8c:2c:50:96:54:0b:85:e9:8e:df:89:
                    b1:90:d6:9b:56:bf:0f:2c:05:30:af:85:a9:ec:40:
                    3c:3e:9f:a9:f3:ca:b6:df:0a:61:78:80:b0:1a:08:
                    65:8f:0f:22:8b:95:08:0e:35:b9:37:b4:29:77:b6:
                    b1:23:4c:b9:29:71:d8:fb:0e:32:99:eb:24:5a:56:
                    59:35:f3:c0:49:67:5b:25:56:5b:a2:d3:53:ed:e2:
                    47:44:19:34:b9:9b:df:01:ad:81:91:98:f2:46:db:
                    bd:88:33:8c:76:e8:ee:97:53:3a:c8:bf:60:2b:6f:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:AF:A8:B1:7B:89:90:1C:74:2B:83:B8:A8:67:83:47:AD:80:3C
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/362448CCD97911EB9BC56357F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.64.0/22
                  102.223.44.0/22
                  102.223.196.0/22
                IPv6:
                  2c0f:ebd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:24:4b:03:7a:53:b3:f4:03:35:0a:69:12:b6:40:c4:1d:
         f8:da:9b:19:7c:34:59:f2:1c:3b:79:fe:d0:53:1f:82:45:21:
         ec:2a:6e:d3:e2:7b:68:25:13:a1:9c:d5:2f:23:4a:ed:ae:1c:
         ca:7d:bf:d3:96:a3:aa:79:55:6a:f0:dd:4e:6e:21:62:9b:f1:
         64:ef:f9:0f:f7:8b:e2:38:36:b7:58:5d:eb:fb:24:23:2f:19:
         a8:37:fe:9d:6a:50:2c:35:ee:50:aa:5f:d0:4b:33:a2:d4:3f:
         06:87:df:81:ba:9e:a8:1b:c4:8d:fc:72:b7:1c:a8:01:1b:0b:
         24:31:92:c3:3e:3f:2f:56:c9:9c:22:6c:45:20:ae:d2:a1:0a:
         a4:a8:13:2e:5e:5c:74:6d:88:bc:78:28:12:ce:4f:cf:d5:06:
         53:e8:4c:22:ba:fa:06:69:1b:22:57:70:c3:c6:0d:fd:d8:be:
         b6:52:10:d9:e4:35:e1:a6:44:e0:30:d1:16:96:f1:75:a7:4e:
         99:fe:4f:b0:96:b8:90:f5:6a:20:05:55:0d:dc:14:68:f9:ac:
         34:f2:95:64:b8:c1:b5:b2:22:83:a1:b2:5e:99:5e:01:cd:5c:
         ea:7b:0a:7e:24:24:57:f5:61:c7:e6:a0:bb:6a:16:bb:63:90:
         62:35:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org