Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/D0E28348B84211ED8F5992CEF1222468.roa
File:                     D0E28348B84211ED8F5992CEF1222468.roa (raw, json)
Hash identifier:          vorgf+qSXqpqARMHKWtFGCyc06Z1tEPBJ88e55xOoAQ=
Subject key identifier:   D7:C6:AC:32:DA:3B:6A:94:87:BE:D8:9F:F3:CB:F2:D7:EF:6E:5C:1F
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       B1
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/D0E28348B84211ED8F5992CEF1222468.roa
Signing time:             Wed 01 Mar 2023 15:07:43 +0000
ROA not before:           Wed 01 Mar 2023 15:07:39 +0000
ROA not after:            Sun 31 Mar 2024 15:07:39 +0000
asID:                     329159
IP address blocks:        102.214.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Mar  1 15:07:39 2023 GMT
            Not After : Mar 31 15:07:39 2024 GMT
        Subject: CN=63ff6a3f-aa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:2f:d1:2c:a1:69:0d:b9:f8:e3:71:f1:44:
                    ab:ee:f5:53:a0:fa:d1:fd:37:21:2c:84:81:73:10:
                    5d:d6:24:2a:a6:81:9d:85:48:d2:15:31:57:65:2d:
                    be:2c:c0:b2:30:eb:31:03:64:0f:16:dd:78:cc:95:
                    c8:ab:71:36:ee:02:9f:f6:92:9b:6f:db:82:d3:c7:
                    ed:89:68:1c:51:89:b5:b9:b7:b4:0d:01:bf:2e:d6:
                    c7:6d:04:98:37:2a:57:93:aa:0d:9d:bf:c6:ff:0c:
                    98:80:0a:76:dc:89:56:c7:a3:37:5f:e5:1a:2f:e6:
                    b6:12:49:4a:6c:b3:ba:aa:43:73:2b:b7:1b:85:3f:
                    d2:4d:5a:7b:6c:df:77:c8:37:ee:19:d3:bc:e2:7c:
                    ba:a3:1b:ef:13:52:32:2a:d3:f7:5d:eb:ed:3f:44:
                    d5:d5:04:2d:27:89:55:31:56:9e:99:6c:16:bd:ea:
                    f2:60:81:eb:16:a2:7e:99:c0:f0:27:fa:61:c6:93:
                    96:21:20:c3:24:46:78:bd:99:43:40:7c:f1:94:01:
                    56:be:05:33:70:f9:17:8f:eb:ee:83:fa:d9:f0:81:
                    49:36:3a:08:5a:3a:6c:50:1b:7d:e0:b0:b2:71:b1:
                    d9:8c:5e:b4:04:86:c2:bf:63:c0:dc:3c:40:3b:10:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:AC:32:DA:3B:6A:94:87:BE:D8:9F:F3:CB:F2:D7:EF:6E:5C:1F
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/D0E28348B84211ED8F5992CEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:67:c6:5c:a8:48:58:10:c5:c5:3d:ee:b1:18:95:db:48:56:
         77:11:6f:e4:13:15:1c:f2:2f:46:9a:61:d5:2a:96:41:ec:f0:
         df:35:09:c6:00:1e:f5:5a:bd:a5:64:85:8d:4f:d3:69:32:57:
         1a:73:ad:3c:08:47:27:0d:4a:95:66:21:6b:bc:30:f4:e3:dd:
         b6:dd:2b:45:e9:bf:d7:20:9f:31:41:08:98:25:b3:47:e9:50:
         63:91:71:28:0e:96:ca:93:bc:e7:bb:22:a5:14:0e:05:88:8a:
         f2:40:68:2d:ad:82:24:7b:83:29:7f:fc:97:f6:08:8e:93:b8:
         7a:af:d2:1c:1a:1f:e6:97:18:35:ad:b9:d6:1c:96:83:78:da:
         33:1b:c8:52:06:c5:76:4e:52:39:60:65:26:90:25:59:8e:a1:
         2a:d8:ca:13:82:08:71:a5:af:b0:ef:87:3c:47:81:cc:39:d6:
         8e:a5:cc:93:e5:b7:ee:03:22:7b:74:bc:33:87:4f:eb:f6:22:
         90:e9:bb:e6:77:52:1e:49:ba:ff:d8:b6:1e:a8:4e:85:cc:23:
         a6:8a:bc:62:a4:d3:bf:fb:a1:ef:e2:d0:53:44:58:95:68:df:
         b7:8b:06:f8:d9:ed:ac:d6:63:68:e4:d2:9f:94:d1:47:e8:e4:
         26:9f:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 02:53:46 2024 by rpki-client on console-ams.rpki-client.org