Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/EC959B5EE31611EC8C25B7CDF1222468.roa
File:                     EC959B5EE31611EC8C25B7CDF1222468.roa (raw, json)
Hash identifier:          n/8ZP1Bvzs45miWLLHe18cU7AK4ZNEfF/1wVM0OfFiA=
Subject key identifier:   CF:5F:0D:81:AF:D3:E8:4B:03:94:92:0E:5E:1E:FB:C4:CF:55:29:04
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0D
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/EC959B5EE31611EC8C25B7CDF1222468.roa
Signing time:             Fri 03 Jun 2022 08:26:54 +0000
ROA not before:           Fri 03 Jun 2022 08:26:50 +0000
ROA not after:            Mon 03 Jun 2024 08:26:50 +0000
asID:                     328820
IP address blocks:        2c0f:1200::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Jun  3 08:26:50 2022 GMT
            Not After : Jun  3 08:26:50 2024 GMT
        Subject: CN=6299c5ce-bcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:c9:f3:be:01:0d:76:15:fe:20:63:46:ea:
                    af:e4:28:d8:2d:5b:da:94:46:60:f6:b4:42:69:07:
                    e4:15:1d:db:65:c1:3a:8b:54:bd:64:9f:a4:55:3c:
                    48:8f:b0:0c:e9:64:d8:25:f4:01:48:be:49:6f:8f:
                    f8:fd:c1:35:63:60:97:09:e8:dd:df:33:f0:e5:20:
                    b0:c0:21:f7:55:8a:f6:48:9a:b0:42:f5:3f:8d:69:
                    2b:33:41:dd:3d:f0:97:f5:8f:26:86:c6:1a:86:ed:
                    25:b4:12:f8:cb:1a:5e:39:6d:c8:da:a2:b0:3d:1f:
                    00:bb:8c:01:cb:0d:f3:e2:b9:5b:43:79:cb:fd:d3:
                    78:d8:75:88:59:46:ec:e2:ec:d3:ca:20:8c:09:40:
                    ca:45:25:4c:6e:80:e2:cc:0f:93:49:c3:86:a6:26:
                    6a:8f:61:8d:32:d6:1a:ec:ae:b8:5c:c5:9c:e9:56:
                    de:e7:74:03:99:f7:51:81:2b:6b:33:2c:0a:58:fe:
                    18:dd:36:8e:c4:a1:b2:8a:32:c5:d7:90:55:dc:8c:
                    53:97:6f:96:df:eb:e9:7c:a3:47:8f:cc:1c:0e:7c:
                    f1:58:ab:da:06:6a:dd:73:d0:ef:94:bc:92:c0:ad:
                    21:50:f9:bb:48:2c:fb:4b:5c:51:28:a2:f2:20:77:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5F:0D:81:AF:D3:E8:4B:03:94:92:0E:5E:1E:FB:C4:CF:55:29:04
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/EC959B5EE31611EC8C25B7CDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:d0:7e:2e:c7:66:c4:79:8c:12:7a:b3:03:47:c2:f4:e3:
         ce:e6:0a:44:91:9b:64:cf:20:56:f0:28:ca:bc:5b:dd:f7:65:
         e7:9b:2a:e3:68:8a:47:0f:5a:58:5c:d4:90:23:66:62:f7:b7:
         c6:d4:d0:67:3c:e1:02:5d:b3:95:8f:8c:e6:1f:c5:7f:8a:e4:
         66:1e:b1:38:d2:a6:52:06:67:25:f6:45:b4:81:df:f8:45:b0:
         eb:c5:fd:04:18:26:46:93:96:78:69:ea:c9:68:14:5f:3c:1e:
         5b:47:4c:7f:ac:eb:e7:ff:f4:bb:5e:d6:6b:16:96:a5:d5:4b:
         44:c3:67:df:97:8d:f1:1b:6d:06:3a:82:13:14:ae:c8:11:27:
         dc:11:df:77:c2:f3:74:a5:5b:a2:42:6b:02:0e:85:b2:b4:78:
         b6:e4:e9:fb:d2:63:3f:1b:10:bc:5f:a3:7d:97:f9:43:0f:a9:
         a3:a5:28:2c:c6:33:b6:4e:fb:37:ac:2b:42:cb:3a:02:3d:cd:
         73:67:ba:06:c2:a4:b5:df:ad:15:90:71:75:d3:83:ce:e9:c7:
         30:03:02:a0:13:b7:2a:82:c3:25:0c:a8:99:4f:b7:42:c7:9f:
         46:ed:43:e1:82:a8:09:64:a2:6d:37:2f:48:b8:8a:a8:6a:9c:
         24:c4:47:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
OThGNUFGMTEwLwYDVQQFEygzRDRBNEVGRDAyOUExMTJFQjg5QUFDOEVDQTlEOTE3
QTQ3Q0I2QzVDMB4XDTIyMDYwMzA4MjY1MFoXDTI0MDYwMzA4MjY1MFowGDEWMBQG
A1UEAwwNNjI5OWM1Y2UtYmNmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoOyfO+AQ12Ff4gY0bqr+Qo2C1b2pRGYPa0QmkH5BUd22XBOotUvWSfpFU8
SI+wDOlk2CX0AUi+SW+P+P3BNWNglwno3d8z8OUgsMAh91WK9kiasEL1P41pKzNB
3T3wl/WPJobGGobtJbQS+MsaXjltyNqisD0fALuMAcsN8+K5W0N5y/3TeNh1iFlG
7OLs08ogjAlAykUlTG6A4swPk0nDhqYmao9hjTLWGuyuuFzFnOlW3ud0A5n3UYEr
azMsClj+GN02jsShsooyxdeQVdyMU5dvlt/r6XyjR4/MHA588Vir2gZq3XPQ75S8
ksCtIVD5u0gs+0tcUSii8iB3j8ECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTPXw2B
r9PoSwOUkg5eHvvEz1UpBDAfBgNVHSMEGDAWgBQ9Sk79ApoRLriarI7KnZF6R8ts
XDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEyMjI0NjgvUFVwT19R
S2FFUzY0bXF5T3lwMlJla2ZMYkZ3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUFVwT19RS2FFUzY0bXF5T3lwMlJla2ZMYkZ3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEy
MjI0NjgvRUM5NTlCNUVFMzE2MTFFQzhDMjVCN0NERjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPEgAwDQYJKoZIhvcNAQEL
BQADggEBAJ/80H4ux2bEeYwSerMDR8L0487mCkSRm2TPIFbwKMq8W933ZeebKuNo
ikcPWlhc1JAjZmL3t8bU0Gc84QJds5WPjOYfxX+K5GYesTjSplIGZyX2RbSB3/hF
sOvF/QQYJkaTlnhp6sloFF88HltHTH+s6+f/9Lte1msWlqXVS0TDZ9+XjfEbbQY6
ghMUrsgRJ9wR33fC83SlW6JCawIOhbK0eLbk6fvSYz8bELxfo32X+UMPqaOlKCzG
M7ZO+zesK0LLOgI9zXNnugbCpLXfrRWQcXXTg87pxzADAqATtyqCwyUMqJlPt0LH
n0btQ+GCqAlkom03L0i4iqhqnCTER3g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org