Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4BE81824AF8611E997A78745F8AEA228.roa
File:                     4BE81824AF8611E997A78745F8AEA228.roa (raw, json)
Hash identifier:          nXwkZs2hQEW4p7LFO71LRgWb059J7XCyE1BRusJ9SiI=
Subject key identifier:   D4:37:B1:45:13:45:78:DA:10:B5:2E:B2:85:EF:D9:E2:DC:6E:8B:9C
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       3F
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4BE81824AF8611E997A78745F8AEA228.roa
Signing time:             Fri 26 Jul 2019 09:18:15 +0000
ROA not before:           Fri 26 Jul 2019 09:18:10 +0000
ROA not after:            Wed 27 Jul 2022 09:18:10 +0000
asID:                     36916
IP address blocks:        41.138.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 26 09:18:10 2019 GMT
            Not After : Jul 27 09:18:10 2022 GMT
        Subject: CN=5d3ac557-85a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:a9:23:1f:81:4d:6d:52:6f:8d:ce:57:be:
                    c2:eb:3c:8a:f5:9c:44:85:14:c6:dc:2d:3b:1a:5c:
                    a6:d3:15:15:50:4a:56:e9:06:0a:82:c4:c6:e9:b3:
                    33:e0:e1:b1:b8:7c:9e:21:22:f3:5d:8b:7b:16:c3:
                    a1:a5:e5:ca:9e:11:9e:41:a0:bc:a5:cb:28:de:3e:
                    63:64:6c:82:57:7e:df:e0:57:a6:26:45:7b:44:23:
                    dc:a1:41:51:dc:db:23:66:b5:5f:c8:ad:5d:ad:15:
                    2d:27:dc:52:d4:cd:69:f0:22:39:d3:ed:36:8e:0a:
                    a9:e0:fc:ab:dd:a1:e6:37:d0:07:f4:0d:d3:f6:4b:
                    be:08:a7:06:65:a8:9d:ba:65:08:40:3b:7f:a5:9d:
                    3f:b1:95:e7:d4:46:22:a5:b9:f3:98:4c:69:13:66:
                    3d:8b:17:e0:ae:11:a5:48:00:87:fc:8c:e4:54:52:
                    b8:36:d8:6a:60:5a:67:fd:69:13:44:39:6b:24:b1:
                    bb:6a:09:75:d8:2b:21:1d:ac:ce:36:44:95:25:12:
                    72:eb:92:de:11:69:ba:75:19:5e:8f:3c:e2:08:d0:
                    cd:07:57:55:f5:07:e0:37:cf:b7:ee:93:e4:a4:ea:
                    6a:0f:3c:e2:be:92:e9:66:ad:5b:8b:77:c9:48:a4:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:B1:45:13:45:78:DA:10:B5:2E:B2:85:EF:D9:E2:DC:6E:8B:9C
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4BE81824AF8611E997A78745F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.138.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:41:1d:dd:ca:e5:d1:f5:62:e3:84:c4:12:14:06:fc:d9:
         17:65:9c:3a:24:7f:e2:0a:44:0c:aa:42:05:4d:b5:b9:60:83:
         85:67:bf:68:36:f8:55:b8:6f:b8:05:6c:90:e8:31:e1:6a:8e:
         a6:b3:76:60:32:9e:6c:d9:0e:c5:96:fa:0b:8c:80:7d:ef:5f:
         af:0a:5a:48:92:a2:16:28:6c:9f:cd:b3:5f:8f:92:b7:32:31:
         c1:e5:0e:66:ea:d1:4c:ed:17:47:01:d5:e3:6f:c6:31:34:95:
         6c:1e:6f:fd:e7:6a:eb:a4:51:f9:fd:55:6a:85:e7:36:61:bc:
         95:c5:5a:51:a7:ae:63:6a:7b:a8:c1:f3:fc:21:0b:d7:c1:2f:
         52:3b:c0:6d:45:2e:af:89:6e:64:83:74:7e:56:aa:1e:49:e3:
         9c:d7:7a:59:36:e4:a6:d5:16:6a:f5:37:85:5e:96:35:1f:07:
         91:fc:59:c8:af:31:32:4f:14:76:65:39:af:52:92:30:4f:c9:
         c3:27:1d:1d:de:ca:e8:37:93:3e:24:09:1e:1d:73:18:1a:c2:
         6f:4e:2b:bd:cd:da:15:57:49:90:93:1d:94:e9:d2:79:1b:7e:
         a3:b6:e6:b3:26:42:ba:aa:2f:d5:f8:b9:aa:28:63:29:14:82:
         39:84:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org