Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/97881ACCB1D911E999102247F8AEA228.roa
File:                     97881ACCB1D911E999102247F8AEA228.roa (raw, json)
Hash identifier:          VmW94NEamLw9f8GnZbjQwCJKlABlFRjZSE/ydqp1Bvo=
Subject key identifier:   47:0C:B7:B7:27:04:36:CA:7A:C8:E3:B0:30:8D:90:F9:0B:0F:65:FC
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       52
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/97881ACCB1D911E999102247F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:19:32 +0000
ROA not before:           Mon 29 Jul 2019 08:19:27 +0000
ROA not after:            Wed 27 Jul 2022 08:19:27 +0000
asID:                     36916
IP address blocks:        41.180.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:19:27 2019 GMT
            Not After : Jul 27 08:19:27 2022 GMT
        Subject: CN=5d3eac14-a9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:ca:b9:1c:05:f2:59:23:10:0c:3f:b9:16:
                    b2:43:e1:b0:f3:8a:5a:59:70:ed:26:ae:a3:34:d7:
                    c4:0a:a6:45:51:c6:9c:94:be:9f:4d:62:e3:82:74:
                    8c:b9:15:3d:ba:00:5f:79:bc:76:5c:30:cf:c2:c6:
                    f3:8e:05:a1:2e:17:46:00:4f:46:e6:65:6a:69:68:
                    5b:e6:d9:0a:19:3e:fa:b3:bb:1c:8b:46:bd:e0:e7:
                    9c:e5:3f:8e:71:b3:ec:5b:32:6a:ca:ac:5f:b1:31:
                    9e:48:76:70:86:46:29:d5:85:c3:45:3d:f4:71:d8:
                    f0:94:50:fb:ec:fc:d8:1e:82:40:7b:e9:2c:bd:5b:
                    f4:ad:c0:85:3e:4f:2c:cd:b7:0d:d8:e9:d3:5c:c9:
                    36:72:1f:f6:08:fd:05:c8:ca:a0:ca:33:53:05:6d:
                    8a:10:7a:2e:b6:db:4f:08:a1:7d:c4:6f:ee:87:4f:
                    6a:99:b4:cd:23:dd:18:ec:14:41:ce:a6:29:51:e0:
                    23:d9:62:42:cb:a6:61:c1:a7:42:9c:54:c3:f5:88:
                    66:cb:ca:fb:be:d0:7d:db:e0:19:d4:52:60:c1:67:
                    ad:46:f0:45:e5:6a:e8:91:6a:b0:93:d3:ac:40:3f:
                    60:86:c5:35:81:73:2b:c5:5d:e4:e9:59:9b:ad:3e:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:B7:B7:27:04:36:CA:7A:C8:E3:B0:30:8D:90:F9:0B:0F:65:FC
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/97881ACCB1D911E999102247F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:60:79:82:77:91:73:09:67:0f:a0:91:78:39:6d:db:67:
         96:df:18:cf:77:c8:dc:c2:51:0b:e3:02:e4:e9:06:ac:ce:95:
         47:1c:35:6f:58:1e:1e:35:2f:d7:24:8d:0d:99:e9:a4:e9:c2:
         46:96:1b:bf:dc:bb:96:f6:b5:db:69:20:79:7e:3f:f7:82:db:
         2d:f3:90:1e:b7:6b:92:bc:5b:a2:97:22:31:bb:f4:df:e7:ef:
         71:9a:d3:28:f4:86:80:31:b0:8d:46:0b:6e:8e:58:6f:94:19:
         b3:5c:21:19:00:cf:23:b0:b9:bd:1a:95:12:11:0a:72:08:d2:
         94:ee:34:70:e9:2e:2f:19:e0:8b:8b:36:72:0f:db:d0:d7:c3:
         b1:c4:6d:21:10:88:03:3f:23:7c:91:03:12:dd:13:98:c4:a3:
         f6:49:f7:48:4f:a9:9f:17:d0:ea:3a:58:3d:de:6d:25:a9:94:
         d7:b8:ee:76:af:e7:40:a1:02:2e:0c:57:56:cd:1f:a7:ac:53:
         24:35:16:da:ca:f9:cf:28:39:eb:1c:e3:12:70:69:c3:be:21:
         95:e4:19:cc:1c:15:14:7e:67:f4:64:ce:ca:2b:8a:4c:1e:e2:
         ae:ce:0b:db:44:e2:2b:50:26:ae:64:b7:47:cd:39:31:aa:0a:
         b5:9e:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org