Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AB2A4022B1DA11E9879DF747F8AEA228.roa
File:                     AB2A4022B1DA11E9879DF747F8AEA228.roa (raw, json)
Hash identifier:          ZATRgNeY/FuYOp3I8kQ1LDkUNgcBXpOujXIRlpN75uo=
Subject key identifier:   C6:CE:CC:9F:DD:E7:BB:D9:A5:C3:6D:DA:54:1B:47:52:16:AB:5B:C1
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       5E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AB2A4022B1DA11E9879DF747F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:27:15 +0000
ROA not before:           Mon 29 Jul 2019 08:27:09 +0000
ROA not after:            Wed 27 Jul 2022 08:27:09 +0000
asID:                     36916
IP address blocks:        41.180.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:27:09 2019 GMT
            Not After : Jul 27 08:27:09 2022 GMT
        Subject: CN=5d3eade2-0f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:32:9e:86:8d:ee:b5:3b:4d:c1:e0:c4:71:
                    37:f4:7a:81:61:0b:c2:31:7c:57:84:d8:ab:ae:89:
                    2c:60:3d:e0:5f:0a:4f:74:c3:c2:a1:98:8c:31:0a:
                    59:0b:f4:37:cb:01:05:da:aa:f3:23:12:00:73:19:
                    47:f2:40:f2:2c:84:e0:0f:7b:97:3d:a0:5c:bb:2e:
                    d4:4a:52:83:a9:ed:8b:44:44:9a:e6:ad:a5:4e:f5:
                    48:8f:8e:9b:25:96:db:7a:fa:a3:35:2c:40:82:9c:
                    cc:cf:42:be:77:e3:76:f7:92:44:54:ba:87:85:81:
                    1b:21:88:98:91:94:fe:52:9b:fd:62:a2:b1:8a:b1:
                    bf:a4:0e:a0:ce:3f:70:6b:f4:73:cc:dd:2d:1a:4d:
                    a8:7a:da:2b:b2:55:58:50:b0:43:1d:99:c3:45:f6:
                    7a:3b:41:1f:3b:17:67:25:f0:f2:ab:6b:39:28:64:
                    ac:c4:83:98:ea:4d:d0:6c:70:96:31:79:a5:fc:54:
                    a3:49:83:62:d3:b2:d7:66:2d:cd:db:90:64:f7:f7:
                    fe:f3:2f:30:30:74:dc:b0:35:a8:3e:57:72:3a:5b:
                    89:d9:48:ce:65:e0:dc:74:73:56:a4:03:d2:6f:83:
                    62:ee:7d:d6:c3:2d:5c:da:35:6b:cc:55:f5:8d:cd:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:CC:9F:DD:E7:BB:D9:A5:C3:6D:DA:54:1B:47:52:16:AB:5B:C1
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AB2A4022B1DA11E9879DF747F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:df:91:2c:e7:8d:4b:5b:61:16:61:fd:37:58:ba:34:cd:
         1a:64:72:0c:3c:0c:8f:92:5d:9f:92:b3:76:1b:3c:d0:cf:1c:
         6a:2b:08:19:29:fa:be:31:f2:2a:64:f3:13:cf:68:e7:c1:36:
         83:56:e9:24:eb:a6:ec:c6:7a:ee:d4:ca:e7:ee:05:49:1b:2c:
         aa:c8:d1:26:cc:55:f5:55:3d:4d:8d:e4:a3:96:92:d4:2e:de:
         47:8a:9f:e2:69:33:a2:39:8a:22:72:b9:bb:6a:10:0f:6a:0a:
         7f:1a:09:30:7b:1d:08:8a:01:58:c9:60:26:9d:58:3d:86:44:
         ab:c9:2f:7b:5f:df:f8:db:44:6d:ef:ea:48:0f:55:a9:1a:d7:
         96:90:ec:85:5c:5a:d9:96:0b:aa:d9:88:74:4d:57:f9:b7:37:
         e1:09:e0:fa:d3:f7:fe:45:f5:7c:e0:bf:17:d2:c9:0c:12:35:
         63:6a:8c:e6:98:e1:05:fd:73:9c:2f:30:06:54:f1:b7:60:0d:
         a1:a3:8a:9a:b6:62:91:b8:3a:a8:6d:f8:f7:6b:c1:5d:06:ba:
         e9:95:50:69:77:5a:64:60:5f:3f:8a:fe:02:50:70:ad:6f:f2:
         ee:c3:52:0b:2a:05:fc:91:e8:87:98:fc:4c:31:7a:10:89:53:
         aa:f7:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org