Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
File:                     3001FD30711F11EBA1D5C521F8AEA228.roa (raw, json)
Hash identifier:          DKPL/cqjm6y3rUdCHyX2daW5tFgYytcGgaDJcv/ROa8=
Subject key identifier:   2C:F6:95:EC:B0:15:7D:E9:12:FD:E4:D4:7D:86:80:54:9A:C3:11:8B
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       04
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
Signing time:             Wed 17 Feb 2021 12:53:53 +0000
ROA not before:           Wed 17 Feb 2021 12:53:46 +0000
ROA not after:            Thu 17 Feb 2022 12:53:46 +0000
asID:                     328010
IP address blocks:        196.49.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Feb 17 12:53:46 2021 GMT
            Not After : Feb 17 12:53:46 2022 GMT
        Subject: CN=602d11e1-fea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:f3:02:8c:d5:c2:35:3f:9c:4f:a3:3c:d2:
                    4e:f7:1b:57:32:a2:9b:55:7f:ac:c8:ac:12:e1:57:
                    da:2d:6c:09:43:e6:b1:93:cb:76:08:57:5a:ee:da:
                    27:a8:13:25:33:0a:8b:69:02:b6:eb:11:56:84:5b:
                    ac:e3:94:45:aa:c0:6c:2a:46:9c:1a:03:7d:8d:8b:
                    e1:91:6c:ac:99:45:d0:e6:f7:7b:32:a0:df:bc:a5:
                    d1:c4:55:b6:40:9c:c2:65:68:d9:6a:9b:f1:53:6b:
                    9a:e3:6e:62:86:84:eb:45:38:c8:9e:4d:b2:a7:b1:
                    6f:2d:ff:2e:96:aa:c1:0d:8f:e2:e4:74:ed:6b:53:
                    fc:b1:d2:76:5c:c6:e7:46:a3:17:2a:b6:fb:7a:f6:
                    ff:8c:03:c8:54:a6:d4:20:75:f3:b8:68:09:c0:49:
                    ab:4b:d4:0d:d1:20:c4:e5:d9:4d:0b:72:7d:42:38:
                    b5:e5:ae:9b:67:6a:25:00:1f:a5:e6:db:f8:43:f4:
                    68:d7:c1:3a:ce:cf:a3:45:b4:f6:c7:45:85:e5:e9:
                    fe:a6:eb:76:16:5f:df:83:94:84:e3:43:ff:18:9f:
                    0a:ca:b7:d1:d1:0a:39:0d:0e:57:1b:ca:9c:a4:70:
                    f2:2f:40:b2:d4:71:fe:b2:8b:9a:63:f4:2d:90:f5:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F6:95:EC:B0:15:7D:E9:12:FD:E4:D4:7D:86:80:54:9A:C3:11:8B
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:be:19:e9:43:0e:98:f9:e3:50:8a:68:6c:88:0a:5f:90:10:
         88:5a:c7:37:c1:0e:1d:64:6d:87:50:ba:75:97:7a:fc:4b:3f:
         6f:f3:dd:7d:4f:c8:f5:44:d5:ab:f2:ae:b5:fa:f4:2a:f1:bb:
         c1:8f:06:90:73:da:7a:91:2b:8d:5e:8e:8c:37:ff:0d:71:05:
         4c:eb:d9:a1:30:9f:7b:3e:25:9e:e3:7c:3c:ae:04:3e:f3:9e:
         0b:6a:d8:51:c0:b9:22:71:2f:90:eb:b3:db:2e:26:02:7b:91:
         dd:8d:15:76:ca:b4:17:45:cc:26:d0:84:3d:40:08:c3:3f:a4:
         ee:33:3e:a7:5d:86:35:22:d6:5d:95:d0:f9:bd:a8:d7:f3:ba:
         2d:29:5b:2b:91:d6:b0:3a:64:a3:f8:43:d7:2c:86:2e:fa:3d:
         64:ab:a0:a6:b6:ab:3d:6a:4b:25:ac:c6:46:5e:74:c5:59:cf:
         37:97:13:e5:40:50:17:f4:48:c3:d3:3f:ed:67:e4:26:d1:b2:
         d2:cf:a3:21:a2:73:2f:67:b0:76:23:ab:dc:e2:59:8a:20:e5:
         94:7e:ed:1e:be:6c:2c:92:11:30:55:e8:ee:e6:c6:80:bf:88:
         a3:bc:4c:19:aa:87:d5:12:72:e6:83:2b:df:b6:97:a8:9b:89:
         23:cf:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org