Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/526657BAAE8E11ECBD7605895A40D577.roa
File:                     526657BAAE8E11ECBD7605895A40D577.roa (raw, json)
Hash identifier:          ugfzS3ia/K3EbibTgBwN4kOqir2NjLgC1eJk2sEsMc0=
Subject key identifier:   3A:1D:69:8C:8A:48:A4:43:17:D7:03:CF:34:08:C2:64:6C:62:08:4C
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       01AC
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/526657BAAE8E11ECBD7605895A40D577.roa
Signing time:             Mon 28 Mar 2022 11:58:03 +0000
ROA not before:           Mon 28 Mar 2022 11:57:59 +0000
ROA not after:            Tue 28 Mar 2023 11:57:59 +0000
asID:                     37716
IP address blocks:        196.60.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Mar 28 11:57:59 2022 GMT
            Not After : Mar 28 11:57:59 2023 GMT
        Subject: CN=6241a2cb-c141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:67:78:e2:e4:1f:79:f0:e8:c3:50:1d:93:
                    8e:2e:bd:4f:6a:1d:45:09:a0:82:b2:43:96:cd:3a:
                    30:76:70:e6:e7:51:f2:55:db:d3:14:20:ec:53:b4:
                    92:2c:c8:61:83:22:ec:7b:0b:26:51:32:cd:2e:39:
                    82:79:e7:4f:e0:7b:48:17:d5:93:20:62:95:11:0c:
                    48:05:70:7b:e7:5c:42:6b:22:d8:2e:13:4f:07:e6:
                    a3:8c:71:04:87:28:36:6f:dd:94:82:c9:0f:b0:ab:
                    e9:49:56:68:5b:d6:82:73:15:f8:50:9b:07:ca:16:
                    30:2b:07:5c:f3:f6:2c:86:84:ad:54:4d:22:98:ea:
                    85:10:2e:3b:66:35:0d:aa:1f:41:48:8f:81:4d:7b:
                    4c:d2:ba:40:c8:15:c6:3b:a8:4e:53:16:8f:1b:b8:
                    9c:58:7c:56:f9:3f:5b:e1:f2:19:7f:4a:ee:5a:74:
                    88:de:67:4d:61:e8:ba:a6:13:57:8e:6d:55:97:10:
                    ac:77:68:d2:40:29:d4:84:15:0e:40:e7:c0:55:65:
                    53:59:3a:b4:54:e8:f7:c3:05:71:80:41:72:f3:59:
                    2f:61:9a:90:91:87:19:c7:54:c0:7e:76:1a:4f:3c:
                    30:3a:ce:dd:0e:7d:76:1c:8b:5d:56:1f:8c:d4:e4:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:69:8C:8A:48:A4:43:17:D7:03:CF:34:08:C2:64:6C:62:08:4C
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/526657BAAE8E11ECBD7605895A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:0d:49:4c:73:9a:44:28:a6:ab:ad:98:96:11:24:fb:52:
         fa:da:4e:3e:d6:47:1a:77:16:68:75:4f:7b:59:14:67:57:48:
         b8:84:40:aa:c7:db:dd:d9:c6:52:17:ed:eb:f4:ae:9e:a3:2a:
         a6:7d:e9:9e:e3:16:c4:a5:4c:fe:3e:6f:be:09:ab:c7:a9:9d:
         a8:df:f5:6c:96:9e:3f:17:77:7c:55:b7:11:fa:5a:76:f2:83:
         35:1f:68:08:55:04:68:80:7b:5f:f8:14:94:2a:46:10:bd:59:
         93:8f:54:76:ae:47:47:ea:d5:d0:a3:56:c2:e6:8b:6f:a9:5e:
         c3:4f:4a:ad:73:dd:45:19:6d:53:40:08:bc:1f:74:a0:f9:b6:
         bf:9b:95:49:65:b4:96:3a:55:86:33:45:97:bc:0e:52:6a:34:
         64:0a:7c:34:12:f5:9d:ca:bb:ce:c2:fa:fa:76:d4:b0:b1:80:
         b2:fc:41:29:69:97:f0:b2:9f:1e:ae:1f:a3:71:0e:da:f0:db:
         f4:15:80:ad:96:9b:9e:73:20:d7:fe:04:ab:81:eb:5c:fa:f5:
         2c:52:01:09:4b:29:fa:5a:2d:29:f0:d7:72:84:7f:10:6f:9b:
         b2:a2:25:1c:62:e2:4f:49:dc:77:ff:52:80:3d:83:38:d2:05:
         73:73:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org