Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/2E3454140D1611ED906C88B8F1222468.roa
File:                     2E3454140D1611ED906C88B8F1222468.roa (raw, json)
Hash identifier:          cbmseePZj06RUAbia0uEnjTaloph/fsR+5/SWoGjEiY=
Subject key identifier:   FC:B0:AB:34:AD:1F:0E:B6:97:BB:9C:23:78:E9:D3:69:78:7F:1B:80
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0297
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/2E3454140D1611ED906C88B8F1222468.roa
Signing time:             Tue 26 Jul 2022 19:07:23 +0000
ROA not before:           Tue 26 Jul 2022 19:07:20 +0000
ROA not after:            Sun 16 Jul 2023 19:07:20 +0000
asID:                     140947
IP address blocks:        102.216.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Jul 26 19:07:20 2022 GMT
            Not After : Jul 16 19:07:20 2023 GMT
        Subject: CN=62e03b6b-bc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:3a:b3:28:cc:ab:51:db:b5:80:97:af:d1:
                    7f:72:16:b8:7b:24:84:53:ed:ec:a1:6f:13:36:69:
                    86:1a:3c:d8:40:a8:e6:c4:2a:95:72:f6:2c:60:75:
                    05:3d:9a:bb:4b:52:00:03:43:81:8a:4a:2e:ee:95:
                    e8:3d:3b:20:ed:1c:fb:39:a3:34:25:14:64:ca:aa:
                    e0:45:07:4e:a7:1a:8f:19:ea:d2:b6:b3:26:44:53:
                    01:d8:3b:db:e7:64:ba:e1:65:bf:79:5f:54:87:11:
                    e7:be:ca:7a:3b:0e:fc:83:eb:8c:38:73:70:d5:49:
                    db:e5:11:8a:a1:f8:cf:9b:c1:93:b5:19:73:13:f8:
                    c3:e3:7e:14:3e:91:09:e4:e4:ef:a8:9a:5b:b7:f8:
                    ef:69:ea:80:ad:89:26:fe:ba:87:c3:b5:8a:07:95:
                    11:d9:20:ae:d8:3b:90:d0:dc:56:f7:91:7e:4d:35:
                    07:83:eb:bc:20:d5:02:28:61:08:ac:b9:ff:46:1a:
                    9b:d3:ec:3e:3f:2f:40:93:24:f5:e8:78:df:ac:8a:
                    a7:b4:a6:d2:52:a5:32:f5:03:e9:59:d7:b6:9e:d7:
                    e8:44:33:ba:ad:16:c5:4a:84:fa:fa:6d:58:70:29:
                    27:ac:ca:3b:ba:3a:73:52:39:b3:73:a9:08:ac:13:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B0:AB:34:AD:1F:0E:B6:97:BB:9C:23:78:E9:D3:69:78:7F:1B:80
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/2E3454140D1611ED906C88B8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8a:44:5e:6d:67:b8:23:3e:b3:13:91:6e:dd:bf:ea:d3:f1:
         ba:11:0a:ea:9f:cf:a3:87:36:c6:72:50:9d:bf:54:dd:a4:96:
         34:30:6f:90:f7:de:a5:58:ca:63:4b:53:cf:eb:a3:c9:9d:f5:
         e3:ce:1c:26:b3:d6:18:24:96:61:b4:81:18:2b:bb:0e:9f:35:
         87:ae:5f:c4:b5:f6:5b:9b:f0:47:49:66:af:c1:47:f5:f0:3d:
         39:5f:2c:ba:22:d9:4b:71:8e:c2:a0:18:b2:71:c6:2d:6e:72:
         d8:7c:47:ee:fc:fb:cb:90:8c:56:0f:7d:7e:78:1a:ea:29:aa:
         9a:02:c9:4a:b1:6e:59:7b:9a:d3:49:eb:93:02:33:82:14:9b:
         bd:5c:0e:6d:51:6a:6b:3d:a2:5d:33:a2:6e:ce:99:40:c8:35:
         74:2a:17:69:3c:51:be:1c:0a:fb:2f:61:3b:aa:f1:af:e5:87:
         ce:fd:71:79:c1:15:81:14:64:31:47:1b:5b:70:02:47:df:ac:
         d3:44:1f:70:82:4f:27:fa:27:6c:62:6d:cd:92:2d:44:b9:39:
         03:0c:7e:cc:3a:16:4c:34:00:9e:47:f3:f2:ce:80:c5:6d:1d:
         a8:cf:fa:67:6c:20:cb:83:ff:0b:1f:15:92:73:f8:d5:4c:39:
         c7:4a:64:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICApcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NkZFNkNBRjExMC8GA1UEBRMoNEExRkU3NkI0REZCMDE3M0I2RjMxQjdGMzZBNUE5
ODJFMDhEOUMxOTAeFw0yMjA3MjYxOTA3MjBaFw0yMzA3MTYxOTA3MjBaMBgxFjAU
BgNVBAMMDTYyZTAzYjZiLWJjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXiDqzKMyrUdu1gJev0X9yFrh7JIRT7eyhbxM2aYYaPNhAqObEKpVy9ixg
dQU9mrtLUgADQ4GKSi7uleg9OyDtHPs5ozQlFGTKquBFB06nGo8Z6tK2syZEUwHY
O9vnZLrhZb95X1SHEee+yno7DvyD64w4c3DVSdvlEYqh+M+bwZO1GXMT+MPjfhQ+
kQnk5O+omlu3+O9p6oCtiSb+uofDtYoHlRHZIK7YO5DQ3Fb3kX5NNQeD67wg1QIo
YQisuf9GGpvT7D4/L0CTJPXoeN+siqe0ptJSpTL1A+lZ17ae1+hEM7qtFsVKhPr6
bVhwKSesyju6OnNSObNzqQisE68hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/LCr
NK0fDraXu5wjeOnTaXh/G4AwHwYDVR0jBBgwFoAUSh/na037AXO28xt/NqWpguCN
nBkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGRTZDL0IzMzc0NDI0MTMxQjExRUJBNDEyMUEzOUY4QUVBMjI4L1NoX25h
MDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NoX25hMDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZGRTZDL0IzMzc0NDI0MTMxQjExRUJBNDEyMUEzOUY4
QUVBMjI4LzJFMzQ1NDE0MEQxNjExRUQ5MDZDODhCOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2J4wDQYJKoZIhvcNAQEL
BQADggEBALaKRF5tZ7gjPrMTkW7dv+rT8boRCuqfz6OHNsZyUJ2/VN2kljQwb5D3
3qVYymNLU8/ro8md9ePOHCaz1hgklmG0gRgruw6fNYeuX8S19lub8EdJZq/BR/Xw
PTlfLLoi2UtxjsKgGLJxxi1ucth8R+78+8uQjFYPfX54GuopqpoCyUqxbll7mtNJ
65MCM4IUm71cDm1Rams9ol0zom7OmUDINXQqF2k8Ub4cCvsvYTuq8a/lh879cXnB
FYEUZDFHG1twAkffrNNEH3CCTyf6J2xibc2SLUS5OQMMfsw6Fkw0AJ5H8/LOgMVt
HajP+mdsIMuD/wsfFZJz+NVMOcdKZG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org