Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
File:                     3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa (raw, json)
Hash identifier:          2zCkWYptTtvNHjlc41VS/S3roHukIhVjl9rmfDyOico=
Subject key identifier:   C0:C0:EF:EB:BF:C2:EF:FA:50:48:67:15:30:B3:92:47:A2:B1:70:EE
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0B
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
Signing time:             Mon 29 May 2023 14:15:10 +0000
ROA not before:           Mon 29 May 2023 14:15:05 +0000
ROA not after:            Fri 29 Dec 2023 14:15:05 +0000
asID:                     327765
IP address blocks:        41.211.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 29 14:15:05 2023 GMT
            Not After : Dec 29 14:15:05 2023 GMT
        Subject: CN=6474b36e-cb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:14:30:fa:b9:4a:a3:9a:bb:fc:12:38:d8:
                    ab:21:5c:e7:c9:39:04:77:e2:37:1f:a8:61:de:75:
                    bd:c8:78:fb:84:99:ff:db:1b:d8:46:bc:ca:4a:0d:
                    3e:21:d3:d2:9b:c5:0c:83:d3:0c:7b:1a:2a:4e:e9:
                    dd:23:2e:52:a4:01:e6:24:48:c6:d9:11:71:73:57:
                    49:5f:df:d1:28:f2:ce:a6:fd:5b:db:63:0b:d5:4d:
                    82:8e:99:0b:a5:aa:72:a2:fd:6a:e5:6e:3e:da:9d:
                    e9:d1:c8:b6:53:75:e0:72:de:81:b1:8f:2f:9d:68:
                    8b:41:a7:23:e7:03:a7:0f:b3:4b:f6:57:d8:00:bb:
                    bd:f2:5f:f4:f5:92:42:84:03:c6:87:0c:2a:0d:0f:
                    a5:4d:9d:75:3e:f6:e1:1a:5f:b0:6b:68:5e:90:17:
                    b6:bb:75:6e:7e:16:9a:5c:f6:db:5f:e2:5f:c9:e9:
                    c0:9b:72:d7:34:c5:ad:97:6e:fe:2d:74:aa:30:20:
                    64:0d:ca:62:3c:ca:81:f2:0c:f1:e6:ce:56:af:d3:
                    cb:ef:1e:7b:ff:1c:b9:d9:92:c3:75:d8:4a:a5:a1:
                    12:74:72:58:ce:7a:04:41:6f:dc:15:df:c7:f3:30:
                    f2:48:10:45:d0:a3:68:dc:3f:65:2c:51:09:47:6c:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:EF:EB:BF:C2:EF:FA:50:48:67:15:30:B3:92:47:A2:B1:70:EE
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:f3:78:b2:a4:2d:c0:24:50:49:00:1b:bf:4d:b8:65:d8:
         62:69:b3:0e:17:d8:17:59:3b:05:19:7d:e8:89:3d:c0:66:42:
         b6:3e:1a:b5:4d:74:e6:10:0f:e3:a4:cf:e4:3d:20:d9:2e:8f:
         36:03:10:40:6d:96:03:04:43:61:79:ae:74:6d:0e:9f:59:b6:
         99:82:24:d5:e3:d5:74:5a:ca:15:9d:51:ad:ea:06:cc:e3:f6:
         9a:c4:48:46:88:2a:06:af:4a:eb:79:a8:8a:2f:05:e8:96:ef:
         64:c7:a2:17:c0:27:38:fb:d4:29:3e:65:f4:78:19:8f:f0:ea:
         32:f1:2a:ef:ad:e9:d7:22:b1:88:62:90:f0:a2:e2:41:83:f0:
         e3:b0:f9:86:5e:d8:79:c7:86:2b:6d:36:27:2b:da:75:92:15:
         54:f9:c7:c2:1a:04:cf:6d:b9:a2:52:f9:5f:d0:cd:f8:af:4e:
         b3:7f:26:b0:46:ba:86:6e:a0:fc:14:64:6d:48:ba:64:c8:37:
         8f:c8:e8:3d:c8:c0:db:09:ec:32:c0:56:43:cf:b2:74:80:57:
         34:6e:45:a7:f7:6d:a5:c8:b8:3e:09:a6:ef:e9:0d:9a:c9:07:
         88:f5:50:52:9f:2d:a5:a5:f8:62:2e:ab:16:01:a0:d7:ed:92:
         8c:31:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org