Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
File:                     8645BFF6FE2B11ED9378747C4AD9E6FC.roa (raw, json)
Hash identifier:          ypGZy6gZ+HCsFuuHw3CtbOFZY7Y96c+7iYzIGs3OkuE=
Subject key identifier:   C3:38:BF:68:01:58:8F:74:00:2D:26:DC:B5:8D:15:11:02:3B:74:FC
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0D
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
Signing time:             Mon 29 May 2023 14:17:21 +0000
ROA not before:           Mon 29 May 2023 14:17:17 +0000
ROA not after:            Fri 29 Dec 2023 14:17:17 +0000
asID:                     327765
IP address blocks:        41.211.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 29 14:17:17 2023 GMT
            Not After : Dec 29 14:17:17 2023 GMT
        Subject: CN=6474b3f1-79ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:c4:2e:97:5d:8d:6b:14:24:11:90:9f:71:
                    f6:0b:42:9e:7f:0e:fe:0f:23:a8:53:db:c3:ea:42:
                    17:a2:f4:ac:17:90:43:c8:de:d5:db:74:c8:c1:aa:
                    a3:ff:80:6a:70:6d:76:95:9b:a4:44:3d:d4:1b:13:
                    43:47:d2:00:21:d6:0e:8b:79:2b:63:29:66:e5:be:
                    a4:0f:d7:6b:f7:83:1e:9d:8f:3a:be:03:2a:66:00:
                    4d:34:e2:63:2d:88:10:a5:18:87:8a:ff:08:ae:15:
                    96:16:28:c1:b9:1a:ca:91:93:b5:41:47:e4:7c:5b:
                    17:88:56:5a:cd:11:3e:31:03:2c:bf:ad:33:d8:a9:
                    f4:10:d0:b4:ce:d5:72:f2:56:6e:dd:51:f1:91:b2:
                    2a:ba:7c:e5:05:fe:e3:a5:5c:57:51:f2:f6:14:c8:
                    74:df:7f:08:29:b0:2c:0e:9a:b7:28:9b:73:ca:94:
                    2d:b9:c6:ea:37:b0:71:e7:4a:73:05:11:64:d3:b3:
                    8c:d6:31:06:47:4d:2e:06:a4:d8:ef:b0:a4:e8:57:
                    cd:60:f5:c4:31:e8:e2:70:18:3c:c3:fc:73:5f:03:
                    b7:f8:69:63:09:db:53:43:aa:04:0f:f4:a1:f4:57:
                    4e:80:00:5c:df:53:69:b4:f1:14:4b:11:b8:62:ef:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:BF:68:01:58:8F:74:00:2D:26:DC:B5:8D:15:11:02:3B:74:FC
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:ec:0a:d6:fe:3d:f4:4b:75:ed:84:0c:74:a5:07:cf:41:
         7c:c8:05:22:56:2e:d6:ad:06:50:9a:3f:42:b4:79:76:b9:78:
         02:1b:40:6b:e8:58:66:ec:35:18:25:f7:b4:ab:73:69:1e:16:
         50:b8:30:c4:a0:93:cd:35:f8:84:08:f7:e9:3a:82:8a:58:5c:
         41:4d:bc:bf:b9:ba:fa:b2:72:1c:c7:22:12:a4:c1:f9:88:2a:
         18:40:6a:e9:64:36:b5:15:48:cd:7c:79:d6:5d:ea:92:86:09:
         da:9b:96:55:e0:51:62:4c:dc:8f:3a:34:9f:4f:05:19:14:61:
         eb:da:cc:60:0d:b0:95:13:bb:16:24:0a:78:ca:e9:a2:a1:31:
         72:2c:99:b5:f1:42:68:f4:a2:c2:00:9a:2d:47:ec:02:61:5f:
         0e:98:d5:77:f4:27:dd:f9:da:4e:4a:f7:9a:08:38:c9:fa:b6:
         24:ed:f7:dd:ba:5e:19:62:d6:81:40:8c:08:bb:10:f0:d6:c7:
         3b:f3:4d:f1:c6:7e:6d:04:28:97:42:fa:b1:0c:9c:ee:c6:ec:
         85:34:4a:60:8f:16:96:76:b1:99:7f:15:02:a5:5b:aa:58:2c:
         85:fb:5f:ca:94:d1:44:e2:60:5d:b5:0d:7b:29:e3:86:ce:eb:
         97:88:ac:c3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
MjNFMUFGMTEwLwYDVQQFEyhEMTEwREEzMjJGOTk4NUNGQkVDMjhDQTlDRTg1MjA0
NDQ4NjZCQTM3MB4XDTIzMDUyOTE0MTcxN1oXDTIzMTIyOTE0MTcxN1owGDEWMBQG
A1UEAxMNNjQ3NGIzZjEtNzlhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALRexC6XXY1rFCQRkJ9x9gtCnn8O/g8jqFPbw+pCF6L0rBeQQ8je1dt0yMGq
o/+AanBtdpWbpEQ91BsTQ0fSACHWDot5K2MpZuW+pA/Xa/eDHp2POr4DKmYATTTi
Yy2IEKUYh4r/CK4VlhYowbkaypGTtUFH5HxbF4hWWs0RPjEDLL+tM9ip9BDQtM7V
cvJWbt1R8ZGyKrp85QX+46VcV1Hy9hTIdN9/CCmwLA6atyibc8qULbnG6jewcedK
cwURZNOzjNYxBkdNLgak2O+wpOhXzWD1xDHo4nAYPMP8c18Dt/hpYwnbU0OqBA/0
ofRXToAAXN9TabTxFEsRuGLvo40CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTDOL9o
AViPdAAtJty1jRURAjt0/DAfBgNVHSMEGDAWgBTRENoyL5mFz77CjKnOhSBESGa6
NzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzIzRTEvN0UzRkEzRjBGQTE5MTFFREJFOEVFNDI1NEFEOUU2RkMvMFJEYU1p
LVpoYy0td295cHpvVWdSRWhtdWpjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMFJEYU1pLVpoYy0td295cHpvVWdSRWhtdWpjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIzRTEvN0UzRkEzRjBGQTE5MTFFREJFOEVFNDI1NEFE
OUU2RkMvODY0NUJGRjZGRTJCMTFFRDkzNzg3NDdDNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACnTJTANBgkqhkiG9w0BAQsF
AAOCAQEADDHsCtb+PfRLde2EDHSlB89BfMgFIlYu1q0GUJo/QrR5drl4AhtAa+hY
Zuw1GCX3tKtzaR4WULgwxKCTzTX4hAj36TqCilhcQU28v7m6+rJyHMciEqTB+Ygq
GEBq6WQ2tRVIzXx51l3qkoYJ2puWVeBRYkzcjzo0n08FGRRh69rMYA2wlRO7FiQK
eMrpoqExciyZtfFCaPSiwgCaLUfsAmFfDpjVd/Qn3fnaTkr3mgg4yfq2JO333bpe
GWLWgUCMCLsQ8NbHO/NN8cZ+bQQol0L6sQyc7sbshTRKYI8WlnaxmX8VAqVbqlgs
hftfypTRROJgXbUNeynjhs7rl4isww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org