Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
File:                     92227C5A5D4511EE8283E82B4AD9E6FC.roa (raw, json)
Hash identifier:          7KHZRQid2YSIfxETIlfcyaKGdtG18VDnHt3JozX5SrQ=
Subject key identifier:   15:B2:30:FC:9A:AF:1A:25:42:2A:A0:17:C9:AB:35:F3:DB:34:B7:B3
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       90
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
Signing time:             Wed 27 Sep 2023 14:53:08 +0000
ROA not before:           Wed 27 Sep 2023 14:53:05 +0000
ROA not after:            Sun 31 Dec 2023 14:53:05 +0000
asID:                     327765
IP address blocks:        41.211.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Sep 27 14:53:05 2023 GMT
            Not After : Dec 31 14:53:05 2023 GMT
        Subject: CN=651441d4-0308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:ab:c7:27:13:8c:ca:2c:3e:37:4f:ee:4c:
                    4a:ad:ff:9b:24:fd:33:80:85:d2:ea:d0:2f:58:b7:
                    8e:b3:7f:a4:2d:bb:56:4d:fd:93:c8:48:6f:b2:2f:
                    36:16:b2:4f:67:e6:59:f9:aa:0d:a9:e3:d8:ea:c5:
                    c8:b5:9b:7c:11:68:a7:25:ee:c2:57:d3:8a:cc:17:
                    1e:24:75:fd:1a:43:ee:99:e9:36:4c:7a:41:95:61:
                    fa:65:ad:42:b8:e8:30:53:4e:35:76:d6:29:aa:3b:
                    ed:35:da:d3:ef:66:af:fe:72:7f:96:59:36:5e:a6:
                    4c:e1:20:4f:49:5c:24:96:66:5e:93:7a:3f:c0:35:
                    ba:5c:8e:41:91:a9:4f:01:7e:6c:cd:a1:5e:a8:76:
                    02:ff:2b:39:1a:b7:a0:51:cb:75:21:52:bb:63:7b:
                    3c:b3:b3:b7:6f:eb:e0:08:4e:b4:c9:c4:5d:42:02:
                    76:a2:fa:2c:dc:6d:96:95:b4:ec:92:58:6d:74:3f:
                    fb:21:2c:f1:b9:a3:bf:50:a0:19:29:79:f8:99:ad:
                    3b:70:fe:11:cf:f0:09:1c:b8:b9:8e:ce:25:ac:e0:
                    6d:fc:b0:60:a2:4c:ef:17:c2:fe:91:0e:55:c8:1b:
                    23:df:e1:5a:f6:ea:96:bd:18:ec:12:cd:07:c6:a4:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:30:FC:9A:AF:1A:25:42:2A:A0:17:C9:AB:35:F3:DB:34:B7:B3
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:56:c9:e0:42:a0:7e:45:c4:4e:bb:fc:06:31:28:ec:69:
         10:f1:98:b6:1d:aa:ab:ea:15:f9:dd:c8:e6:59:a7:94:33:42:
         51:ce:2b:48:32:07:45:04:0d:3c:80:24:97:23:30:34:39:e0:
         8d:69:81:c8:62:6a:68:19:a6:a2:4c:22:c9:81:fa:24:2c:c1:
         ee:ff:9f:41:fe:91:21:72:74:d3:e5:c0:49:1d:36:f1:05:59:
         2d:8c:17:83:0a:ee:bc:e2:69:0a:14:2f:34:b4:29:7e:55:1e:
         52:1d:c6:9f:27:e2:3f:56:95:95:b2:b6:05:fe:72:ac:d6:88:
         4a:73:ea:b3:20:36:22:0d:52:3a:ae:8d:79:78:26:37:56:c8:
         e4:86:b5:2c:e4:09:8a:e2:7b:17:78:5d:57:33:c3:3e:e2:b2:
         72:02:11:41:b2:1b:52:ad:92:68:7a:0a:8c:ee:f0:ae:a3:7e:
         86:6a:10:df:60:ac:ee:1a:8c:45:6c:ac:a1:2b:73:15:42:1c:
         bb:b9:4b:1a:15:7f:ce:59:3f:ee:69:4c:10:94:2b:2f:9d:b2:
         0d:b4:d3:ba:27:5c:05:6e:86:63:bc:3a:0e:0f:bd:65:74:01:
         05:dd:17:78:53:c5:5b:ba:16:00:02:9b:59:71:0e:d6:90:35:
         90:0a:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org