Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B31CB66AFE2B11ED9BC6187D4AD9E6FC.roa
File:                     B31CB66AFE2B11ED9BC6187D4AD9E6FC.roa (raw, json)
Hash identifier:          EMSXq88ZS3vlV/+piObfbv4v5RRY0FW8doykurNzih0=
Subject key identifier:   7A:05:73:E7:11:A9:79:C3:75:AA:E4:07:EE:30:B6:D8:39:68:08:27
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0F
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B31CB66AFE2B11ED9BC6187D4AD9E6FC.roa
Signing time:             Mon 29 May 2023 14:18:36 +0000
ROA not before:           Mon 29 May 2023 14:18:32 +0000
ROA not after:            Fri 29 Dec 2023 14:18:32 +0000
asID:                     327765
IP address blocks:        41.211.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 29 14:18:32 2023 GMT
            Not After : Dec 29 14:18:32 2023 GMT
        Subject: CN=6474b43c-199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:ce:33:1d:a2:6c:5c:5f:29:f3:c2:4e:28:
                    18:e8:40:10:dd:15:d4:ea:5d:0b:c6:28:76:55:38:
                    0d:55:25:1f:a1:2a:72:ae:f2:0b:4f:e6:c0:84:20:
                    93:e1:1e:0f:2d:3e:8b:5c:c9:c2:93:79:76:fc:44:
                    3c:16:7b:be:60:30:be:6c:7f:8e:a3:ba:6d:9e:64:
                    df:b7:f7:5f:2a:b0:0c:ee:15:63:5b:30:e8:73:a0:
                    c4:0f:2f:be:f4:c7:fd:a3:4f:e1:7a:19:9c:e8:80:
                    b2:17:dc:d8:cd:fe:ce:60:b5:62:c8:a0:86:cb:0a:
                    64:db:f6:ab:b5:0e:1e:3d:9a:84:f0:00:71:0f:88:
                    61:21:17:a7:0f:1f:25:81:fb:34:ce:1f:48:c8:73:
                    8a:b2:77:7a:97:83:c9:33:ef:0b:4c:3d:f4:eb:77:
                    bd:13:1c:26:e7:70:44:d2:98:a8:31:9e:3a:0f:42:
                    d6:c4:5b:d5:ca:0c:eb:10:f6:b8:ad:ac:ea:4a:e6:
                    73:c8:a3:7f:93:cd:5a:1f:dc:1e:2a:b0:8a:65:f2:
                    1b:cf:9e:ef:43:47:d1:22:ea:c9:de:77:3f:4e:2a:
                    83:36:8b:75:27:03:c9:3a:ec:8e:fd:4b:07:02:df:
                    5c:30:c5:36:68:10:24:29:07:15:9b:53:3a:b5:53:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:73:E7:11:A9:79:C3:75:AA:E4:07:EE:30:B6:D8:39:68:08:27
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B31CB66AFE2B11ED9BC6187D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:6a:c8:a6:52:7b:9e:98:09:36:01:bc:76:44:a8:94:ab:
         59:71:9e:17:df:91:65:e3:fe:f6:bd:75:82:2a:55:c1:30:c8:
         7b:05:4c:2f:2c:bd:cc:40:54:c6:32:fb:fb:b7:9c:fb:80:2e:
         75:7c:21:f7:b0:d9:3f:d5:75:92:23:fd:54:25:69:83:21:e3:
         89:69:aa:d4:8a:5f:54:4a:24:83:8d:36:65:8f:01:ab:4b:33:
         82:7b:a5:4c:ad:1f:ee:67:63:93:52:f0:a4:2e:8e:94:91:ad:
         2c:b2:82:6d:5c:6f:fd:96:b7:fa:94:05:fd:ff:07:03:27:19:
         be:10:32:d5:6f:73:35:1d:e6:c2:58:c6:6b:2a:65:52:3a:5e:
         31:a0:99:5d:20:c5:94:11:87:65:b2:f0:2c:2f:bc:de:38:90:
         c3:1d:29:a8:19:3b:eb:8c:73:ea:5d:e0:f6:55:52:48:08:eb:
         f2:54:76:3d:11:db:d0:0f:66:d1:b7:3f:82:c8:52:71:99:68:
         40:b0:5b:50:af:9d:42:98:2e:50:9d:b8:1b:46:e7:09:2e:9a:
         b4:06:74:fb:7d:47:49:fe:50:65:8e:cc:b0:38:f2:3c:71:35:
         f9:a7:7f:54:7d:72:71:bb:8b:02:5e:f5:d3:97:be:63:f8:59:
         a3:ba:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org