Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/E7B3F230FE2B11EDAC17997D4AD9E6FC.roa
File:                     E7B3F230FE2B11EDAC17997D4AD9E6FC.roa (raw, json)
Hash identifier:          fPSDkLmRAJ859d5AlrYRXazBbK3mmvscsZG0cr7DWj4=
Subject key identifier:   C0:A2:24:51:33:92:BB:21:A7:AB:3E:F7:23:82:4D:BB:6F:2B:19:02
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       11
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/E7B3F230FE2B11EDAC17997D4AD9E6FC.roa
Signing time:             Mon 29 May 2023 14:20:04 +0000
ROA not before:           Mon 29 May 2023 14:20:01 +0000
ROA not after:            Fri 29 Dec 2023 14:20:01 +0000
asID:                     327765
IP address blocks:        41.211.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 29 14:20:01 2023 GMT
            Not After : Dec 29 14:20:01 2023 GMT
        Subject: CN=6474b494-5409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:f8:61:53:3f:bd:64:b2:d1:70:9a:71:08:
                    da:ba:30:22:a9:58:cb:aa:4a:19:87:43:cb:e6:c6:
                    a6:31:90:b4:1e:b0:e9:37:52:93:1e:51:cb:96:5b:
                    e0:e2:ba:37:30:fc:e8:0b:3d:4e:f7:23:8b:64:8d:
                    7c:3e:67:41:89:2f:20:97:86:8b:77:e3:94:01:5d:
                    fc:ad:44:56:8a:96:6d:3c:23:0f:1b:e9:f9:97:ec:
                    a6:70:46:26:3d:19:df:fe:eb:b7:12:db:07:ee:98:
                    df:6e:d0:83:b2:8d:85:0b:5a:7f:1e:19:5e:cc:82:
                    2a:1c:ed:b0:cb:81:b5:08:fc:18:dd:de:1a:84:72:
                    f7:32:68:b6:50:c6:34:a7:7b:23:55:c8:22:4c:5f:
                    57:f6:10:cc:e0:74:27:fb:7c:6c:77:c2:57:64:38:
                    0e:06:9f:dd:55:be:1e:0d:91:7f:b9:5a:69:be:d8:
                    a4:6c:49:1f:dc:70:b5:8b:cb:42:f5:4a:0a:3d:0b:
                    50:3e:79:a3:de:4b:2c:66:38:b9:bc:45:be:74:90:
                    67:76:ed:7c:11:bb:3e:54:92:5b:6e:60:d2:d8:bd:
                    84:72:40:ef:06:09:2f:b1:39:dc:91:d2:34:7e:ff:
                    79:3b:9a:84:99:c9:77:8b:25:1a:8e:6c:a9:6a:bf:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:24:51:33:92:BB:21:A7:AB:3E:F7:23:82:4D:BB:6F:2B:19:02
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/E7B3F230FE2B11EDAC17997D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:4c:06:65:22:ed:5b:71:da:b5:8f:99:13:e2:21:f6:1f:26:
         1d:66:d0:bf:a3:fc:a0:f5:b3:c1:4d:6d:33:65:4f:a8:59:90:
         42:d4:c4:88:4b:f0:35:db:4f:f5:d3:4b:99:ed:af:eb:1a:c0:
         a6:b0:7b:7d:41:33:5e:1d:20:a7:72:1a:ce:81:73:df:4a:12:
         90:e8:9f:a5:5a:9c:a4:1a:9f:30:b2:55:37:c5:7b:38:37:07:
         8a:71:54:ae:b0:72:18:38:ab:60:4d:c6:d3:0b:02:cc:87:c7:
         3a:49:5e:47:66:cb:94:3a:2f:dd:88:da:3c:33:5c:55:93:f2:
         b8:6d:3e:0d:88:5f:f3:e6:b5:1d:a2:82:47:fa:d9:90:65:eb:
         1d:dc:e3:46:3c:89:36:77:de:ac:2f:58:42:f3:fc:44:22:bd:
         fe:3e:eb:f7:10:1d:a7:da:b9:f9:bd:f4:61:1a:a1:13:5a:de:
         7c:af:21:44:2a:e5:bf:49:6a:af:5a:49:76:b2:da:11:ab:4d:
         3a:db:98:53:0d:e6:68:ed:5f:d8:ea:65:f7:fd:d6:a2:d8:2f:
         d9:47:dd:3c:50:b4:2f:c8:b2:18:94:41:dd:82:b1:d4:13:2f:
         1b:cb:25:23:d0:db:07:36:d3:5c:bc:a5:02:1b:a2:b2:cd:79:
         cd:7e:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org