Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/EE8BB556FBD411ED87394E664AD9E6FC.roa
File:                     EE8BB556FBD411ED87394E664AD9E6FC.roa (raw, json)
Hash identifier:          WzwOalc9mLJPyDD6BovPN/VsuyxDBX2K03dPwyLZ/tQ=
Subject key identifier:   6D:3E:58:8C:C5:21:A7:E5:D8:19:A1:9D:CE:C6:6D:4F:6C:79:43:40
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       06
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/EE8BB556FBD411ED87394E664AD9E6FC.roa
Signing time:             Fri 26 May 2023 14:52:27 +0000
ROA not before:           Fri 26 May 2023 14:52:24 +0000
ROA not after:            Fri 29 Dec 2023 14:52:24 +0000
asID:                     327765
IP address blocks:        41.211.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 26 14:52:24 2023 GMT
            Not After : Dec 29 14:52:24 2023 GMT
        Subject: CN=6470c7ab-7f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:d3:8a:1c:84:d0:16:a4:7c:1e:90:0e:1f:
                    a8:ed:37:9e:1b:4f:4a:a1:ea:86:a1:bf:9a:72:03:
                    a9:74:8f:9b:5a:8e:d4:4b:3f:70:02:58:1c:31:ef:
                    be:7a:c9:a2:16:5d:99:de:e2:c5:8a:49:51:c5:b4:
                    6d:29:33:ad:74:1a:9c:2a:1f:2d:45:43:b3:9d:eb:
                    b2:49:4d:e3:08:fe:40:60:2d:55:d4:05:5b:fe:69:
                    86:67:ab:bf:66:22:81:d6:08:86:6b:1a:08:ef:cc:
                    06:cf:c0:69:28:79:03:4c:08:27:ef:19:2b:33:4f:
                    5a:d5:17:11:80:64:c9:f5:fa:a0:07:db:11:1a:fd:
                    07:3e:d8:62:62:ff:46:b1:46:29:95:49:66:85:6a:
                    39:84:fa:ad:69:9d:a4:4b:66:6e:2d:35:c7:56:ee:
                    e4:91:59:ca:70:91:74:3f:d5:6a:f8:41:ff:27:ec:
                    af:87:92:26:99:1b:3f:78:0e:1a:09:98:06:58:8d:
                    39:16:27:77:11:68:c7:1e:38:13:dc:89:05:8d:1f:
                    c5:92:5d:ed:32:03:d9:f1:e7:ec:40:53:48:51:aa:
                    6c:63:91:46:2d:29:06:65:09:77:8f:4c:9f:33:6d:
                    6d:0a:a3:87:a1:d4:3a:af:ae:e1:e1:6f:91:fb:c5:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:58:8C:C5:21:A7:E5:D8:19:A1:9D:CE:C6:6D:4F:6C:79:43:40
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/EE8BB556FBD411ED87394E664AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:71:6d:72:fa:a0:f5:b7:dd:bc:57:a9:e6:da:76:9c:84:4a:
         a5:79:8e:2e:36:d4:1b:32:b6:6a:f3:22:68:66:09:78:85:93:
         03:bd:dd:3e:53:fb:a6:0f:34:55:7d:f9:09:19:6c:91:fe:a3:
         e9:ef:59:42:02:b3:d1:ad:66:d9:f2:09:54:d5:af:5e:36:c2:
         97:a3:28:18:43:be:32:62:96:23:01:21:f1:8f:f4:e7:69:a9:
         da:19:66:85:6d:c3:b7:b8:c8:77:0a:14:52:04:0f:6e:e2:d0:
         7d:1e:8d:55:9a:8b:e5:37:af:14:72:19:70:34:fc:cf:f5:27:
         38:6a:af:73:21:bb:71:ac:fb:ce:9e:f3:e2:44:ec:9d:b7:c6:
         83:b9:75:4e:42:6c:07:d0:2c:cf:b2:a0:21:b8:ea:71:7f:a5:
         b1:06:95:32:dc:26:31:5e:2b:5a:58:98:7f:fb:11:eb:a5:27:
         09:c3:22:04:71:21:86:d1:86:92:f2:f9:ae:8a:d4:38:fd:f8:
         82:b3:eb:c7:76:b2:a3:4d:ba:e7:04:c5:cb:2e:e1:df:d3:1d:
         89:e3:52:9f:a7:ec:95:c3:f9:30:13:00:0d:24:bb:ba:e6:c3:
         84:57:44:d4:01:2f:37:a2:97:38:7a:5f:be:4e:99:08:3d:6b:
         3e:b6:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org