Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/B7FADF5E961211EC9D7BC99D5A40D577.roa
File:                     B7FADF5E961211EC9D7BC99D5A40D577.roa (raw, json)
Hash identifier:          lbItaXPlr3FJ3xhA74tZ9rEquzb3trNN4t71vYi3zlw=
Subject key identifier:   A7:5F:E2:81:0A:75:36:06:FA:A1:80:C3:16:20:31:93:52:1A:0A:81
Certificate issuer:       /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial:       06
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/B7FADF5E961211EC9D7BC99D5A40D577.roa
Signing time:             Fri 25 Feb 2022 08:12:48 +0000
ROA not before:           Fri 25 Feb 2022 08:12:44 +0000
ROA not after:            Wed 31 Jan 2024 08:12:44 +0000
asID:                     37100
IP address blocks:        102.217.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
        Validity
            Not Before: Feb 25 08:12:44 2022 GMT
            Not After : Jan 31 08:12:44 2024 GMT
        Subject: CN=62188f80-c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:9b:0b:1e:32:1e:41:db:84:83:4c:f3:f7:
                    48:13:63:56:69:b0:e3:ba:00:2e:88:7c:94:09:e9:
                    3d:b3:d3:33:2e:15:15:1d:da:16:98:cc:31:ed:0e:
                    fa:14:91:4f:f2:ae:df:bc:f0:a5:8f:c0:6a:8c:2d:
                    22:b0:d9:d4:21:2b:8c:0c:48:c5:d9:c6:e1:84:f2:
                    1d:b2:ef:3a:99:11:13:b8:08:3a:6c:5f:7a:83:49:
                    4b:f3:84:63:15:b6:3a:df:d5:9c:fc:e6:77:16:a7:
                    97:e4:6d:68:fe:e6:39:b4:ca:8f:d2:d5:0e:2c:e6:
                    c4:f3:17:56:de:8c:16:22:e7:db:45:a2:ba:07:50:
                    57:74:c1:be:8b:bb:ef:ca:6b:0d:9e:1a:83:b0:4b:
                    b8:63:a7:60:c2:a0:5f:28:ba:69:37:38:68:79:3d:
                    6a:1a:45:8b:02:de:95:16:5e:a8:bb:89:cf:db:c5:
                    dd:9a:bb:38:e2:6d:94:4c:2b:a2:b0:1e:f6:cb:81:
                    b2:d0:60:9d:74:bb:3b:4c:26:6a:f9:45:3c:9a:8f:
                    17:71:a1:ea:18:3d:ff:ac:21:83:04:fa:d2:e8:a7:
                    53:ff:9f:ce:a1:4f:01:8b:4e:b1:27:d2:bb:13:8e:
                    f3:5f:ac:ec:f6:ad:96:d0:06:df:95:cf:d0:62:fb:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:E2:81:0A:75:36:06:FA:A1:80:C3:16:20:31:93:52:1A:0A:81
            X509v3 Authority Key Identifier:
                keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/B7FADF5E961211EC9D7BC99D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:82:38:ec:cf:fb:cc:29:76:e5:fc:e2:5a:be:33:e2:2c:
         5a:c3:d4:5a:2c:ff:53:a2:e5:d9:a1:db:9c:25:be:4f:6c:79:
         c5:57:20:4c:18:45:86:55:c8:86:64:8f:83:a8:a8:48:9b:9d:
         bf:fd:79:0f:a3:55:03:dd:04:b3:78:84:11:f0:fc:5a:49:a5:
         c4:f8:ae:fa:e0:6c:4a:96:d4:40:a3:4b:3c:a1:37:d1:ab:17:
         53:49:6e:74:ee:54:55:f1:d9:77:04:57:60:e5:f1:3f:39:08:
         68:76:dc:3f:6d:04:e7:a6:9e:30:9e:08:a2:fc:02:f1:13:c9:
         f8:86:f1:cc:fe:f7:cf:c8:7b:2d:ac:b0:3b:9f:26:1a:3d:1c:
         7a:61:70:04:30:15:a7:27:c1:c3:2c:9d:84:e0:af:60:b1:85:
         cf:7b:d4:55:75:a6:05:73:72:6a:1f:6f:0a:61:f9:37:21:4c:
         0a:1e:65:91:81:32:2a:c8:70:53:d7:54:c9:75:61:ec:08:b3:
         63:52:65:48:98:54:25:8c:30:bf:cb:fb:2b:95:8c:44:a5:70:
         a5:d3:42:89:11:04:63:86:7e:4d:1d:3f:1c:2f:3e:9d:60:32:
         91:b4:f8:be:c0:37:74:4f:2e:17:94:c5:94:f0:31:5c:50:40:
         3d:de:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org