Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/077B3938391E11EF972E6B59762E951A.roa
File:                     077B3938391E11EF972E6B59762E951A.roa (raw, json)
Hash identifier:          ZdGvN3PwljcRHjhhSo/evsuUuk+Qcf9ZpvYnQKsKQHU=
Subject key identifier:   EA:7D:75:09:BE:00:BA:22:C3:80:89:97:50:1B:CE:AD:02:81:F5:35
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0555
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/077B3938391E11EF972E6B59762E951A.roa
Signing time:             Wed 03 Jul 2024 09:24:21 +0000
ROA not before:           Wed 03 Jul 2024 09:24:17 +0000
ROA not after:            Mon 29 Jul 2024 09:24:17 +0000
asID:                     23470
IP address blocks:        102.177.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul  3 09:24:17 2024 GMT
            Not After : Jul 29 09:24:17 2024 GMT
        Subject: CN=668518c5-e012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:5f:83:6d:ee:cc:68:de:71:c9:d7:40:80:
                    d9:8b:8c:e0:be:ff:44:e8:9e:47:a5:4b:d8:c7:58:
                    22:72:bb:e9:12:6f:3e:bd:a7:02:f8:d7:2a:53:ec:
                    5c:07:04:d3:ed:bf:a9:ee:09:3b:d0:29:1f:f3:e9:
                    1c:ba:fa:d6:35:30:18:e8:fe:59:60:a2:5a:74:07:
                    8e:22:17:e4:f2:69:10:7d:6e:11:a7:d4:71:a2:00:
                    6b:8c:a7:cd:fd:42:d6:e7:e2:75:47:f5:3d:83:c0:
                    78:81:df:4c:03:e5:63:af:67:ce:0c:1d:45:02:6f:
                    14:30:27:75:03:b0:94:82:01:63:75:a2:59:7f:e1:
                    61:8c:2f:7f:fc:97:4b:92:a5:e5:6b:af:09:01:eb:
                    39:81:55:63:9e:d4:67:60:1a:36:7e:29:6e:88:10:
                    4e:4c:16:c5:ea:04:41:6e:88:97:8b:de:8c:45:7b:
                    9d:75:93:55:28:7a:29:35:54:35:c1:6e:db:ad:70:
                    05:f4:61:e4:a8:a1:d2:65:ed:fb:bc:af:00:14:f1:
                    34:c1:55:15:d1:3d:e8:11:26:b6:a2:a3:0f:87:15:
                    fe:c0:e5:be:5d:71:54:6f:52:00:6f:42:e3:eb:01:
                    bb:fe:7a:dc:45:22:6e:9a:1e:4b:04:b8:0f:66:05:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:75:09:BE:00:BA:22:C3:80:89:97:50:1B:CE:AD:02:81:F5:35
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/077B3938391E11EF972E6B59762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:39:6e:17:89:54:9f:e4:5d:48:d3:e8:54:97:a6:c0:b1:9e:
         10:66:28:55:db:82:ed:08:de:3d:a7:d9:6e:ba:a1:77:8e:82:
         c8:84:d5:31:d6:8f:24:55:16:7d:da:34:76:ea:bf:da:4c:4f:
         75:62:9b:62:77:d6:c5:62:8e:29:c2:3d:b3:98:62:63:e6:6a:
         09:d5:0b:4d:b3:dc:89:01:1c:8a:83:4c:aa:14:67:be:66:be:
         ef:95:e0:d5:31:47:8e:ee:f0:59:f0:87:4a:b3:a0:4a:49:9e:
         95:79:15:55:cf:b6:34:56:d4:54:14:6b:8c:b1:c9:ef:fa:cd:
         fb:2c:a5:e5:81:fb:46:3c:a3:78:d8:17:8b:66:4b:77:f5:94:
         34:18:37:18:0f:e0:4a:06:11:bf:d8:fb:ef:46:d1:fd:46:ee:
         52:16:24:a4:8e:76:e7:bf:83:ac:9b:f4:ff:8d:5b:77:51:54:
         cb:4d:81:39:77:65:2d:09:4b:57:58:d6:20:0e:e8:50:1c:a7:
         67:b4:26:db:8a:07:0f:cf:8d:ca:13:5b:23:c5:9c:2f:f4:c5:
         16:83:7b:a0:7b:0b:e3:85:57:69:b3:dd:c4:31:3a:53:59:fc:
         66:6a:d6:3d:2a:2e:6c:df:63:0b:15:c8:0c:96:74:ed:8e:70:
         c7:ee:f4:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA3MDMwOTI0MTdaFw0yNDA3MjkwOTI0MTdaMBgxFjAU
BgNVBAMTDTY2ODUxOGM1LWUwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB1F+Dbe7MaN5xyddAgNmLjOC+/0TonkelS9jHWCJyu+kSbz69pwL41ypT
7FwHBNPtv6nuCTvQKR/z6Ry6+tY1MBjo/llgolp0B44iF+TyaRB9bhGn1HGiAGuM
p839Qtbn4nVH9T2DwHiB30wD5WOvZ84MHUUCbxQwJ3UDsJSCAWN1oll/4WGML3/8
l0uSpeVrrwkB6zmBVWOe1GdgGjZ+KW6IEE5MFsXqBEFuiJeL3oxFe511k1Uoeik1
VDXBbtutcAX0YeSoodJl7fu8rwAU8TTBVRXRPegRJraiow+HFf7A5b5dcVRvUgBv
QuPrAbv+etxFIm6aHksEuA9mBVLrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6n11
Cb4AuiLDgImXUBvOrQKB9TUwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzA3N0IzOTM4MzkxRTExRUY5NzJFNkI1OTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbYwDQYJKoZIhvcNAQEL
BQADggEBAJU5bheJVJ/kXUjT6FSXpsCxnhBmKFXbgu0I3j2n2W66oXeOgsiE1THW
jyRVFn3aNHbqv9pMT3Vim2J31sVijinCPbOYYmPmagnVC02z3IkBHIqDTKoUZ75m
vu+V4NUxR47u8Fnwh0qzoEpJnpV5FVXPtjRW1FQUa4yxye/6zfsspeWB+0Y8o3jY
F4tmS3f1lDQYNxgP4EoGEb/Y++9G0f1G7lIWJKSOdue/g6yb9P+NW3dRVMtNgTl3
ZS0JS1dY1iAO6FAcp2e0JtuKBw/PjcoTWyPFnC/0xRaDe6B7C+OFV2mz3cQxOlNZ
/GZq1j0qLmzfYwsVyAyWdO2OcMfu9GY=
-----END CERTIFICATE-----
Generated at Tue Jul 30 03:01:05 2024 by rpki-client on console-ams.rpki-client.org