Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/50E98DA0448811ECBC315F69D8A014CE.roa
File:                     50E98DA0448811ECBC315F69D8A014CE.roa (raw, json)
Hash identifier:          4enaC8iCXT3PPYvLWXVuz1j11SC1R0GLfxsPM4ty1wc=
Subject key identifier:   30:23:81:73:E5:AD:9B:7A:F5:61:08:58:73:61:88:BC:04:0C:97:13
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       F6
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/50E98DA0448811ECBC315F69D8A014CE.roa
Signing time:             Sat 13 Nov 2021 13:48:00 +0000
ROA not before:           Sat 13 Nov 2021 13:47:57 +0000
ROA not after:            Thu 04 Aug 2022 13:47:57 +0000
asID:                     54527
IP address blocks:        102.177.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 13 13:47:57 2021 GMT
            Not After : Aug  4 13:47:57 2022 GMT
        Subject: CN=618fc210-b001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:a2:77:e0:c2:06:37:36:ca:62:e6:26:14:
                    14:48:32:65:da:a6:63:e3:df:d0:35:cd:e9:57:75:
                    7d:fd:1d:dc:74:7a:86:a3:3a:fe:a0:9b:c1:cb:ae:
                    90:4e:92:2c:1c:a6:20:da:11:dd:fa:27:47:8f:39:
                    e0:36:52:50:c5:3f:28:e8:db:50:f1:c9:83:c3:d3:
                    b0:67:77:cd:a0:1e:bc:ea:c1:14:8b:07:40:7f:77:
                    2b:77:d8:6a:3f:86:8f:58:39:0d:08:bd:5c:58:2e:
                    ee:87:73:32:a0:f3:3b:b5:8c:a5:86:c7:ca:eb:de:
                    e6:98:65:97:b5:a2:14:ae:5e:45:fa:39:23:98:ac:
                    72:a1:6c:4e:63:9f:42:e8:e4:38:01:a4:f1:ab:4f:
                    5e:3e:84:f7:51:f3:6f:86:de:fd:f5:0c:85:68:e9:
                    68:d1:6f:b1:01:2a:f5:5b:f1:d4:af:bd:7a:ce:0c:
                    fe:0f:d6:57:fa:f3:7a:06:e1:65:05:de:a5:8b:8a:
                    e4:d3:a9:bc:7a:85:16:84:a5:e2:65:12:1c:81:41:
                    46:ea:55:fa:20:f0:f7:a4:30:8d:ba:81:d9:3c:14:
                    84:48:ef:f0:70:69:ab:a3:43:08:bf:59:76:6b:27:
                    30:9f:ae:60:3f:7a:2b:95:d1:ac:6a:e4:a0:fa:cd:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:23:81:73:E5:AD:9B:7A:F5:61:08:58:73:61:88:BC:04:0C:97:13
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/50E98DA0448811ECBC315F69D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:47:f7:b8:15:1f:0c:77:01:27:9c:0b:15:89:6a:cd:42:
         c3:59:a5:c1:c5:80:4e:fd:07:7e:b9:6c:17:ec:50:df:af:d6:
         12:b7:bb:d1:a6:42:51:22:e3:72:13:ef:56:c4:dc:d7:59:bd:
         33:c2:25:ed:93:28:e5:27:d6:1b:88:55:ba:9e:52:e7:e3:d7:
         4f:e1:8f:dd:f3:78:5b:c1:0f:1d:d8:1f:c9:80:2e:a1:c3:25:
         8c:7e:7e:99:8a:15:8e:0c:3d:a2:ba:89:19:10:f4:0a:1d:39:
         9f:0d:bb:b1:f7:ed:b6:fc:8e:09:4d:76:db:ce:c0:2e:c8:86:
         f1:db:9a:ff:a5:76:6f:77:59:52:32:fc:a5:fa:30:be:2a:ea:
         92:0e:90:a7:ee:56:3a:da:80:c8:40:90:8b:f1:f8:0b:b6:cb:
         95:95:f4:57:87:5c:db:6d:75:b5:20:53:f4:be:84:ad:f5:9a:
         aa:8a:de:6f:26:ac:89:e5:55:d6:e9:b3:40:00:72:63:11:53:
         c8:e3:4d:44:54:f9:b8:eb:09:70:b4:6b:35:b4:0a:dc:b0:2d:
         01:91:1f:25:97:ac:01:35:59:79:48:83:08:04:9a:ea:a2:36:
         67:35:46:93:47:6a:b7:90:41:f9:29:5e:de:35:3b:56:42:6b:
         8d:d4:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org