Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
File:                     6240505C2DBC11ED9CA47FBBF1222468.roa (raw, json)
Hash identifier:          4NCiqk5qQOvEBRlTU25SOuZHmgzcCKTUJADc/5pZAkk=
Subject key identifier:   98:B8:C5:47:25:8D:88:56:AE:23:EE:C0:F8:44:EE:18:E7:D3:14:16
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       023B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
Signing time:             Tue 06 Sep 2022 08:17:44 +0000
ROA not before:           Tue 06 Sep 2022 08:17:41 +0000
ROA not after:            Mon 31 Jul 2023 08:17:41 +0000
asID:                     22724
IP address blocks:        102.177.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep  6 08:17:41 2022 GMT
            Not After : Jul 31 08:17:41 2023 GMT
        Subject: CN=63170228-3f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:7a:aa:20:06:94:0a:2c:1e:0f:1e:d5:29:
                    3e:d9:97:a6:ba:9b:74:b4:b4:aa:de:7f:83:1a:7f:
                    29:8d:b8:90:8c:c3:f9:63:bd:e2:ce:53:ac:85:41:
                    51:93:b0:26:73:c5:44:9f:76:4e:4a:57:d3:f4:f0:
                    07:a1:ec:3d:2c:2a:4b:7d:bc:bb:be:ce:a7:0f:b9:
                    a8:bb:62:33:a8:24:d1:a7:4c:0c:b5:c3:60:82:dd:
                    ee:46:31:76:66:b6:e0:08:89:b4:f1:b6:66:77:a3:
                    fe:3a:49:74:eb:31:f9:3b:47:b2:2d:01:a7:0d:de:
                    8c:53:ca:1e:3d:b3:f2:4c:df:60:08:b6:d2:9d:55:
                    20:3b:32:bb:03:87:e3:7f:b8:81:35:52:d2:cc:e9:
                    8d:6d:d1:2b:29:81:6c:b3:29:7f:97:88:65:01:ac:
                    c5:e6:d3:42:a6:f8:fa:11:6a:2c:11:9e:65:c1:04:
                    e4:0e:26:1c:43:ee:32:e7:03:72:21:c5:e2:4d:2f:
                    5c:ec:d8:d1:e5:f3:57:5d:a1:17:ad:09:6a:ef:13:
                    11:c4:21:fa:59:92:22:07:7c:cc:6d:7c:86:c6:dc:
                    2c:50:e0:85:49:d6:7c:cd:7d:d3:2b:17:2a:fe:87:
                    a0:78:e3:81:fb:56:dc:34:30:47:c9:39:28:84:c7:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:C5:47:25:8D:88:56:AE:23:EE:C0:F8:44:EE:18:E7:D3:14:16
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:dc:bc:2a:2a:64:6a:c6:2c:1d:79:4e:d3:5f:cd:f9:35:
         99:14:d7:04:dc:d9:66:89:11:db:56:ca:b0:55:4f:83:34:eb:
         20:ae:3f:25:85:3e:02:56:78:3a:a9:c9:f8:d6:c5:43:eb:e6:
         80:56:52:b2:f7:10:e2:bc:ec:61:8d:d9:d1:01:95:cb:66:f1:
         2f:15:84:42:76:99:40:9a:66:31:76:12:19:db:89:00:11:fe:
         f1:cd:71:63:e6:e9:8e:3e:95:66:1f:84:19:8c:79:72:6b:5d:
         6b:58:4b:30:9c:f4:2a:ad:9d:ab:9a:ac:d5:5f:76:85:7e:14:
         7c:56:9c:20:88:e2:1c:5c:4c:82:95:14:1f:79:00:78:1b:ce:
         af:51:11:8b:99:f6:32:d8:72:f2:d6:0b:24:04:a2:96:94:22:
         8a:2a:a5:49:e2:e4:aa:07:24:04:83:d4:ae:dc:8b:73:81:c2:
         e7:3d:ad:57:9e:a1:f5:49:30:89:e2:46:1f:90:1b:d1:e2:51:
         fe:fc:41:ee:10:20:c1:c4:d7:35:0a:78:e5:72:a3:9c:49:cc:
         a6:50:fe:13:e5:91:2e:4d:35:6f:49:08:76:a7:41:5a:73:43:
         de:f6:7f:f5:90:b2:bc:d8:f6:d5:c4:2b:b6:20:14:47:30:cd:
         e9:1b:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:51:21 2023 by rpki-client on console-ams.rpki-client.org