Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C7890378391D11EF91565055762E951A.roa
File:                     C7890378391D11EF91565055762E951A.roa (raw, json)
Hash identifier:          hQ0GNaDewSACu9rkKgIh0rTQK3oRXkqKPftT3W5LR18=
Subject key identifier:   4A:B1:78:FA:00:C4:E0:9E:65:2D:3F:DF:E5:EE:CF:A1:F7:4D:E2:69
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0553
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C7890378391D11EF91565055762E951A.roa
Signing time:             Wed 03 Jul 2024 09:22:34 +0000
ROA not before:           Wed 03 Jul 2024 09:22:30 +0000
ROA not after:            Fri 26 Jul 2024 09:22:30 +0000
asID:                     23470
IP address blocks:        102.177.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul  3 09:22:30 2024 GMT
            Not After : Jul 26 09:22:30 2024 GMT
        Subject: CN=6685185a-e41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:f7:37:37:ea:6f:1f:e0:26:af:ea:b3:18:
                    35:7f:a7:da:64:59:2d:c2:fd:29:1b:1d:9e:c2:c9:
                    b6:ac:a7:d9:5a:3d:70:f0:dd:a3:4f:a5:b5:9d:ee:
                    96:11:b8:bd:20:a3:95:72:81:67:3e:cb:18:ee:28:
                    e7:72:43:cd:18:4e:07:af:a1:21:c4:6f:71:c4:56:
                    41:a0:75:50:59:80:45:1b:4c:f1:e9:e9:25:1d:a2:
                    08:e1:ab:b9:14:38:fd:40:a4:d4:b2:c0:16:e2:61:
                    3a:f9:d2:73:ee:86:2e:9f:38:67:b3:f0:75:0d:ed:
                    fe:df:c3:1c:75:71:46:4f:f4:d0:9a:fd:f2:fc:bb:
                    37:35:68:4b:82:4a:40:c4:86:2e:6b:fe:a3:93:56:
                    62:bc:44:53:2b:22:88:2e:11:ec:13:51:33:e4:b1:
                    2b:1e:a3:ed:c2:c9:cb:5c:c6:a7:a4:37:8a:bf:05:
                    f4:c3:4a:d2:66:c4:d0:cb:80:f0:67:a5:61:ab:96:
                    8b:5a:d0:98:97:3c:3f:f5:a3:b4:ed:d3:85:9c:50:
                    14:f1:a5:33:ec:e4:df:8d:ae:74:bf:86:23:d4:06:
                    9e:68:06:71:a7:fa:fd:49:0d:3b:9e:57:01:ee:73:
                    36:e1:7c:17:e4:de:a9:62:6b:85:62:4e:17:eb:b6:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B1:78:FA:00:C4:E0:9E:65:2D:3F:DF:E5:EE:CF:A1:F7:4D:E2:69
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C7890378391D11EF91565055762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:14:cc:2d:83:d0:9a:74:c0:93:f7:4d:b8:cf:d8:c3:cd:
         ba:58:88:42:8b:cb:96:ac:68:02:64:be:ac:46:f3:46:cd:0f:
         a4:35:90:9b:c4:6b:a6:e7:81:2d:97:d0:52:e2:09:81:45:10:
         18:41:2b:72:12:f2:00:49:a0:4f:da:b0:4a:04:bf:4b:3f:52:
         14:c6:f4:48:bd:fb:d7:8c:36:15:b5:88:f1:f1:b5:8f:d7:0c:
         66:7a:10:b3:c4:38:cc:06:88:dd:75:be:48:52:57:56:68:72:
         b3:73:3b:5f:0a:5f:a9:64:60:eb:40:1a:84:d0:56:88:ac:fe:
         ba:d4:e3:65:41:f3:26:7c:e2:f6:c5:c7:4c:09:70:c9:3e:c2:
         69:52:b0:75:e5:e9:da:6c:8d:d9:38:53:39:f9:bd:cd:68:50:
         dc:42:bd:a7:b9:ef:e8:c6:3c:a5:a6:df:cc:4f:84:d4:10:8b:
         00:71:f7:a2:e1:9c:6e:70:bf:cd:3f:6d:e7:8d:a3:56:53:80:
         aa:bf:f8:8e:07:0f:83:e1:48:f6:d0:33:a9:4b:f6:6f:e1:39:
         a2:ee:67:24:71:ab:87:81:7c:cf:b6:53:a9:03:43:36:86:1f:
         55:fe:49:87:c8:b4:72:1a:9c:68:26:67:af:c0:2a:d7:bc:6f:
         28:14:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:12:40 2024 by rpki-client on console-ams.rpki-client.org