Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
File:                     DBF43F062DB911ED880CE1B4F1222468.roa (raw, json)
Hash identifier:          m3Qq8RG6bAQm4ptXk4g+dQAxUDbzs1SbakCs3g08j/s=
Subject key identifier:   B1:2E:59:DF:B4:C4:26:43:B0:7D:D6:6D:78:D6:2D:3F:78:6B:63:86
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       022F
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
Signing time:             Tue 06 Sep 2022 07:59:40 +0000
ROA not before:           Tue 06 Sep 2022 07:59:35 +0000
ROA not after:            Mon 31 Jul 2023 07:59:35 +0000
asID:                     22724
IP address blocks:        102.177.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep  6 07:59:35 2022 GMT
            Not After : Jul 31 07:59:35 2023 GMT
        Subject: CN=6316fdec-3d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:28:2a:63:03:5a:2c:96:04:73:3b:ca:e3:
                    ea:7c:06:52:14:42:8b:14:b4:b5:f4:30:79:cf:37:
                    a3:0d:c6:21:f3:94:b9:64:fe:45:81:e3:8a:7f:63:
                    b0:58:b0:bf:23:0e:a4:ff:6e:73:84:dc:45:bb:9c:
                    37:99:ee:78:cc:68:93:99:0d:42:78:93:51:4a:6f:
                    7e:d7:a8:ad:10:0e:f9:97:0d:72:48:d4:bd:c7:89:
                    2b:e9:88:a7:87:3c:a6:32:ff:e0:d6:22:bf:c2:3f:
                    de:d9:af:d6:a8:45:88:99:ca:7e:e8:6b:56:71:ed:
                    62:4b:7b:04:df:14:14:48:36:92:a7:57:7f:85:59:
                    35:d3:7b:4e:9a:e7:ed:1c:e7:86:de:29:91:bf:05:
                    e1:3e:d9:66:44:64:54:6b:55:86:89:4a:18:87:2a:
                    93:07:8d:7b:f1:0c:cf:a2:18:55:41:52:13:35:09:
                    47:6a:46:03:60:99:c4:ea:70:0b:73:11:86:fe:ef:
                    63:50:13:b4:bd:e4:cc:eb:8f:aa:f2:70:4c:66:80:
                    8a:3f:ad:0a:83:52:60:2a:23:e5:b8:75:bc:78:33:
                    b0:6a:52:da:9e:cc:ac:e6:f2:1f:bc:98:4d:e3:99:
                    92:5d:3e:58:51:b8:a0:d3:79:4d:35:74:d3:1a:82:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2E:59:DF:B4:C4:26:43:B0:7D:D6:6D:78:D6:2D:3F:78:6B:63:86
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:ac:76:d2:78:f3:27:84:f2:a9:4e:c3:b1:74:0d:c4:61:
         53:47:b2:79:85:f6:18:40:c1:5f:e1:a0:48:21:00:c3:ef:43:
         47:c0:c8:1f:95:67:31:e7:74:b2:a6:b2:a3:52:f1:99:7a:5e:
         9e:69:5a:ba:a9:48:2b:39:f5:04:5a:4b:fb:7b:d8:3c:d8:e7:
         49:15:4f:2e:d0:fb:79:5a:ca:15:96:c1:6c:5f:cc:9f:5d:75:
         1a:8d:a9:1a:6a:c7:92:d1:35:06:e1:8b:67:ac:42:b4:ef:ca:
         5e:2a:ec:3b:09:48:44:4a:25:35:bd:28:c8:14:38:6c:f6:e8:
         26:1e:28:93:49:a4:7f:b3:a4:7d:26:ad:16:53:08:82:ca:b9:
         72:bc:ea:6e:e1:5c:31:e9:c6:5c:9b:1e:f1:aa:d6:6e:ee:af:
         7f:c8:58:96:f2:5f:67:32:92:80:29:27:61:54:1d:f5:67:52:
         44:69:a4:a8:80:06:8d:e9:9e:e5:a2:cc:2c:c4:d0:96:bc:9d:
         9d:d8:97:cf:55:8e:ae:f1:a9:ad:44:45:76:02:ae:4a:92:5e:
         54:f0:17:74:cb:8d:08:20:4e:6e:a1:b6:0d:74:d4:f6:84:df:
         4e:c0:fa:43:12:55:66:dd:ca:54:1e:fb:77:a9:c4:c2:4d:0a:
         16:39:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:47:36 2023 by rpki-client on console-fra.rpki-client.org