Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E2E8D37A9E7111ED948284A9F1222468.roa
File:                     E2E8D37A9E7111ED948284A9F1222468.roa (raw, json)
Hash identifier:          Ycxj6lxqHAejIiuLDz3CypdlFQNe3bH0MhiTrZk7Q60=
Subject key identifier:   C7:CC:B1:15:BE:E2:61:2E:88:DC:31:4D:83:61:EF:38:3B:82:52:1A
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       02DC
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E2E8D37A9E7111ED948284A9F1222468.roa
Signing time:             Fri 27 Jan 2023 18:39:09 +0000
ROA not before:           Fri 27 Jan 2023 18:39:04 +0000
ROA not after:            Tue 28 Feb 2023 18:39:04 +0000
asID:                     212708
IP address blocks:        102.177.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jan 27 18:39:04 2023 GMT
            Not After : Feb 28 18:39:04 2023 GMT
        Subject: CN=63d41a4d-5f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:3a:d5:b5:77:b9:b3:44:25:f7:89:5b:cf:
                    0f:b6:d9:28:79:2e:81:c6:2b:49:1a:49:1e:fb:c8:
                    fc:c5:b1:4c:e5:0e:84:c5:c4:c0:5d:a9:22:bf:0f:
                    6c:5a:db:34:bb:22:18:50:38:2f:6c:6f:17:f5:c6:
                    9c:90:6a:c4:4e:fe:cc:29:41:4a:da:d8:9e:c6:7f:
                    37:04:f1:8e:be:fc:07:7f:31:49:ea:8b:5a:62:b6:
                    60:12:3d:e1:96:a6:2c:91:df:ec:23:2d:ad:ab:7e:
                    a1:cc:39:6b:f2:12:c0:a0:bb:c3:df:81:2f:d0:a4:
                    06:d8:4b:84:94:cf:c1:6a:10:91:b6:90:26:b0:ab:
                    dd:9a:9c:e5:ca:42:44:45:40:6a:0c:75:35:cd:32:
                    fd:ed:5c:5d:3f:19:d5:c7:40:76:4a:81:bf:36:a9:
                    3c:59:20:84:51:3d:0d:2b:5d:ef:e5:28:e7:4a:7b:
                    0a:d3:18:7b:6a:a7:8d:7e:0d:f0:4b:21:0a:02:eb:
                    d9:26:18:f6:ea:60:cc:a3:2b:40:fb:6d:b8:24:b5:
                    e4:80:b0:25:5c:09:58:93:3e:54:55:a2:d2:ff:6f:
                    38:8c:ba:f3:ad:f9:81:6d:1a:08:44:77:93:b2:07:
                    02:42:b9:cc:f3:4e:ff:14:aa:65:73:f4:c2:65:b4:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:B1:15:BE:E2:61:2E:88:DC:31:4D:83:61:EF:38:3B:82:52:1A
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E2E8D37A9E7111ED948284A9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:5b:e7:2c:6a:f3:f2:02:54:c8:f9:2d:43:6b:68:3a:4a:
         4c:20:f8:76:a4:02:48:9c:33:6e:6b:cc:53:1d:73:2c:5b:eb:
         b7:a9:d2:ae:43:2f:20:08:ae:0b:dd:c6:f0:dd:d3:2f:1f:8e:
         fb:7e:84:c1:b4:be:0c:73:3e:d4:33:d6:26:ae:cd:c1:14:85:
         b7:c2:05:c8:83:c6:71:93:5c:45:44:1d:a3:a7:b6:4a:9d:a1:
         a8:5e:0f:58:11:30:b3:4d:1f:f2:61:11:4c:ad:87:37:75:0d:
         7d:fe:a6:bf:d9:60:a9:4c:e7:b3:6b:a1:86:12:b9:09:e6:26:
         aa:aa:c2:1e:19:24:cf:18:a3:0a:c0:da:e9:6e:98:e2:dc:22:
         4c:dd:30:f2:b2:6b:04:df:8b:e8:9e:34:b5:13:29:6a:54:6e:
         b4:ed:b2:71:3a:ba:8d:f4:67:52:91:a1:11:c0:af:5a:9a:b0:
         26:46:56:34:79:f9:65:7c:f0:b0:ef:12:af:c0:e1:48:fa:e8:
         c3:f0:86:e8:e5:97:d3:ce:8d:17:08:a6:04:fe:5b:27:07:19:
         5b:cb:58:a3:d0:6d:f3:7c:cb:bc:da:83:89:03:6a:27:72:25:
         eb:f3:b4:87:38:64:b4:74:5c:7a:d5:20:a7:6d:55:ea:8e:94:
         8a:4a:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org