Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5662F17A90EC11ED96C15AF7F1222468.roa
File:                     5662F17A90EC11ED96C15AF7F1222468.roa (raw, json)
Hash identifier:          T+ueZ4mZW+1qzWl5BI3WBYxi0S+XJlg6cF0xv+hp1F8=
Subject key identifier:   E9:B0:27:BC:1E:D7:A3:66:2B:50:BA:07:E5:0F:73:F0:10:9D:4D:E8
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0B70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5662F17A90EC11ED96C15AF7F1222468.roa
Signing time:             Tue 10 Jan 2023 13:40:26 +0000
ROA not before:           Tue 10 Jan 2023 13:40:22 +0000
ROA not after:            Wed 10 Jan 2024 13:40:22 +0000
asID:                     35913
IP address blocks:        154.127.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 10 13:40:22 2023 GMT
            Not After : Jan 10 13:40:22 2024 GMT
        Subject: CN=63bd6ac9-341c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:6c:6a:57:d7:a1:a1:65:1c:07:95:f7:dd:
                    af:09:0c:2f:88:74:83:a0:9f:51:27:c2:b6:8d:fb:
                    b5:26:02:c5:13:01:be:ea:47:db:4c:bc:df:0c:d2:
                    a6:78:7f:54:c8:44:98:0f:25:d6:c7:5b:fe:15:0c:
                    fd:d3:c6:7f:65:58:33:29:8d:a2:3f:50:62:54:0b:
                    7b:29:31:26:63:8a:60:03:48:70:80:c9:6d:04:e0:
                    2a:30:e4:35:17:9c:d5:a9:eb:ce:25:0d:ce:14:c9:
                    b6:2d:4f:2c:19:cb:8c:c6:3f:4c:96:af:12:8d:e4:
                    8a:52:87:57:86:b7:4e:6c:f7:c9:b2:16:5e:a5:2c:
                    91:f5:d3:5a:a5:4c:e6:42:8c:79:12:68:89:56:24:
                    32:40:46:51:b5:48:19:ea:d4:57:e1:12:58:48:4d:
                    88:44:99:53:c9:0b:62:3a:d3:2f:f6:38:63:fc:58:
                    8f:ee:13:fb:f4:10:d3:04:b9:74:2d:d8:23:e0:45:
                    e4:cf:84:0e:e0:1f:a4:0d:8e:ab:1b:9c:4e:dd:5b:
                    b5:57:9b:61:ed:4e:00:90:f8:1e:2a:5a:94:03:76:
                    2a:70:e6:78:00:b7:63:f4:c4:82:59:fe:c1:2a:cb:
                    82:06:4d:c3:c5:06:e2:5e:ab:3c:42:d0:1d:6f:ee:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:27:BC:1E:D7:A3:66:2B:50:BA:07:E5:0F:73:F0:10:9D:4D:E8
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5662F17A90EC11ED96C15AF7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:3f:9c:4b:13:54:fa:36:7e:14:a0:c7:1d:79:d7:7e:cf:
         ba:d9:cb:79:81:91:c9:de:3e:79:8d:2e:ee:44:fe:10:62:46:
         d6:52:8a:04:83:9f:03:fb:17:d6:f7:0a:5a:1e:88:46:de:6e:
         bd:21:17:d7:73:d2:92:b4:62:e6:5f:ab:05:c7:df:bc:72:45:
         c9:ee:18:d5:82:f6:97:e3:00:f1:2c:8d:85:9a:e6:7f:84:6c:
         6c:66:67:e1:00:fa:a9:ee:4d:30:3b:45:e5:06:3e:e6:28:14:
         52:7b:af:94:02:de:f1:47:e3:46:6b:a7:0d:ee:03:ca:8e:14:
         5b:15:ea:71:7f:e7:2d:98:1b:32:d0:0a:1f:80:98:b4:2e:c9:
         7d:4e:a5:d0:d4:57:d1:58:0b:df:dd:db:5d:bd:c4:7e:49:7d:
         ed:75:1c:ca:bd:7f:0e:5a:5c:39:f3:ac:07:58:ef:f1:b4:09:
         42:b2:28:48:b9:a5:8d:dc:a0:fd:01:a6:c1:87:ae:d9:cf:55:
         56:71:2e:46:16:a7:ca:dd:b0:c1:33:72:38:e1:bf:0c:59:13:
         07:73:4a:21:8a:1b:55:13:39:e8:cb:40:82:64:04:e9:13:9a:
         36:2f:5d:9d:f9:35:4b:c6:16:c4:50:e7:6f:b3:2a:30:28:59:
         ef:d6:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:38 2024 by rpki-client on console-ams.rpki-client.org