Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/01C9930E404411EF8FFEBB9F762E951A.roa
File:                     01C9930E404411EF8FFEBB9F762E951A.roa (raw, json)
Hash identifier:          6QvDTeAQw1N2lJOipkUaU01CzjfT7GSrgNKmPj0BQ7c=
Subject key identifier:   9C:CE:3B:1C:D2:7C:DB:77:74:D6:8A:C2:CF:62:59:30:17:93:CE:8B
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       02
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/01C9930E404411EF8FFEBB9F762E951A.roa
Signing time:             Fri 12 Jul 2024 11:43:50 +0000
ROA not before:           Fri 12 Jul 2024 11:43:47 +0000
ROA not after:            Thu 12 Sep 2024 11:43:47 +0000
asID:                     329404
IP address blocks:        102.209.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: Jul 12 11:43:47 2024 GMT
            Not After : Sep 12 11:43:47 2024 GMT
        Subject: CN=669116f6-6eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c5:03:58:f0:f6:4e:c8:d2:d5:64:8e:2f:aa:
                    21:7b:4b:4d:fe:e9:49:42:59:d3:6d:d9:5e:cd:c3:
                    d6:65:39:c2:75:6d:d2:fd:22:f5:77:42:ea:4a:c8:
                    cb:9b:4b:fd:c2:f7:c1:c3:75:78:28:23:59:47:73:
                    64:89:ae:4d:71:33:2f:47:37:cc:0f:e9:e5:82:f0:
                    b5:3b:31:1c:f8:35:88:57:6a:00:33:08:74:ba:30:
                    68:34:a2:94:ce:0d:2c:0b:d2:91:0b:f3:b1:bd:31:
                    7a:67:14:2a:92:c7:eb:08:16:c0:3b:00:09:67:70:
                    6c:5b:6f:42:bc:62:4a:3c:03:5b:a4:06:17:78:bc:
                    eb:a8:b4:cd:b8:01:15:b9:e2:2a:ad:4a:32:de:a1:
                    04:14:8a:28:7e:88:2f:2b:90:5b:17:05:97:5d:a8:
                    ca:b3:33:89:b5:e2:9e:e1:3e:95:48:56:56:e6:c6:
                    13:ed:4a:9a:77:8b:f7:c3:35:3d:35:72:39:d4:46:
                    25:ed:62:e8:d2:97:cb:7c:c3:79:a4:5c:6f:bb:da:
                    b8:3e:eb:fc:ac:1e:ee:24:00:92:85:df:ff:48:01:
                    a5:32:b0:36:fd:0e:03:d9:13:76:37:d2:4a:e6:e0:
                    a5:4c:a0:cf:40:10:2e:7c:3a:96:9c:9f:51:f0:5e:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CE:3B:1C:D2:7C:DB:77:74:D6:8A:C2:CF:62:59:30:17:93:CE:8B
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/01C9930E404411EF8FFEBB9F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:23:bb:e1:d5:6d:28:4b:f7:bb:7d:56:d3:64:6a:a5:da:df:
         db:b2:86:a7:a3:8b:3f:f8:f6:dd:70:3f:d9:0a:85:19:28:8a:
         16:e5:22:8f:18:e6:5d:96:3c:b4:0a:7b:67:3b:ab:a1:b6:ee:
         3a:9a:af:ac:ec:2b:ad:04:25:bb:92:80:08:7b:58:ae:85:73:
         36:d9:f4:54:2c:b4:66:2d:35:e7:ec:27:95:52:88:d0:d5:68:
         d1:ec:13:71:7a:78:e7:76:a1:1a:c5:8f:a9:c0:5c:43:6b:e3:
         ac:d1:27:1c:e9:df:f1:ed:c8:60:12:5c:de:18:53:29:bb:3d:
         0b:14:d6:f3:35:99:fc:df:96:af:13:89:be:3a:cf:a7:8f:28:
         3c:37:f5:65:84:1c:09:4f:5a:8a:e9:52:e8:2b:89:87:ac:8e:
         19:7b:c5:24:c8:49:ca:74:d7:d9:8d:5d:4b:f6:2d:b5:5d:a3:
         5c:b0:73:71:72:bf:57:54:b0:c4:4c:28:81:f3:51:36:63:0b:
         a3:8f:33:3e:15:2f:0b:76:62:bf:81:73:a8:26:e8:2a:51:4a:
         35:b4:5f:22:b5:a3:c4:84:f1:10:5a:84:28:a1:7e:b8:d0:53:
         d6:a3:8b:a8:9c:43:06:56:59:7b:92:a9:29:81:50:cf:d4:8f:
         33:1f:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 05:17:41 2024 by rpki-client on console-fra.rpki-client.org