Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/FDD64DDA050111EC806AC108D8A014CE.roa
File:                     FDD64DDA050111EC806AC108D8A014CE.roa (raw, json)
Hash identifier:          MuSS00EIzfVZ4IniJ28qlRK3OFuFsodNbjGJsTJFUaM=
Subject key identifier:   EA:AE:DB:B5:41:12:D3:E3:56:DF:62:91:CA:0F:37:0C:41:57:34:CC
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       33
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/FDD64DDA050111EC806AC108D8A014CE.roa
Signing time:             Tue 24 Aug 2021 17:38:46 +0000
ROA not before:           Tue 24 Aug 2021 17:38:41 +0000
ROA not after:            Wed 23 Aug 2023 17:38:41 +0000
asID:                     37790
IP address blocks:        196.60.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Aug 24 17:38:41 2021 GMT
            Not After : Aug 23 17:38:41 2023 GMT
        Subject: CN=61252ea6-b829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:f9:2e:fb:7f:4d:99:59:4d:9d:80:e2:b1:
                    27:28:69:ba:3f:9f:e5:fb:c2:05:e7:0d:c0:00:bc:
                    ed:e3:46:b0:e8:94:52:f3:1f:01:a7:98:b0:a3:ce:
                    6d:f3:b0:7a:d0:c1:bc:cb:2f:35:23:df:76:59:fa:
                    87:4f:81:ec:9a:79:95:35:b4:2e:2a:fd:57:83:63:
                    95:13:b0:90:34:31:af:37:75:67:ba:b2:62:90:03:
                    72:47:97:85:f3:49:ef:b4:e9:77:89:5b:30:6c:6a:
                    ec:58:d4:48:d0:ba:5a:8b:90:2e:9c:ee:9f:f2:0c:
                    fb:49:e4:19:33:64:b2:f6:79:27:38:24:c3:26:f5:
                    7f:66:90:38:5c:49:0b:19:a5:dc:2e:7d:52:73:e1:
                    60:51:66:ed:e4:ec:55:11:1d:d7:29:03:42:87:93:
                    7a:3e:5b:ab:6f:80:a2:84:2d:f2:c7:dd:0b:40:e3:
                    91:66:f2:d3:0b:21:86:39:d4:ea:c9:76:cf:a6:66:
                    4d:69:28:a3:9c:3b:69:a7:20:d7:b8:29:6b:7c:8b:
                    4e:bb:e2:74:56:d4:8b:98:88:69:d1:4b:3b:52:7b:
                    97:41:60:d6:79:b9:6d:8d:63:60:94:5c:86:5b:8d:
                    1d:f1:78:0c:ba:99:c6:95:99:89:e5:be:d6:9d:81:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AE:DB:B5:41:12:D3:E3:56:DF:62:91:CA:0F:37:0C:41:57:34:CC
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/FDD64DDA050111EC806AC108D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:5b:f2:8f:fb:8d:5d:b2:df:bd:49:af:34:fc:e6:8a:ba:
         04:78:c7:b5:23:da:46:4f:71:db:b7:11:ae:30:0a:c6:9c:59:
         05:08:9c:2f:b5:0b:04:e0:bc:d7:6d:d3:f8:d4:72:77:c2:b5:
         2f:ed:80:11:e8:e7:b5:15:07:4c:af:54:87:95:24:7b:b8:f3:
         f9:54:1e:64:79:55:07:09:8d:a9:4e:90:15:dc:87:13:b1:91:
         11:b3:da:31:0d:d1:9d:dc:1b:a7:9b:86:67:7a:49:0b:3d:1e:
         39:3d:4d:ff:08:bb:12:5f:5e:48:dc:d3:6d:d5:d6:f1:ae:55:
         0d:61:d4:e2:00:e0:d6:fc:88:1b:32:0c:49:a9:be:82:ff:12:
         87:14:d7:af:4d:6a:26:61:4a:28:96:1a:a8:77:12:49:49:35:
         79:87:8d:bd:e0:e2:fc:ab:89:ac:ba:6f:d2:98:18:ae:1f:13:
         7a:cd:45:f7:d4:d5:91:98:6c:2e:5f:79:b8:cc:6d:70:de:0b:
         5f:34:a3:fe:56:8c:ba:96:32:f0:ee:e5:b4:24:64:79:3e:a8:
         83:50:9f:91:6f:76:2e:e5:17:6f:54:18:fe:c9:1b:a5:94:7c:
         80:2d:ce:89:1f:3a:82:1c:8a:dc:35:e0:df:4f:23:37:ce:b7:
         bf:ba:86:51
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBMzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
NjBFN0FGMTEwLwYDVQQFEygxRjREQjlBQzZCNjMxMDhBMTlCRENEQkVFQ0ZGNDQ5
ODQyQzhENkEwMB4XDTIxMDgyNDE3Mzg0MVoXDTIzMDgyMzE3Mzg0MVowGDEWMBQG
A1UEAwwNNjEyNTJlYTYtYjgyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJem+S77f02ZWU2dgOKxJyhpuj+f5fvCBecNwAC87eNGsOiUUvMfAaeYsKPO
bfOwetDBvMsvNSPfdln6h0+B7Jp5lTW0Lir9V4NjlROwkDQxrzd1Z7qyYpADckeX
hfNJ77Tpd4lbMGxq7FjUSNC6WouQLpzun/IM+0nkGTNksvZ5Jzgkwyb1f2aQOFxJ
Cxml3C59UnPhYFFm7eTsVREd1ykDQoeTej5bq2+AooQt8sfdC0DjkWby0wshhjnU
6sl2z6ZmTWkoo5w7aacg17gpa3yLTrvidFbUi5iIadFLO1J7l0Fg1nm5bY1jYJRc
hluNHfF4DLqZxpWZieW+1p2B8r8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTqrtu1
QRLT41bfYpHKDzcMQVc0zDAfBgNVHSMEGDAWgBQfTbmsa2MQihm9zb7s/0SYQsjW
oDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhBMDE0Q0UvSDAyNXJH
dGpFSW9admMyLTdQOUVtRUxJMXFBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB
MDE0Q0UvRkRENjREREEwNTAxMTFFQzgwNkFDMTA4RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMQ8VDANBgkqhkiG9w0BAQsF
AAOCAQEAOyJb8o/7jV2y371JrzT85oq6BHjHtSPaRk9x27cRrjAKxpxZBQicL7UL
BOC8123T+NRyd8K1L+2AEejntRUHTK9Uh5Uke7jz+VQeZHlVBwmNqU6QFdyHE7GR
EbPaMQ3Rndwbp5uGZ3pJCz0eOT1N/wi7El9eSNzTbdXW8a5VDWHU4gDg1vyIGzIM
Sam+gv8ShxTXr01qJmFKKJYaqHcSSUk1eYeNveDi/KuJrLpv0pgYrh8Tes1F99TV
kZhsLl95uMxtcN4LXzSj/laMupYy8O7ltCRkeT6og1CfkW92LuUXb1QY/skbpZR8
gC3OiR86ghyK3DXg308jN863v7qGUQ==
-----END CERTIFICATE-----
Generated at Thu Aug 24 01:57:20 2023 by rpki-client on console-fra.rpki-client.org