Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/1707F296EF9E11EB9889461CD8A014CE.roa
File:                     1707F296EF9E11EB9889461CD8A014CE.roa (raw, json)
Hash identifier:          ou00FDWFyIxyAQ/Tsm6XLTNC/lyI9Tzuy4+TSx2DfLY=
Subject key identifier:   D0:7D:E2:37:92:25:F0:F9:5C:25:A9:34:EB:3D:5B:9E:A1:99:E8:AC
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       0152
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/1707F296EF9E11EB9889461CD8A014CE.roa
Signing time:             Wed 28 Jul 2021 12:20:03 +0000
ROA not before:           Wed 28 Jul 2021 12:19:59 +0000
ROA not after:            Fri 28 Jul 2023 12:19:59 +0000
asID:                     15706
IP address blocks:        2001:4228:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Jul 28 12:19:59 2021 GMT
            Not After : Jul 28 12:19:59 2023 GMT
        Subject: CN=61014b73-3be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:66:d6:d7:5f:cf:f1:71:a8:25:5a:5a:2b:
                    80:a9:5a:b9:a6:a4:98:56:0f:ed:ec:70:4c:ca:8d:
                    af:22:21:1d:0a:4f:a3:a2:1e:3a:77:63:68:04:0f:
                    d7:3d:52:da:a2:07:43:43:7c:20:5c:20:90:bd:01:
                    0a:9d:68:00:37:91:b9:e6:2f:4d:38:aa:cb:45:af:
                    0f:8f:60:07:15:fe:c0:fb:39:80:9d:a9:fc:24:4f:
                    6c:5a:f8:b5:b4:04:4a:0b:64:28:59:02:36:46:98:
                    98:9f:f7:5b:15:21:0a:e6:4f:2f:90:4c:87:57:10:
                    ba:5a:d5:6d:3d:1c:9a:c2:c2:90:34:f8:db:64:8f:
                    56:c0:e2:9f:1a:90:84:3a:eb:cd:0b:19:d5:7b:7c:
                    50:a7:05:6a:d2:11:fb:a8:dd:0e:31:b1:0a:79:0f:
                    71:02:9f:5c:51:5f:51:63:c8:21:22:b8:49:3c:1b:
                    4a:60:2c:1a:24:28:41:48:56:d5:32:98:03:aa:cb:
                    bb:4e:43:fe:e9:7a:cd:7e:74:16:3e:35:2b:67:46:
                    4d:75:fb:b6:23:39:32:85:00:36:c5:f3:f9:29:7b:
                    12:99:41:b5:e4:da:2b:a4:6d:98:68:69:3b:a6:23:
                    c9:55:5e:7e:d9:af:40:91:90:68:8a:b6:33:7d:34:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:E2:37:92:25:F0:F9:5C:25:A9:34:EB:3D:5B:9E:A1:99:E8:AC
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/1707F296EF9E11EB9889461CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4228:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:37:55:ad:df:dd:90:35:22:e3:92:8c:66:67:bd:e8:f1:b4:
         72:c5:00:7c:f9:35:ef:34:20:25:19:2d:62:ba:57:e7:80:b9:
         e0:c0:9a:cc:b3:cd:d1:03:19:d2:e6:bd:09:58:2d:98:f5:45:
         c1:d5:d3:72:ce:37:bc:d9:02:f4:56:14:6d:cc:c1:9c:bb:1f:
         77:50:37:15:de:c3:cd:58:b7:02:11:56:26:29:16:04:20:ab:
         f3:2d:56:f5:30:f7:27:8c:7f:65:0a:17:0e:64:60:5f:99:36:
         fa:93:af:50:70:f8:b0:13:fa:ae:2b:86:b2:b3:dc:96:53:75:
         fb:1e:10:32:92:3a:94:eb:06:53:f8:37:58:93:d9:ce:a3:fe:
         dd:b5:65:4e:34:f0:e5:8a:36:8e:ec:8f:f2:9e:44:56:a4:0f:
         c3:27:a5:51:e2:f4:cb:4f:96:d1:0e:8f:a3:d9:11:7d:d4:ac:
         50:c9:ed:f6:06:c9:9c:48:0d:51:9e:d5:86:ad:2b:08:5d:13:
         c4:54:cb:7e:af:e0:5f:10:c8:22:32:21:a5:7e:b5:bf:c5:9d:
         92:59:de:57:aa:f7:7e:8a:62:6c:ed:0e:b3:5d:cc:6e:e6:76:
         89:6b:85:6f:be:59:33:c8:fa:b0:73:e1:21:c1:4e:e6:fe:1a:
         c4:01:69:65
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM3MzhBRjExMC8GA1UEBRMoMDFFNjFDM0Y5NjQ2NkE1OTA5OTg1NDc2RTg4NDc5
QkI3RDQxMTJGNjAeFw0yMTA3MjgxMjE5NTlaFw0yMzA3MjgxMjE5NTlaMBgxFjAU
BgNVBAMMDTYxMDE0YjczLTNiZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHw2bW11/P8XGoJVpaK4CpWrmmpJhWD+3scEzKja8iIR0KT6OiHjp3Y2gE
D9c9UtqiB0NDfCBcIJC9AQqdaAA3kbnmL004qstFrw+PYAcV/sD7OYCdqfwkT2xa
+LW0BEoLZChZAjZGmJif91sVIQrmTy+QTIdXELpa1W09HJrCwpA0+Ntkj1bA4p8a
kIQ6680LGdV7fFCnBWrSEfuo3Q4xsQp5D3ECn1xRX1FjyCEiuEk8G0pgLBokKEFI
VtUymAOqy7tOQ/7pes1+dBY+NStnRk11+7YjOTKFADbF8/kpexKZQbXk2iukbZho
aTumI8lVXn7Zr0CRkGiKtjN9NEyxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0H3i
N5Il8PlcJak06z1bnqGZ6KwwHwYDVR0jBBgwFoAUAeYcP5ZGalkJmFR26IR5u31B
EvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNzM4LzdBMEFCRjAwRUVBOTExRUFBMjg3RDkxQkY4QUVBMjI4L0FlWWNQ
NVpHYWxrSm1GUjI2SVI1dTMxQkV2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FlWWNQNVpHYWxrSm1GUjI2SVI1dTMxQkV2WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlDNzM4LzdBMEFCRjAwRUVBOTExRUFBMjg3RDkxQkY4
QUVBMjI4LzE3MDdGMjk2RUY5RTExRUI5ODg5NDYxQ0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUIoAAIwDQYJKoZIhvcN
AQELBQADggEBANA3Va3f3ZA1IuOSjGZnvejxtHLFAHz5Ne80ICUZLWK6V+eAueDA
msyzzdEDGdLmvQlYLZj1RcHV03LON7zZAvRWFG3MwZy7H3dQNxXew81YtwIRViYp
FgQgq/MtVvUw9yeMf2UKFw5kYF+ZNvqTr1Bw+LAT+q4rhrKz3JZTdfseEDKSOpTr
BlP4N1iT2c6j/t21ZU408OWKNo7sj/KeRFakD8MnpVHi9MtPltEOj6PZEX3UrFDJ
7fYGyZxIDVGe1YatKwhdE8RUy36v4F8QyCIyIaV+tb/FnZJZ3leq936KYmztDrNd
zG7mdolrhW++WTPI+rBz4SHBTub+GsQBaWU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org