Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
File:                     1C6C9850971711EDACB7F8BCF1222468.roa (raw, json)
Hash identifier:          i999KTjuHSYUE1XAiFlvS/zQ03YTNRfOHu1pHhwQlkU=
Subject key identifier:   0E:71:2B:A3:F2:45:2F:A2:E1:8C:57:81:1B:56:1B:DB:40:2E:9C:53
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       02
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
Signing time:             Wed 18 Jan 2023 10:01:44 +0000
ROA not before:           Wed 18 Jan 2023 10:01:38 +0000
ROA not after:            Wed 17 Jan 2024 10:01:38 +0000
asID:                     328615
IP address blocks:        197.215.130.0/24 maxlen: 24
                          197.215.131.0/24 maxlen: 24
                          197.215.132.0/24 maxlen: 24
                          2c0f:3200:6000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Jan 18 10:01:38 2023 GMT
            Not After : Jan 17 10:01:38 2024 GMT
        Subject: CN=63c7c387-c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:9d:f8:15:1d:de:fb:f3:19:bf:73:61:f7:
                    6c:e0:54:17:1e:af:84:8f:d4:51:f0:59:b5:41:c5:
                    21:47:e6:6f:6d:32:a0:39:ef:9c:7a:45:98:f5:36:
                    2e:3f:01:f1:f8:6d:83:65:df:53:39:ae:6e:2c:e0:
                    75:c2:c7:5c:31:1e:0c:37:32:10:54:b5:74:90:0d:
                    02:64:a9:ff:60:08:7f:b4:90:d2:bb:e0:ea:cb:45:
                    62:c8:48:e4:a1:32:64:2f:67:df:81:11:b7:47:6f:
                    0c:c1:ed:56:7e:0f:9d:81:7a:52:4c:09:77:f4:2f:
                    e1:64:c2:57:41:e4:f4:dc:f3:e7:cc:a1:a4:6e:46:
                    f3:91:63:2d:6f:9d:06:7c:9f:20:3a:3c:f4:af:21:
                    fa:4e:52:03:3e:a7:f2:04:a4:20:0b:dd:15:21:4f:
                    8d:d5:c7:40:2f:b8:37:9c:4e:dd:84:5b:32:d8:36:
                    94:9f:55:9b:fb:6e:8e:e2:f0:e6:37:6e:f5:a6:bb:
                    27:d3:f8:d9:f6:2c:42:46:48:5c:5c:b6:db:ea:bb:
                    52:9f:7e:fc:6b:9d:2c:d4:1f:8e:aa:bd:20:19:90:
                    5c:3e:61:da:b5:70:a9:f6:ea:e5:63:de:89:c8:46:
                    21:c5:8c:e6:6e:bf:27:0d:d5:f1:46:e3:78:90:04:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:2B:A3:F2:45:2F:A2:E1:8C:57:81:1B:56:1B:DB:40:2E:9C:53
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.215.130.0-197.215.132.255
                IPv6:
                  2c0f:3200:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:25:a0:ec:8a:c3:e1:f7:50:13:68:7c:c3:c7:e3:21:20:37:
         10:10:6b:2f:3d:e0:73:04:60:87:c2:45:20:19:8e:cb:49:2a:
         49:51:5f:68:ec:41:a4:61:22:79:f9:cd:f6:2c:9c:e8:23:be:
         60:69:c1:fd:de:01:f3:4c:ce:54:e3:75:26:4e:7a:61:bb:cc:
         ea:b9:d5:8b:88:3c:7b:cc:89:91:f8:68:7e:f9:a5:72:d6:ce:
         a9:c9:aa:6d:43:24:20:5d:e5:f9:ec:cb:83:78:f1:83:86:03:
         76:31:88:5f:52:e0:29:64:36:21:1a:74:2e:66:49:52:d4:21:
         54:bf:01:c6:b3:2b:3b:85:27:94:46:98:9b:6e:c9:b3:d5:76:
         cd:11:ec:75:ae:81:52:52:9c:b8:db:0c:1b:62:c4:85:9d:ba:
         58:e7:7a:26:a0:b6:9a:e7:99:c8:6b:40:73:a2:3e:f8:71:22:
         43:d4:00:d9:c6:76:63:af:1b:70:a8:19:5e:c3:2b:61:89:d6:
         17:51:62:f5:0a:a7:f6:90:3a:f9:29:53:3f:1a:0f:ab:9f:2b:
         6f:4d:09:84:07:da:28:f6:db:ee:09:35:bc:64:df:47:57:ed:
         09:1e:a2:fc:54:c0:2e:39:98:04:61:a4:fd:9f:3c:ca:0b:41:
         1c:32:27:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org