Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/F56972545A2511EABAA0D20AF8AEA228.roa
File:                     F56972545A2511EABAA0D20AF8AEA228.roa (raw, json)
Hash identifier:          CCoEd/G81BxkMYDCh6x0xxMfBUA6hFQYkDil3rqr8kY=
Subject key identifier:   B0:49:45:C5:16:41:EA:9C:44:EE:7E:78:E1:58:5E:DD:30:A3:D5:E9
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       02
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/F56972545A2511EABAA0D20AF8AEA228.roa
Signing time:             Fri 28 Feb 2020 12:29:27 +0000
ROA not before:           Fri 28 Feb 2020 12:29:23 +0000
ROA not after:            Mon 28 Feb 2022 12:29:23 +0000
asID:                     327926
IP address blocks:        196.251.232.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: Feb 28 12:29:23 2020 GMT
            Not After : Feb 28 12:29:23 2022 GMT
        Subject: CN=5e5907a7-ddfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:78:4d:9e:f3:42:82:82:0a:03:3e:a6:01:
                    5a:0b:1c:55:11:4e:54:2b:f0:ef:0d:b2:59:2d:96:
                    67:46:c9:f6:48:01:c7:f1:11:b4:2f:73:92:3d:c6:
                    84:87:10:aa:d8:66:4d:59:18:79:74:fb:24:ae:52:
                    3d:a1:a4:63:15:5e:2e:6c:75:02:79:38:4d:b5:c9:
                    2c:68:5e:aa:aa:7a:97:a0:36:48:e4:e3:d3:45:14:
                    10:fb:50:a7:db:8f:21:78:5c:be:74:10:b4:95:53:
                    dc:5c:19:84:38:92:f6:48:5e:3d:ca:e6:f9:4a:cf:
                    d8:b4:c9:f0:7d:4f:95:1f:ce:31:27:b6:6c:5c:96:
                    ab:d6:bc:49:58:67:6b:5e:20:77:48:c2:94:c0:81:
                    48:6a:a6:9d:4a:9a:7c:25:a1:ca:23:1a:0a:67:f3:
                    91:3e:eb:46:53:ff:7f:fa:9e:24:67:e9:72:07:2a:
                    86:8f:e7:54:4f:f0:cf:6a:e9:d7:21:e5:90:92:57:
                    01:6b:0d:3f:5b:6c:ce:39:70:78:cf:01:c3:c5:16:
                    8e:8c:b7:13:0e:f2:15:1c:6f:6d:09:85:ab:29:c3:
                    18:96:77:8d:16:8b:33:06:95:ac:51:df:90:3a:f5:
                    54:00:71:ec:14:07:84:40:23:de:2a:6a:89:db:3b:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:45:C5:16:41:EA:9C:44:EE:7E:78:E1:58:5E:DD:30:A3:D5:E9
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/F56972545A2511EABAA0D20AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:70:d5:4a:f8:d2:6a:f0:19:1f:69:af:39:9b:9c:43:e5:
         b0:7d:68:56:ef:d3:24:18:8e:c1:ff:00:93:90:05:15:56:a6:
         9d:b4:9e:ca:e8:74:f6:2c:33:9f:0d:b4:12:8a:99:38:d9:93:
         c3:ea:8f:56:c8:18:fd:3a:52:a0:0b:35:94:1e:9d:2c:19:70:
         dc:2d:89:3f:3c:71:b8:79:5d:8d:6b:e5:05:3c:bc:6f:86:ac:
         35:e1:07:eb:9d:6b:5d:86:6c:4d:fb:af:95:7a:a5:43:8f:ef:
         52:e7:72:04:ea:06:ec:af:91:50:8f:b8:e5:60:d7:dd:9d:01:
         57:6e:b6:d4:29:d2:9a:62:88:bc:f0:74:53:a0:d9:aa:da:52:
         2a:d4:84:db:3f:46:ce:24:f7:f9:e9:85:48:cd:d3:95:84:0c:
         ce:4a:35:5b:48:af:61:d7:8d:f4:96:fd:f9:ba:b3:99:df:a2:
         f6:9a:fe:15:dc:0f:11:6a:75:ba:db:3e:69:73:e3:8b:fd:c2:
         54:d4:0f:ee:59:5e:88:d8:63:68:b2:4b:18:92:e1:98:91:ab:
         b4:cb:f0:56:20:92:67:97:0f:75:bc:26:38:dc:ac:79:42:78:
         63:e5:8d:07:89:2d:68:f5:99:8f:59:9d:ad:62:99:f8:29:43:
         0a:1a:b3:40
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
QTgwREFGMTEwLwYDVQQFEyhBQzJFNTJFRTkyQkJDMjA1QTIzMEZGNzdBMTkwNDFE
REQ1MTREOEYwMB4XDTIwMDIyODEyMjkyM1oXDTIyMDIyODEyMjkyM1owGDEWMBQG
A1UEAxMNNWU1OTA3YTctZGRmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYEeE2e80KCggoDPqYBWgscVRFOVCvw7w2yWS2WZ0bJ9kgBx/ERtC9zkj3G
hIcQqthmTVkYeXT7JK5SPaGkYxVeLmx1Ank4TbXJLGheqqp6l6A2SOTj00UUEPtQ
p9uPIXhcvnQQtJVT3FwZhDiS9khePcrm+UrP2LTJ8H1PlR/OMSe2bFyWq9a8SVhn
a14gd0jClMCBSGqmnUqafCWhyiMaCmfzkT7rRlP/f/qeJGfpcgcqho/nVE/wz2rp
1yHlkJJXAWsNP1tszjlweM8Bw8UWjoy3Ew7yFRxvbQmFqynDGJZ3jRaLMwaVrFHf
kDr1VABx7BQHhEAj3ipqids7XYkCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSwSUXF
FkHqnETufnjhWF7dMKPV6TAfBgNVHSMEGDAWgBSsLlLukrvCBaIw/3ehkEHd1RTY
8DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhBRUEyMjgvckM1Uzdw
Szd3Z1dpTVA5M29aQkIzZFVVMlBBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB
RUEyMjgvRjU2OTcyNTQ1QTI1MTFFQUJBQTBEMjBBRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxPvoMA0GCSqGSIb3DQEBCwUAA4IBAQAj
uXDVSvjSavAZH2mvOZucQ+WwfWhW79MkGI7B/wCTkAUVVqadtJ7K6HT2LDOfDbQS
ipk42ZPD6o9WyBj9OlKgCzWUHp0sGXDcLYk/PHG4eV2Na+UFPLxvhqw14QfrnWtd
hmxN+6+VeqVDj+9S53IE6gbsr5FQj7jlYNfdnQFXbrbUKdKaYoi88HRToNmq2lIq
1ITbP0bOJPf56YVIzdOVhAzOSjVbSK9h1430lv35urOZ36L2mv4V3A8RanW62z5p
c+OL/cJU1A/uWV6I2GNosksYkuGYkau0y/BWIJJnlw91vCY43Kx5Qnhj5Y0HiS1o
9ZmPWZ2tYpn4KUMKGrNA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org