Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11FB37663BF811ED9AE36197F1222468.roa
File:                     11FB37663BF811ED9AE36197F1222468.roa (raw, json)
Hash identifier:          JQghAqbckeVt7jAdT3FOzzFFZKRxEPe8dCg3jGBDwBY=
Subject key identifier:   17:9A:B6:C2:B1:C6:D9:AD:47:94:B7:1B:86:8C:CC:12:93:3E:1F:CD
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0802
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11FB37663BF811ED9AE36197F1222468.roa
Signing time:             Sat 24 Sep 2022 11:00:16 +0000
ROA not before:           Sat 24 Sep 2022 11:00:12 +0000
ROA not after:            Sun 24 Sep 2023 11:00:12 +0000
asID:                     14445
IP address blocks:        102.165.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 24 11:00:12 2022 GMT
            Not After : Sep 24 11:00:12 2023 GMT
        Subject: CN=632ee340-a814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:53:af:ff:f2:a0:a9:f7:1a:b9:a3:e5:51:
                    f8:bd:5a:71:56:d8:e4:ad:91:5a:75:68:7e:a3:dd:
                    7e:f1:a1:28:b9:0b:21:74:2f:1a:33:53:f3:4f:06:
                    28:5a:35:6d:db:92:90:b6:be:4a:13:43:ac:23:84:
                    22:1d:98:9d:2e:f6:ba:a8:f7:d1:32:a8:0b:97:b0:
                    28:24:b4:e2:1d:c7:aa:7e:a6:d7:88:22:a9:0f:76:
                    e2:5a:93:66:f5:85:f8:53:ee:9c:70:ed:8f:29:48:
                    f7:7b:0a:8f:7f:b5:f7:2d:0f:8d:67:86:c0:13:3f:
                    7e:df:43:3b:32:60:29:7d:47:bd:6f:be:ba:82:ec:
                    04:ce:70:17:55:76:ba:d1:5c:9a:ac:e4:3f:88:ac:
                    d3:e1:90:93:09:1f:40:4b:55:36:df:29:49:a4:27:
                    45:fe:80:42:35:0a:b2:d5:74:8a:75:15:b4:0d:8d:
                    97:fe:4d:e5:e5:86:d9:ac:ee:cb:54:c2:d1:b5:85:
                    ed:26:7a:2e:c5:fa:ae:4c:6a:a3:e2:86:35:78:a2:
                    ca:43:4c:85:2c:7b:43:31:b1:6b:c4:d9:1f:1d:12:
                    50:13:72:c6:73:b5:4e:eb:62:34:85:f4:c1:21:e1:
                    19:50:e1:64:c5:7a:3d:ee:6f:59:df:d5:00:44:8a:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:B6:C2:B1:C6:D9:AD:47:94:B7:1B:86:8C:CC:12:93:3E:1F:CD
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11FB37663BF811ED9AE36197F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:c2:d3:59:62:16:b0:9c:b8:ba:fb:25:91:d8:92:f3:f0:
         91:97:64:37:a9:22:03:1d:ab:95:d8:2d:2a:06:3f:3b:c4:36:
         e0:b9:ea:dd:5f:50:d3:07:25:65:2b:4c:db:c6:ff:e6:cf:da:
         3c:a9:1d:f6:69:cf:e8:6c:03:bf:8f:17:83:bd:b8:5d:71:e5:
         59:d1:42:f9:53:99:6f:91:c8:a5:2c:5b:d0:92:77:a7:70:9b:
         fa:94:8b:01:e7:b5:cb:a2:27:62:c6:07:7c:c4:ad:43:07:89:
         5d:ff:14:b4:00:84:fa:cf:6c:26:a6:ce:62:1e:c9:ad:81:1a:
         26:ec:2b:3a:37:0f:f4:90:b8:7e:75:a4:27:d6:1d:6d:85:26:
         94:49:da:fa:31:f1:c4:bb:c8:ab:2f:a1:fb:5a:f0:38:66:79:
         53:58:fe:c2:36:79:72:09:25:ad:fd:4d:77:97:af:ac:c4:14:
         4f:46:08:bf:f4:0f:1d:ba:54:82:c5:cb:13:1d:ae:ca:aa:78:
         85:5f:48:e6:41:bd:ab:32:b3:98:01:ea:a6:4e:a1:a7:bf:b2:
         fe:70:48:37:09:cb:7b:8d:31:03:d9:e7:83:9d:96:98:67:2f:
         0e:cf:25:81:f9:a8:68:3c:fb:35:0e:d1:5e:c0:c5:f1:ca:77:
         58:9e:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 01:37:24 2023 by rpki-client on console-ams.rpki-client.org