Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/167F18E2241111ED979ED7C5F1222468.roa
File:                     167F18E2241111ED979ED7C5F1222468.roa (raw, json)
Hash identifier:          9rogMX8uMy6jjaxGacigCh0/xiegyo32VG+Nl2wAeaI=
Subject key identifier:   7B:09:32:E6:C9:B0:E6:97:F7:A0:37:17:F8:F7:2A:9F:1E:EB:07:B4
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07A5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/167F18E2241111ED979ED7C5F1222468.roa
Signing time:             Thu 25 Aug 2022 00:58:53 +0000
ROA not before:           Thu 25 Aug 2022 00:00:50 +0000
ROA not after:            Fri 25 Aug 2023 00:00:50 +0000
asID:                     207458
IP address blocks:        102.165.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 25 00:00:50 2022 GMT
            Not After : Aug 25 00:00:50 2023 GMT
        Subject: CN=6306c94d-2c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:71:49:b5:ba:da:fb:c2:cb:47:6d:74:3c:ad:
                    20:fb:1c:c1:fd:93:d5:d7:db:54:01:8d:4e:1f:88:
                    4e:4e:db:4b:90:ee:06:82:3c:30:23:c1:8b:21:af:
                    84:38:e5:a4:f2:60:d9:ab:86:9a:5f:cb:6f:3d:7f:
                    6d:f2:1b:c2:ff:b6:0d:50:dc:3a:52:47:0b:89:3e:
                    18:e8:98:52:68:e6:4d:df:0a:50:14:ea:07:44:66:
                    3b:38:c7:2c:eb:71:c1:d3:0a:b6:88:e7:18:87:bb:
                    6a:30:a9:69:92:6f:90:a2:01:fc:cb:f2:60:f3:c5:
                    0f:65:d6:57:50:a4:0d:e3:ac:6c:be:6d:a2:3d:b7:
                    26:88:3b:8d:9a:21:96:ff:c0:a6:59:34:6d:33:1d:
                    99:cf:55:46:5c:e9:77:42:23:a7:fb:32:a0:e9:89:
                    34:13:58:57:31:54:c2:ff:02:d1:84:aa:9f:c5:5f:
                    9c:25:9e:ab:12:0b:cc:21:cf:3b:f4:d9:b4:e0:85:
                    1d:a9:10:49:d7:2a:f2:d0:9c:0c:98:96:26:96:61:
                    6a:97:f6:80:ed:58:79:cb:4a:8b:49:9f:b5:61:7b:
                    ce:ff:fc:1a:17:eb:a3:71:81:41:d4:57:4f:4f:04:
                    6e:22:da:ba:24:27:02:c7:4c:20:4f:32:20:28:7a:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:32:E6:C9:B0:E6:97:F7:A0:37:17:F8:F7:2A:9F:1E:EB:07:B4
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/167F18E2241111ED979ED7C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:4e:47:7a:c8:bd:af:90:3f:b5:dc:46:eb:ea:f3:6e:42:
         40:98:60:be:02:91:3c:c9:fb:38:0a:ca:c3:04:b9:07:47:98:
         70:92:dd:73:aa:c4:6d:ce:2a:a0:7c:0b:9a:b8:a1:3d:5a:e0:
         ff:03:e7:3e:cc:83:77:14:36:61:b5:b9:38:17:25:65:2a:4d:
         bd:d7:a3:e6:09:a3:62:56:2d:0b:8b:29:a5:1d:7b:69:28:fb:
         a8:f7:9e:59:73:16:f3:c9:5d:0d:c1:0b:83:46:45:93:a1:76:
         4a:b0:d1:2b:1c:96:0b:89:57:a1:cd:f1:fa:d9:68:25:b1:dc:
         c2:5b:13:29:7f:0c:46:62:d6:55:67:52:5f:d9:75:c7:6e:f7:
         bb:0d:9e:c6:e2:b0:2a:fd:c2:4b:37:b2:c9:c1:d8:a5:c3:f3:
         dc:df:9e:c0:00:ee:79:98:e1:88:65:20:cd:7e:75:1c:90:03:
         bf:17:34:37:4b:28:6a:53:e5:5b:ab:c2:df:94:2c:7b:29:48:
         0c:b1:33:44:95:24:4d:eb:e3:f3:b6:9e:99:75:89:d9:a5:f4:
         44:3d:42:07:02:7c:41:9c:45:a1:05:f8:8a:5e:83:12:f9:79:
         db:ff:17:4e:e6:d2:bc:64:13:76:56:34:21:e3:e7:87:64:df:
         9c:de:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org