Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26163B46643611EC858AA2C95A40D577.roa
File:                     26163B46643611EC858AA2C95A40D577.roa (raw, json)
Hash identifier:          FpBQP1YZ2y4qQFtj6nrpkoAo+RQxoz1T8yF1Pk94B1k=
Subject key identifier:   EF:85:E5:57:2F:B7:D4:EF:99:30:82:58:C7:B8:86:1F:AC:AB:44:35
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0597
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26163B46643611EC858AA2C95A40D577.roa
Signing time:             Thu 23 Dec 2021 21:20:27 +0000
ROA not before:           Thu 23 Dec 2021 21:20:22 +0000
ROA not after:            Fri 23 Dec 2022 21:20:22 +0000
asID:                     397423
IP address blocks:        102.165.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 23 21:20:22 2021 GMT
            Not After : Dec 23 21:20:22 2022 GMT
        Subject: CN=61c4e81b-cddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:3e:db:c1:85:92:61:58:9c:0d:d8:ae:f5:
                    84:1e:0c:d4:5f:88:53:e1:94:91:4a:90:91:97:d3:
                    40:e0:21:11:6a:1d:28:22:97:37:f0:16:c7:46:37:
                    5b:83:ed:21:ba:4e:16:98:4c:db:05:6b:83:59:e2:
                    62:a2:e1:28:6b:ba:60:ea:74:78:3c:cf:78:10:d8:
                    bd:8c:ce:a5:a3:e9:b2:ea:15:69:01:df:4b:e2:7a:
                    68:ea:52:51:00:39:0f:9c:55:38:3a:3f:65:09:1b:
                    66:a7:6f:02:40:87:53:93:a0:41:80:bc:13:80:37:
                    1b:15:d6:fa:f4:06:12:9c:51:28:77:1c:59:2c:10:
                    a5:b4:32:e8:1b:21:45:73:f2:a3:44:d0:ab:47:14:
                    31:ff:45:13:55:ba:44:1f:83:b7:a0:a4:d9:96:20:
                    1b:37:15:d8:a9:2a:58:da:03:35:a8:65:92:b6:1e:
                    0f:7e:54:55:0b:d6:d5:80:c0:bf:9f:aa:d5:12:17:
                    38:91:59:75:cf:77:16:4f:06:f3:cc:57:85:ac:a6:
                    cc:21:46:54:8f:be:36:25:75:b1:e1:7f:44:f0:81:
                    c4:05:d5:06:8d:68:ab:db:c0:f7:c5:26:73:7f:7c:
                    30:13:7a:de:05:12:e1:93:22:53:21:c0:08:d5:1d:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:E5:57:2F:B7:D4:EF:99:30:82:58:C7:B8:86:1F:AC:AB:44:35
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26163B46643611EC858AA2C95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:4b:dc:7d:d6:0d:93:3e:e7:0b:fe:b0:f2:94:42:3c:0f:
         49:91:f0:07:f4:3a:46:c4:0c:ae:84:1f:13:f7:3d:61:15:33:
         91:59:2e:8d:26:9a:ef:21:b1:bb:3e:83:f3:72:9f:d2:55:3f:
         eb:52:85:21:f7:ad:da:d6:fc:53:6e:5a:92:ac:25:10:4f:67:
         c6:7f:4a:a8:7a:49:95:ac:97:7a:0f:d3:1e:be:f1:f3:db:8d:
         eb:26:0a:82:69:d6:e1:23:6f:05:ce:c6:f1:ba:47:74:6e:df:
         7e:39:93:d6:a2:b0:53:07:d9:83:48:0a:6b:7e:f9:3e:62:38:
         d3:29:b9:9d:a0:f7:d8:b2:95:73:47:eb:9e:5b:81:58:66:7e:
         05:84:1a:01:a0:87:3f:a3:76:57:14:ee:10:81:2c:17:e1:a5:
         3a:56:21:e5:da:32:7e:2d:a9:34:4e:e9:a2:0c:cf:b6:ec:ea:
         03:a0:b9:a9:c0:3b:7a:17:c6:a8:90:6f:70:69:1c:ac:fb:e7:
         e0:41:1e:d4:d3:79:9c:86:1a:82:87:ae:40:b1:71:2f:8a:ab:
         b7:87:d0:aa:47:00:e6:98:c2:a3:d6:e2:3f:36:b5:9d:54:ee:
         38:9f:5a:75:a8:21:35:ec:17:59:82:a5:18:ad:8a:42:ab:d4:
         25:f0:db:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org