Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
File:                     4832C54C84D311EC8BC301755A40D577.roa (raw, json)
Hash identifier:          n+lJVR+NNc52+RGKktr+xGRxca6gppFW0OV62tLrAAo=
Subject key identifier:   9F:4C:2C:4A:D6:20:08:46:DB:01:A4:D2:CA:B8:76:27:9C:BF:D8:A1
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       05D5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
Signing time:             Thu 03 Feb 2022 09:25:53 +0000
ROA not before:           Thu 03 Feb 2022 09:25:48 +0000
ROA not after:            Fri 03 Feb 2023 09:25:48 +0000
asID:                     40676
IP address blocks:        102.129.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb  3 09:25:48 2022 GMT
            Not After : Feb  3 09:25:48 2023 GMT
        Subject: CN=61fb9fa0-2890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:d6:e9:4e:56:15:a0:68:cd:1e:e7:fd:2a:
                    fc:63:01:9d:5f:3f:34:2b:bc:61:5e:f7:82:ac:12:
                    dc:28:78:51:47:53:94:75:a9:d9:9a:16:11:8f:36:
                    c5:e4:cc:01:dc:a7:ad:c8:61:d1:6f:0f:68:ee:9c:
                    cf:a7:ff:36:06:0d:83:62:f6:89:3d:2c:3c:23:43:
                    a3:09:5d:69:6e:a7:30:5a:a3:59:31:af:c8:19:d3:
                    bb:a4:d0:5c:71:37:cd:dd:62:e2:3b:45:c9:d1:28:
                    55:bd:2b:52:23:66:ef:bd:71:6e:98:23:02:5b:f8:
                    b3:b8:b9:0d:6a:95:b2:16:64:49:eb:37:9a:72:3a:
                    87:22:74:a5:af:2b:61:ca:c5:98:c2:44:bd:98:a6:
                    be:16:9e:59:2b:a5:d2:2f:fd:50:28:be:cc:40:9c:
                    86:4c:0a:63:2e:e1:5c:dd:ce:42:1c:ee:bd:97:2e:
                    95:02:a4:58:68:f9:68:5e:ba:f0:10:78:43:04:40:
                    07:82:ba:d4:b6:28:89:31:e0:35:a1:f2:f1:cd:92:
                    63:d8:c2:cb:b8:f1:c6:52:c4:ba:2e:cd:6e:b3:60:
                    6f:7d:9d:9c:92:ff:5d:32:12:db:00:75:e0:57:4f:
                    e9:ef:a4:ad:23:d7:f2:f2:17:33:98:0a:0f:d6:4a:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:2C:4A:D6:20:08:46:DB:01:A4:D2:CA:B8:76:27:9C:BF:D8:A1
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:64:cf:4a:f3:95:cc:8c:38:8f:09:4b:b8:fe:9a:32:ec:9a:
         db:8f:e2:39:d3:a4:c6:8a:5f:36:4f:eb:2e:83:af:64:e8:12:
         c1:f7:80:b0:77:fc:12:af:7f:c7:d3:c6:bc:03:27:3f:73:cb:
         61:ee:fe:4e:0d:32:75:8e:91:15:7b:28:9a:d1:03:5a:ec:f9:
         5e:84:69:88:5e:d8:9b:2c:ec:16:3a:e9:15:e0:ff:ab:7c:41:
         9f:3b:5d:22:55:b5:51:95:81:e5:d0:8c:d9:fc:de:26:87:73:
         9e:a7:0d:71:42:5e:b4:75:b2:34:1e:5f:f4:a0:1b:79:3b:14:
         2b:cf:c5:b7:d4:e2:86:c0:a2:5b:23:51:7b:dc:16:95:e1:ed:
         8f:98:8c:c1:93:df:97:5c:85:56:c9:9d:2e:e7:f7:22:66:f6:
         25:9a:4e:11:bf:2b:17:cb:f3:74:35:77:e4:04:8e:b4:52:f6:
         54:80:bb:f3:5a:23:cd:df:f4:c3:35:f6:47:d3:03:0e:20:c5:
         a8:65:28:af:bd:b4:27:db:0f:6e:52:2f:cd:56:fb:c5:2d:5b:
         83:68:c9:cb:b0:ad:28:6f:8b:e0:f7:fc:0b:4a:7d:41:82:e3:
         4f:b6:78:ba:83:83:1b:2e:18:f0:69:96:81:f7:2b:35:8b:fc:
         26:32:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org