Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B937764A3A311ECAE480D745A40D577.roa
File:                     5B937764A3A311ECAE480D745A40D577.roa (raw, json)
Hash identifier:          LqH/UibZDi4x6LlWe4rfK2UJjMtFyJrXfWfw4I2LITA=
Subject key identifier:   2E:85:9D:26:AB:F1:ED:F6:D9:02:0A:5A:AE:05:52:7B:CF:73:D1:ED
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0602
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B937764A3A311ECAE480D745A40D577.roa
Signing time:             Mon 14 Mar 2022 14:30:55 +0000
ROA not before:           Mon 14 Mar 2022 14:30:51 +0000
ROA not after:            Thu 14 Mar 2024 14:30:51 +0000
asID:                     212238
IP address blocks:        102.129.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1538 (0x602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Mar 14 14:30:51 2022 GMT
            Not After : Mar 14 14:30:51 2024 GMT
        Subject: CN=622f519f-bfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:70:3a:bb:1b:cf:96:cc:bc:19:e3:b8:82:
                    4f:c5:ba:60:fc:69:ca:6a:72:cd:5e:25:b4:93:e1:
                    60:b5:b9:9a:a5:f8:24:17:88:86:d6:30:a3:2c:e1:
                    8c:4a:4d:0f:87:47:07:99:6f:b2:20:14:80:dd:7b:
                    37:75:8e:8f:6b:2e:1f:b5:5a:e1:79:f3:9d:1b:c6:
                    16:fe:6d:fd:61:b6:14:f4:49:eb:45:e4:91:a2:18:
                    d4:6e:3f:b6:d1:0e:a7:2b:70:2c:65:4a:0d:8f:34:
                    a4:c7:27:e0:6f:6f:cc:8d:b1:d0:a7:5f:95:d2:83:
                    f3:fe:76:36:87:9d:39:17:7a:bd:36:f2:05:23:30:
                    b8:e1:cf:aa:d4:ee:c7:67:5c:8f:c5:12:41:73:73:
                    a1:d5:a1:69:ba:56:74:40:7d:89:47:73:69:6c:ac:
                    36:63:c8:30:02:dc:fc:04:34:d6:dc:8e:02:55:65:
                    4e:d5:34:bb:97:3a:8d:0e:69:9b:bc:27:22:c1:78:
                    7e:ec:05:b9:33:f4:45:d2:bb:d5:50:d6:cb:18:3b:
                    fd:5c:de:c6:14:67:a1:2b:15:d7:c7:60:b3:a2:df:
                    88:86:ec:ba:58:f2:ab:72:91:be:40:f2:00:65:e1:
                    3f:66:e9:21:81:14:69:fc:af:fc:77:bb:28:5d:6c:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:9D:26:AB:F1:ED:F6:D9:02:0A:5A:AE:05:52:7B:CF:73:D1:ED
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5B937764A3A311ECAE480D745A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:56:b2:8c:14:be:e5:61:bf:27:ee:c9:c5:72:72:8c:b7:44:
         c5:66:26:0a:f8:b2:a2:85:7e:88:04:09:e0:ec:fd:3f:dd:26:
         27:8a:68:0b:a1:e6:de:08:ce:77:2d:f2:84:ed:d6:b3:a6:0a:
         c1:3b:fc:d5:63:6b:3a:a5:45:52:d8:04:cd:5e:ec:8c:af:2a:
         71:4b:0e:fa:8a:90:b5:b8:71:78:b5:72:6d:74:c0:14:ec:1c:
         67:e4:92:11:a2:d5:38:71:7b:44:51:36:1e:7d:89:62:53:1d:
         28:c3:20:69:c4:a5:6e:a5:72:98:9c:5d:f7:4c:97:22:14:71:
         55:a5:67:01:0c:ce:e6:a4:48:e1:d6:4a:de:29:83:c9:82:af:
         54:5c:f8:97:28:9d:3a:f6:c2:d9:67:b6:73:0f:7d:30:f7:8f:
         54:e4:24:73:17:60:52:70:4d:bd:b1:2d:97:61:25:24:cc:d2:
         a7:8c:e9:d8:0d:67:6f:36:ae:fd:f0:39:fe:68:01:75:c6:98:
         cd:88:76:d5:ef:43:dd:28:a3:8d:61:c9:29:22:22:f2:f6:08:
         de:5b:05:0d:07:18:cf:80:f8:35:e7:9a:d2:13:ac:31:40:d9:
         5b:29:84:b5:9c:de:87:fd:55:e0:df:0c:4d:15:a9:f3:5c:4d:
         e9:da:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 02:29:35 2024 by rpki-client on console-ams.rpki-client.org