Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/776CECFE26AC11ED99927197F1222468.roa
File:                     776CECFE26AC11ED99927197F1222468.roa (raw, json)
Hash identifier:          TBuMN4CCT7iGOfvlLYZ1Z3BPR7CGo1sQcK2e/MLBTAo=
Subject key identifier:   3C:2F:AD:15:F8:90:ED:B1:B6:40:4A:45:DA:62:53:A0:B8:0B:F2:39
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07B0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/776CECFE26AC11ED99927197F1222468.roa
Signing time:             Sun 28 Aug 2022 08:36:10 +0000
ROA not before:           Sun 28 Aug 2022 08:36:06 +0000
ROA not after:            Mon 28 Aug 2023 08:36:06 +0000
asID:                     7018
IP address blocks:        102.129.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 28 08:36:06 2022 GMT
            Not After : Aug 28 08:36:06 2023 GMT
        Subject: CN=630b28fa-ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:e5:b3:8f:29:b3:3d:f1:ea:b1:c6:4a:48:
                    e7:68:b3:a8:44:25:39:55:8f:70:02:ea:52:5d:3c:
                    4d:ff:c8:7a:95:3f:c6:51:51:9b:67:be:a5:c2:05:
                    33:a1:50:d8:16:21:39:c1:47:38:53:d1:90:14:24:
                    2d:6d:cc:03:d5:cd:65:ae:98:bc:0b:ec:2a:6d:6c:
                    12:bd:80:db:35:0a:e1:ff:ec:ed:fa:85:6f:50:7c:
                    07:cc:56:fd:49:9e:5d:52:b5:f5:a3:d9:68:44:bf:
                    0b:f1:2e:32:0e:23:83:68:16:d5:3a:3a:71:af:68:
                    aa:4f:2a:1b:64:9c:9b:92:73:15:2c:78:fe:c8:94:
                    8d:29:cf:85:50:61:18:97:47:fa:b0:eb:c2:7b:de:
                    6d:03:54:fe:1a:9a:6e:ef:03:6f:16:94:ed:0c:9b:
                    b1:14:a0:30:72:43:3d:bf:90:70:34:82:d4:e6:9a:
                    40:4f:d1:a6:20:0a:d7:1c:85:4e:3e:ce:0e:99:d7:
                    de:64:fb:95:25:90:ce:c6:ce:67:ee:cb:31:2f:ed:
                    2e:3d:38:4e:00:41:95:5d:bd:22:42:84:6b:3a:fe:
                    47:13:d9:e5:54:af:ef:f4:85:14:ea:0f:9d:6d:0e:
                    d5:5a:e0:1b:e3:99:fc:1f:0d:03:9e:4a:58:1a:1e:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:AD:15:F8:90:ED:B1:B6:40:4A:45:DA:62:53:A0:B8:0B:F2:39
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/776CECFE26AC11ED99927197F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:09:c8:78:8b:96:0c:05:5e:75:dd:f6:b5:19:22:62:28:f8:
         7c:c0:21:94:a3:c7:c8:89:1d:2b:ae:e4:04:df:0c:d6:ca:bb:
         66:b2:a1:e5:06:0a:0b:35:91:4e:39:2b:c6:64:57:33:78:e4:
         3f:47:66:d3:b8:1b:58:70:54:11:03:91:86:e9:19:11:fe:3f:
         01:96:71:d5:25:96:98:6c:9e:c2:40:f9:86:5a:54:4a:73:a3:
         c1:36:a3:1b:b6:4e:fe:5e:65:b7:d1:d9:f6:32:fb:ce:5a:6f:
         0e:fe:ae:ef:5f:cb:5c:e4:a9:2a:24:1c:ca:86:f9:aa:64:f8:
         bd:34:48:74:0c:82:95:2a:0d:bd:d8:9b:d5:e8:e1:03:a6:4e:
         26:de:21:45:51:b1:34:b0:15:62:b8:0b:9e:32:cb:bd:74:8a:
         ed:b3:2e:b9:0e:1e:96:ce:65:40:a5:bc:bb:00:07:5a:0a:15:
         70:d4:57:c6:18:9f:d6:c3:11:3a:96:75:90:82:59:1d:aa:0e:
         cf:d0:b3:ad:a8:12:c3:b7:7e:cc:a6:5e:ec:7c:79:73:3d:22:
         88:bf:3e:21:5d:f7:44:a7:2a:70:83:27:f8:b0:6f:a5:ba:33:
         b8:b9:8b:9a:0a:c2:3f:24:c9:ae:ed:52:ce:d5:35:66:5c:7f:
         c9:96:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org