Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9217A9A2FF8A11ECA04723ADF1222468.roa
File:                     9217A9A2FF8A11ECA04723ADF1222468.roa (raw, json)
Hash identifier:          awaeBESI8Qe1XkfltjxfTGot9c5nVo573tgthFosD5s=
Subject key identifier:   73:EC:50:A0:99:0D:3D:3A:5C:59:64:19:95:D2:73:F1:75:8D:A6:47
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       072D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9217A9A2FF8A11ECA04723ADF1222468.roa
Signing time:             Sat 09 Jul 2022 13:25:16 +0000
ROA not before:           Sat 09 Jul 2022 13:25:13 +0000
ROA not after:            Sun 09 Jul 2023 13:25:13 +0000
asID:                     212238
IP address blocks:        102.165.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  9 13:25:13 2022 GMT
            Not After : Jul  9 13:25:13 2023 GMT
        Subject: CN=62c981bc-aeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:41:54:c5:ae:36:a9:e9:56:55:35:a4:0d:
                    55:ca:61:17:82:f4:0d:1d:98:eb:a7:e9:6a:36:dc:
                    c0:69:5d:b3:96:f2:45:bb:54:f6:d8:63:7e:6c:8c:
                    80:40:67:57:2a:af:0b:83:35:b9:61:f1:74:7c:cd:
                    53:c6:11:fa:40:48:ac:6e:46:da:20:ad:c5:25:6d:
                    45:3a:67:10:e4:7c:87:97:d1:d6:89:ed:12:6a:5f:
                    71:53:46:b5:f5:e1:d8:7f:d0:0b:52:2f:99:66:b3:
                    cc:aa:8a:aa:ad:96:00:89:10:5e:f7:a9:f0:0d:5e:
                    ea:5a:6c:43:61:85:b3:92:8d:b8:a2:33:5e:3d:07:
                    40:bc:79:6d:c6:64:f1:04:aa:4c:54:83:e8:7b:1c:
                    2d:2c:b4:58:ec:25:c4:9a:c4:26:e1:14:30:36:11:
                    e9:c5:d4:ae:5c:66:d5:8b:bf:42:cb:d0:1f:15:b6:
                    87:e2:7f:9c:6d:d5:3b:84:64:6a:7b:ad:1f:11:d2:
                    e4:da:60:eb:1f:2e:45:48:bf:dd:a9:af:31:02:96:
                    d1:0e:5d:3c:4c:77:c1:5f:10:8f:e8:3c:c5:b1:d8:
                    56:a9:43:a8:83:5d:f4:ed:89:9a:54:55:d3:b3:d6:
                    5b:b1:d2:ab:86:b6:4b:72:25:1a:28:38:42:72:be:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:50:A0:99:0D:3D:3A:5C:59:64:19:95:D2:73:F1:75:8D:A6:47
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9217A9A2FF8A11ECA04723ADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:aa:b7:65:cd:b4:13:92:d9:f7:cd:c2:67:8f:ee:ba:73:
         6c:26:dd:5e:16:db:d9:2c:74:b0:63:e4:e6:81:4c:a4:b3:78:
         27:7e:80:c6:b8:c5:b4:ba:cd:4b:5d:7d:40:77:7b:ee:12:10:
         62:02:8b:6c:63:f7:c5:fa:d2:79:44:5e:c1:0b:14:15:d9:51:
         6c:c2:8b:b9:9e:cd:d9:c8:75:98:96:a5:40:5e:3d:92:6c:42:
         62:d1:8f:93:88:3b:60:61:7a:21:05:19:c2:25:3c:e0:39:f0:
         1d:df:d6:d5:94:09:35:6a:c6:cc:d5:b4:b8:47:42:65:6e:44:
         e1:cd:2d:55:b7:39:ff:df:10:24:ca:a2:16:ab:e5:ff:6b:c2:
         9b:cf:51:2f:be:80:17:ce:8c:e4:4f:e4:7d:3f:88:6c:24:6a:
         27:f0:52:da:1e:c5:c1:cc:47:9c:9e:f9:b7:52:4c:4a:5d:e5:
         d9:4d:b2:3e:00:63:f2:dc:62:58:e3:84:04:a2:72:6b:a1:a0:
         47:6f:b7:95:6a:d1:25:29:db:31:ad:ca:9d:2b:9a:c6:29:58:
         0e:83:57:f3:1e:36:42:b3:be:0d:72:27:59:10:95:97:01:85:
         20:78:37:93:68:f2:06:80:d2:15:60:2b:7e:39:7e:aa:9a:41:
         14:58:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org