Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9991D666A56311EC9228CD955A40D577.roa
File:                     9991D666A56311EC9228CD955A40D577.roa (raw, json)
Hash identifier:          0lNNXdKqr3nHMLwBq3vI1FYzBXh++IutkDWsoSYo5cY=
Subject key identifier:   39:8D:46:98:D4:C8:B4:1E:2F:5F:2F:BC:C5:85:41:8B:E2:76:52:CA
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0606
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9991D666A56311EC9228CD955A40D577.roa
Signing time:             Wed 16 Mar 2022 19:59:34 +0000
ROA not before:           Wed 16 Mar 2022 19:59:30 +0000
ROA not after:            Thu 16 Mar 2023 19:59:30 +0000
asID:                     207459
IP address blocks:        102.165.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Mar 16 19:59:30 2022 GMT
            Not After : Mar 16 19:59:30 2023 GMT
        Subject: CN=623241a6-67af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:c1:a4:39:fc:d8:35:33:68:0e:b7:6a:8a:
                    4a:04:07:ea:89:e1:aa:42:4a:9c:98:02:a9:48:48:
                    be:50:c2:c1:6a:ab:01:a2:b0:85:85:2c:bf:cd:3d:
                    3c:09:72:82:37:b9:59:c0:4f:1e:ff:58:40:08:77:
                    4f:e1:38:d9:5d:8b:e8:bc:e7:c3:06:a6:6e:81:c7:
                    81:76:8f:6e:e7:6d:21:c6:2c:f1:54:b1:27:d8:d5:
                    c8:b5:06:2f:5c:57:2d:bd:81:d1:37:3c:2e:73:2f:
                    d6:12:79:38:79:16:76:97:7b:2d:5b:50:0d:73:51:
                    61:6e:98:aa:2c:be:0a:64:f4:2e:a3:f8:ab:e7:f5:
                    bf:6a:7e:d4:0d:45:5c:30:97:e2:39:a6:3e:c0:bd:
                    a6:1b:12:b1:97:30:3f:fb:03:cb:5e:a3:0a:1e:d5:
                    44:67:e3:65:46:1e:c2:e2:10:67:11:2c:e0:b7:f5:
                    70:9a:42:4e:ed:b3:c0:61:59:d1:e8:2f:44:a9:15:
                    51:a1:74:45:be:e1:73:b2:71:22:3c:8e:05:dc:53:
                    20:e5:8a:69:9c:bb:49:62:2e:b2:bb:52:c9:20:7e:
                    cb:77:0a:b3:60:fa:cc:e0:90:41:84:88:38:da:65:
                    25:ff:b7:40:e0:ee:17:2c:89:e3:bd:65:b0:52:71:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:46:98:D4:C8:B4:1E:2F:5F:2F:BC:C5:85:41:8B:E2:76:52:CA
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9991D666A56311EC9228CD955A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:76:52:4d:7c:a1:7d:95:3b:fe:49:74:5c:ab:1b:27:25:b9:
         f2:c1:b1:1f:05:23:35:f8:14:0c:73:32:af:bd:95:c6:4d:4c:
         f2:74:6d:2e:76:d0:c9:1e:b6:a2:01:7e:4f:e4:a8:bf:a3:2c:
         88:a7:79:9d:0b:e3:ae:a3:35:dd:b0:b9:5c:f9:d1:8a:8e:79:
         02:60:72:4d:05:5c:be:33:6f:ae:de:15:4c:fd:0d:9f:e6:ab:
         65:8e:36:ad:81:9f:3a:60:00:ea:9a:b3:ab:a2:a5:e6:d1:64:
         89:c2:74:da:ad:dd:2b:53:2e:68:d1:52:b7:32:f5:ab:da:2a:
         b3:d1:c3:a0:5d:91:f0:6f:7b:3c:42:7b:4d:f2:58:24:ab:5c:
         90:dd:64:ca:f9:18:fd:3c:9c:cd:6d:99:9b:f7:a6:f7:dc:90:
         70:4f:d4:3d:a8:a7:b6:42:07:55:81:0b:c6:a9:35:d3:ab:1d:
         c2:be:8a:f3:16:06:e8:38:38:74:44:41:7e:f0:f0:a5:48:a7:
         b3:4e:10:0e:6f:a5:58:64:64:81:4e:d5:04:fe:06:c2:ba:af:
         cb:43:d1:33:f3:2d:58:f1:15:20:d6:24:8d:25:4d:1f:c8:56:
         f8:f8:02:f5:1c:ae:c1:bc:1f:f9:5a:76:a3:d3:6f:06:17:6b:
         84:7a:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org