Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADA84B6E4A9911ECA35DEE09D8A014CE.roa
File:                     ADA84B6E4A9911ECA35DEE09D8A014CE.roa (raw, json)
Hash identifier:          sAqtsmlSKucLZqgt4UYz+TsX3QZb+kG3cR9dyp9EFcc=
Subject key identifier:   26:58:91:5C:97:20:27:01:ED:3F:52:2B:1A:7E:F8:FC:BB:88:0C:3D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0562
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADA84B6E4A9911ECA35DEE09D8A014CE.roa
Signing time:             Sun 21 Nov 2021 07:07:25 +0000
ROA not before:           Sun 21 Nov 2021 07:07:20 +0000
ROA not after:            Mon 21 Nov 2022 07:07:20 +0000
asID:                     212238
IP address blocks:        102.165.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 21 07:07:20 2021 GMT
            Not After : Nov 21 07:07:20 2022 GMT
        Subject: CN=6199f02d-f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:59:8a:e0:33:b7:e6:b7:f2:6e:15:f4:c5:
                    44:b9:66:f9:42:fc:16:84:94:2d:7f:b5:85:d4:81:
                    d4:16:c5:5d:d2:2b:6b:9f:3f:b0:a6:7f:6c:7c:29:
                    c7:0f:81:63:a8:c3:2e:ea:b0:1c:1d:e9:21:5a:2f:
                    10:2b:d2:cd:d4:b7:da:f4:20:8a:2c:dd:14:d8:fc:
                    ff:27:6c:62:a2:6f:a3:52:71:8a:ed:12:32:c7:94:
                    2e:b4:00:d0:0c:2c:a1:db:07:b0:c0:05:85:2a:17:
                    f2:de:63:2c:04:cc:77:5e:53:26:a3:38:35:5b:a6:
                    56:26:39:62:15:46:57:45:36:36:9d:45:1e:9b:ba:
                    18:d7:96:6b:4a:76:5c:e4:7c:f4:52:dd:01:72:8f:
                    dd:d9:97:28:06:e6:8d:c3:a7:8b:ed:5c:64:de:c0:
                    00:20:10:62:9b:01:53:19:8a:94:e7:58:c4:48:0a:
                    4c:3b:fe:d0:80:f2:66:62:4a:15:88:23:75:74:38:
                    66:42:ad:fb:5a:03:17:79:0f:0b:0b:f2:bf:b4:fa:
                    64:83:dd:4f:b6:5f:6c:da:77:d2:85:50:83:80:ad:
                    1a:80:3d:48:57:b6:1c:88:aa:3e:6c:38:c6:08:98:
                    7d:06:e4:b4:ce:c3:4d:2e:d3:e5:7f:86:bb:a9:52:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:58:91:5C:97:20:27:01:ED:3F:52:2B:1A:7E:F8:FC:BB:88:0C:3D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADA84B6E4A9911ECA35DEE09D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:2d:b9:9a:7d:4a:db:71:bf:bd:46:66:33:51:dd:91:6b:4e:
         a8:8c:7f:49:1a:e4:ee:0d:10:1e:34:9f:29:71:cd:82:41:3c:
         46:ce:4e:76:62:d0:ab:21:92:4f:07:df:72:35:94:c3:99:2e:
         76:15:52:43:68:94:69:a1:45:22:02:d6:01:c5:32:55:79:09:
         7b:e9:c9:5e:5b:51:69:85:63:0d:67:93:3e:29:a9:83:43:4d:
         40:a8:91:ca:39:a1:42:43:da:83:18:2d:e9:e5:c1:14:31:cf:
         ff:a2:6d:5f:6c:cd:6e:b3:c5:b3:42:01:6e:c5:df:ba:9b:67:
         ce:12:2e:fc:50:75:33:dd:6b:54:8e:da:7a:12:ad:af:7a:f1:
         f5:ae:b4:6a:c3:5e:bc:b2:1f:e6:46:e2:1a:5a:dc:8c:01:c4:
         42:9a:99:a4:7b:46:3e:c5:00:80:8b:26:fa:77:da:95:15:b5:
         e2:9e:6e:3e:93:0e:fc:c5:eb:f9:94:91:1e:a8:87:aa:5d:14:
         75:92:5d:ca:37:a1:78:b4:f5:82:00:96:8e:fb:7f:e1:ea:b9:
         13:01:fb:4a:a8:54:c0:ec:df:a1:7d:e2:56:39:9c:80:95:4b:
         9a:d0:11:c7:74:90:01:2f:ab:b5:fc:2c:f8:a5:ce:bc:d2:b8:
         cd:c0:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org