Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
File:                     ADC23E08F9C511ECBE4034E3F1222468.roa (raw, json)
Hash identifier:          vfP5S1Y0M5U0vULzDYJWVl/n6JJDl3QkGblSxUR87aU=
Subject key identifier:   1C:B7:45:02:1A:0B:09:1C:E7:6E:77:2C:0E:34:70:87:24:F7:20:51
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       06DB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
Signing time:             Sat 02 Jul 2022 05:13:16 +0000
ROA not before:           Sat 02 Jul 2022 05:13:12 +0000
ROA not after:            Sun 02 Jul 2023 05:13:12 +0000
asID:                     43350
IP address blocks:        102.129.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  2 05:13:12 2022 GMT
            Not After : Jul  2 05:13:12 2023 GMT
        Subject: CN=62bfd3ec-a130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:14:3a:5f:1b:bc:c2:aa:fe:bc:55:60:27:
                    2c:cf:9c:71:ae:fb:28:a2:e9:ad:cd:9d:be:7d:9d:
                    4c:96:f4:c7:ab:d9:72:6c:62:e1:77:dc:41:19:d7:
                    6a:07:64:61:cb:20:91:f8:94:70:5d:25:aa:cb:b1:
                    42:d9:e3:64:b3:89:08:0b:fa:91:b1:06:5a:82:0a:
                    cf:19:a7:01:c4:ca:0d:13:93:8a:23:1b:25:e4:d8:
                    21:e1:bb:d0:84:f4:66:4d:30:81:54:73:33:f9:a4:
                    18:3b:66:ae:01:48:f8:11:f1:c7:32:d4:93:ed:98:
                    e8:f0:dd:4f:00:c0:7d:00:32:ac:a0:22:27:5e:b6:
                    87:a6:2e:6c:b8:18:18:04:2f:6b:86:2c:a0:33:41:
                    5f:ae:9e:25:ed:6f:43:2e:42:ee:28:96:c5:2d:fd:
                    05:f2:2a:ed:a5:b6:04:8d:9b:c8:fb:f7:ee:36:88:
                    4a:dd:fe:f0:f5:6e:1a:d9:6d:6a:33:37:e4:72:fd:
                    f7:26:b8:de:14:06:15:c6:27:50:94:48:58:46:94:
                    4e:6c:61:3f:fd:f8:98:ad:b3:b9:f0:50:07:66:78:
                    4c:4b:4d:25:b1:9c:ea:6e:56:c0:ce:d1:47:60:f3:
                    6e:91:b5:24:e9:35:4a:2e:f5:dc:e7:a0:8b:97:a9:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:45:02:1A:0B:09:1C:E7:6E:77:2C:0E:34:70:87:24:F7:20:51
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d1:80:a5:f9:f1:d1:85:6a:53:af:78:fc:3b:b5:20:9a:d8:
         c4:f4:c4:12:b3:8a:8d:61:7f:dd:81:82:b2:88:c3:13:ba:3b:
         80:46:b8:86:8e:04:9c:ed:3e:94:17:fb:1b:7b:26:3a:4d:ff:
         78:01:d9:53:b7:3d:cd:d4:65:b9:79:79:a8:7c:42:22:45:e9:
         d1:4a:ac:69:6e:71:51:72:c2:31:03:d6:c4:46:fb:28:8b:4c:
         37:25:de:0f:25:4d:ab:44:4f:4c:a3:84:0f:8b:e5:22:28:c2:
         65:03:19:7d:d3:de:8f:03:f9:ef:f9:5a:e4:fe:3f:a9:c7:63:
         bf:7f:f4:0b:ea:31:22:cc:5e:bf:48:14:bc:7e:7b:cc:84:a9:
         01:80:04:11:d2:b3:b9:91:98:d9:fb:95:fb:e0:23:b5:f9:c6:
         59:33:0c:9c:5a:4d:a7:fa:65:cc:52:e6:d8:02:56:8b:a9:31:
         7e:9d:d0:0c:7f:61:22:09:0d:70:7e:89:03:de:35:14:ad:09:
         34:a3:2d:49:a7:ad:72:fc:6c:47:ef:05:13:09:83:35:a9:f1:
         3b:10:e6:14:80:70:17:27:dc:a8:79:c3:a5:be:8f:cb:61:54:
         dc:3a:5b:cd:0c:ee:ee:a0:58:10:1a:04:df:f2:64:b3:04:4f:
         ee:d8:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org