Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B604633E587111ECB4C8DE8E5A40D577.roa
File:                     B604633E587111ECB4C8DE8E5A40D577.roa (raw, json)
Hash identifier:          LoieUC+HFPG3SWzcjAvqRA1HC1eF0nFi7bod/7oT4/k=
Subject key identifier:   58:C2:59:58:D6:D3:DD:17:C3:ED:C4:D4:F7:73:E2:9D:63:9F:5C:32
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       057C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B604633E587111ECB4C8DE8E5A40D577.roa
Signing time:             Wed 08 Dec 2021 21:56:35 +0000
ROA not before:           Wed 08 Dec 2021 21:56:31 +0000
ROA not after:            Thu 08 Dec 2022 21:56:31 +0000
asID:                     11426
IP address blocks:        102.165.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec  8 21:56:31 2021 GMT
            Not After : Dec  8 21:56:31 2022 GMT
        Subject: CN=61b12a13-9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:66:06:d4:83:85:c8:6f:3b:aa:87:e3:4a:
                    1a:b2:13:2f:2e:2b:af:d1:48:dd:7c:89:3d:15:76:
                    5c:72:4b:99:2e:03:71:88:b4:f2:6a:7e:70:15:86:
                    6d:e5:42:8e:73:4b:7d:93:55:2a:78:30:42:d0:85:
                    28:b2:64:84:3a:1d:9d:7b:5b:18:a7:b8:9a:a3:bf:
                    17:ac:3a:3a:4f:c9:25:14:2b:e4:92:80:54:31:31:
                    f0:58:f9:ed:e4:07:57:8f:32:e9:09:00:c0:ba:95:
                    0c:cb:14:99:97:7e:13:3c:f4:2f:2f:d3:b4:05:6d:
                    99:a4:22:8b:74:e5:49:6e:a2:08:16:0e:69:28:26:
                    93:21:f6:39:59:f4:e1:a6:f1:81:fb:9c:c3:03:c0:
                    7a:42:ec:67:59:34:8a:65:49:88:c4:14:86:26:13:
                    a6:30:b2:81:9b:54:8f:7d:c5:d1:92:43:95:e8:4f:
                    93:b3:dc:aa:56:c5:44:2d:48:9b:49:ff:94:50:06:
                    2e:09:2b:a8:79:32:d1:18:8d:41:3f:4f:36:91:fc:
                    fd:00:eb:08:2b:8d:61:84:b3:3d:d6:76:41:d3:d9:
                    75:22:1c:ae:37:4e:c5:97:2d:0f:11:ef:0e:c9:76:
                    78:f1:1e:6b:d3:9a:f9:4e:4c:fe:3b:f5:fc:1a:4d:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C2:59:58:D6:D3:DD:17:C3:ED:C4:D4:F7:73:E2:9D:63:9F:5C:32
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B604633E587111ECB4C8DE8E5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:51:83:86:25:81:d0:5d:82:af:de:fd:2c:35:e4:51:49:f3:
         aa:8a:22:9f:b2:ba:1c:9c:6d:7d:59:20:af:b2:5c:74:7a:51:
         31:7d:f8:ad:ba:7f:b7:77:30:24:68:fe:24:4f:51:de:0c:d8:
         6a:14:a6:81:14:cb:66:f9:fd:5c:d1:9f:3f:33:11:e1:5e:1e:
         01:ba:56:07:6e:65:ef:cf:8e:3d:c2:be:ac:21:86:bc:1e:3a:
         67:e1:b5:29:78:f3:5d:85:48:1a:3d:84:6e:bb:3a:eb:b4:92:
         6c:a3:ed:9e:c0:28:81:71:61:80:18:8a:62:36:de:81:f0:8c:
         1c:7e:53:39:e6:cb:b2:43:fc:cd:33:54:ed:b9:1b:d8:b2:b4:
         96:d5:e9:b1:99:0b:a4:d2:00:74:f7:ca:c1:43:bd:a8:ae:46:
         96:97:ef:35:78:f0:65:b4:6c:e0:02:6f:14:01:6c:df:bf:bb:
         d6:10:75:b0:77:a5:90:90:b2:fe:f5:bf:f1:4e:0b:7e:68:1e:
         35:e5:d6:41:c8:90:93:63:fd:83:10:6c:3b:69:35:49:db:9b:
         31:44:2c:4b:79:d0:eb:cf:66:69:8e:8f:ba:0a:60:90:08:8e:
         fb:28:91:5f:76:e4:75:59:0f:6e:ab:32:0c:a4:f7:ae:78:a6:
         22:f2:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org