Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8ADBC9EF42411ECA8FD04F8F1222468.roa
File:                     B8ADBC9EF42411ECA8FD04F8F1222468.roa (raw, json)
Hash identifier:          TPpnXS0gOl9/47TOTAy7rU6P0W8F9TKFR0uAAik5Hb0=
Subject key identifier:   FD:36:C0:31:53:63:CA:1D:67:28:E0:03:FC:B4:BF:4D:7C:B9:2F:E9
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       06B6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8ADBC9EF42411ECA8FD04F8F1222468.roa
Signing time:             Sat 25 Jun 2022 01:18:30 +0000
ROA not before:           Sat 25 Jun 2022 01:18:26 +0000
ROA not after:            Sun 25 Jun 2023 01:18:26 +0000
asID:                     40676
IP address blocks:        102.165.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 25 01:18:26 2022 GMT
            Not After : Jun 25 01:18:26 2023 GMT
        Subject: CN=62b66266-d674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:25:32:ac:dc:e0:80:ca:f5:0d:9b:21:f6:
                    55:5f:33:7f:56:30:22:f3:c6:2e:14:ff:8a:7f:8d:
                    08:0c:63:64:8b:eb:25:80:11:6b:61:24:e3:12:b2:
                    40:9d:f2:c6:b6:10:30:9f:64:f8:e1:8e:e3:f4:9f:
                    dd:a1:c3:bc:21:86:3f:d5:c0:a4:e2:1b:f3:9a:2a:
                    12:0f:17:3d:fe:fa:24:74:fb:93:cf:d6:be:6f:47:
                    96:84:aa:24:81:89:df:bd:2c:67:e9:31:6a:2a:9b:
                    80:0b:ad:df:70:08:aa:d0:56:1d:c5:4e:d5:33:40:
                    82:ce:a7:57:2d:c4:16:99:33:18:31:15:ea:40:5e:
                    8b:52:2f:82:fc:5e:d5:42:55:13:64:bb:56:cf:87:
                    c1:74:59:7d:f6:10:fe:7a:8b:b6:e6:b5:66:e1:f4:
                    8e:dc:68:d9:96:fb:17:4e:a6:87:3a:0c:44:ce:9c:
                    9e:d3:a5:f4:4c:d4:37:57:b4:51:a0:8e:47:07:35:
                    80:c4:ef:5a:a1:ad:85:6b:c0:48:9a:a3:72:b4:fc:
                    3b:b8:be:41:3b:47:65:58:28:c5:84:03:39:44:ba:
                    3b:93:18:7c:c2:3e:5c:02:29:7c:9d:0d:05:32:9b:
                    8e:0e:e8:b9:33:e6:44:98:6f:a7:ff:39:76:52:42:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:C0:31:53:63:CA:1D:67:28:E0:03:FC:B4:BF:4D:7C:B9:2F:E9
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8ADBC9EF42411ECA8FD04F8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:58:27:20:df:de:44:93:9c:14:9f:93:5e:87:3a:ff:81:ef:
         5a:5a:97:bf:56:22:5a:f1:10:09:96:58:3b:da:01:e4:63:67:
         c5:1b:ce:6f:7e:88:38:ca:ff:4e:77:fa:d3:6d:8a:d3:b3:6c:
         68:d6:d2:ec:31:bb:4c:a8:f4:f0:9e:e5:f7:0d:57:f2:83:b1:
         f9:b0:22:85:63:ca:e6:dd:ce:3a:fa:92:c4:9e:ce:8c:bc:0d:
         85:25:b9:ac:bc:09:f2:4c:40:01:da:1e:df:fe:e7:32:05:7a:
         65:b6:fc:48:af:29:7d:b2:4a:8c:62:b7:7a:54:b6:69:19:ec:
         a3:2d:b1:53:f8:19:36:9f:59:2d:ea:e8:9b:ed:a2:40:e3:7c:
         fe:8d:9b:11:39:c0:8f:ff:fc:e7:85:24:e1:c0:4d:95:87:7b:
         c9:cf:2c:9f:54:8c:c0:b1:fe:bd:93:7c:b1:c8:23:12:87:03:
         5a:db:de:6f:07:da:98:d6:4b:48:4f:a2:94:a4:20:c4:7b:ff:
         d0:de:95:d1:22:e1:78:a9:68:14:02:55:bd:22:d0:5c:ac:0b:
         94:67:b7:1a:56:61:8f:ea:ae:60:f9:2c:82:fc:2c:22:70:d4:
         64:a0:25:c3:47:f1:64:54:97:5a:9a:5f:9e:6a:e9:36:7f:39:
         73:a6:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org