Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
File:                     DDF5A8843E7311EC91E6DE53D8A014CE.roa (raw, json)
Hash identifier:          S7xk8Oh+xmJ6vUhaNkzFXkL8WaPZ+BbuJjlqmalAv0w=
Subject key identifier:   6A:4C:1B:35:E1:59:95:AD:BC:4B:A7:56:AF:BC:63:0F:14:08:26:D8
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0540
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
Signing time:             Fri 05 Nov 2021 20:06:31 +0000
ROA not before:           Fri 05 Nov 2021 20:06:26 +0000
ROA not after:            Sat 05 Nov 2022 20:06:26 +0000
asID:                     397423
IP address blocks:        102.165.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov  5 20:06:26 2021 GMT
            Not After : Nov  5 20:06:26 2022 GMT
        Subject: CN=61858ec7-8699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:51:0d:87:41:33:28:45:93:da:a6:59:f4:
                    7c:17:92:17:e2:13:e9:7e:45:68:0b:a8:56:a0:c7:
                    a8:5d:13:2c:10:86:34:2a:cd:70:76:28:f4:1b:96:
                    2c:45:2d:26:87:d9:52:c7:90:c3:36:2b:76:4e:6c:
                    cc:f1:8f:79:a1:43:0d:5e:24:4e:94:1a:e0:80:21:
                    e9:5b:3c:a2:c7:be:76:56:46:9d:0c:25:f7:72:9f:
                    8d:4b:53:fe:2f:ea:52:9b:7d:50:de:e2:95:f2:8d:
                    c3:dc:70:4e:a7:f9:01:62:54:4a:cc:67:76:4f:5f:
                    82:02:31:ec:94:36:5f:9b:7f:df:28:b8:21:0f:9d:
                    8c:ff:92:bc:0c:8d:e4:23:ae:bf:1a:a2:24:44:6f:
                    aa:1c:f2:46:53:4a:67:2e:2e:3e:93:01:f9:a6:77:
                    16:9e:f7:02:be:4d:15:df:48:53:b9:64:e5:36:3f:
                    b6:e3:5e:d1:0c:59:ba:0b:1d:87:90:58:34:f8:a0:
                    ce:0c:ed:a8:0b:a3:d0:b0:22:8d:99:16:b3:4d:80:
                    96:66:bf:14:89:02:41:cb:78:3a:27:09:55:06:71:
                    a3:1d:cb:fa:c8:c4:e4:07:c3:fc:a5:39:85:aa:fc:
                    28:18:15:b6:57:80:b5:6e:ca:c0:5f:2f:1d:b9:e6:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4C:1B:35:E1:59:95:AD:BC:4B:A7:56:AF:BC:63:0F:14:08:26:D8
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:b5:65:e0:e3:05:eb:a4:06:b0:3e:89:f4:b2:57:fd:b1:
         86:25:1b:77:d3:36:3c:7a:cd:36:2c:17:44:54:82:44:6e:db:
         c5:65:a3:f8:9b:9f:2f:89:04:4a:56:8d:c8:92:b6:ae:fe:54:
         a1:48:fb:59:7d:e9:90:e4:ba:07:f1:82:a4:37:76:4b:22:57:
         3b:87:0a:36:4f:ae:d8:90:fb:cd:bf:42:88:d3:5b:83:83:18:
         6c:4e:34:bf:ea:aa:32:95:3b:1d:21:26:ed:99:00:f0:0e:2a:
         df:ff:15:13:1d:dd:11:9f:a9:1c:cf:bd:6d:58:2e:3f:8f:40:
         25:c1:8c:74:0f:b6:f6:9b:29:03:c7:a9:8b:28:95:48:47:e2:
         b8:2f:7c:46:84:27:a4:14:2f:bd:f9:8d:a7:89:7d:c1:19:94:
         31:4f:eb:1e:5f:b0:7d:d0:01:6c:39:35:3f:74:27:48:a5:f5:
         35:38:b8:29:f5:a1:d2:af:20:0f:a7:81:95:cf:ec:2a:b0:98:
         ce:25:6e:fd:a8:40:81:d0:2f:9e:d6:45:1f:2e:2c:bc:2d:e9:
         da:74:8a:c0:da:27:53:45:62:01:e5:1c:30:d8:e3:16:47:d6:
         39:0a:b1:a0:65:80:ad:c6:e2:de:cc:b7:1d:fc:2c:46:57:a0:
         af:ab:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org