Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10C5D36831C011EBAD51AA41F8AEA228.roa
File:                     10C5D36831C011EBAD51AA41F8AEA228.roa (raw, json)
Hash identifier:          w8E+vRChfbJ122sLGTldfbnn0qjEUd71ua7BsPPnQ58=
Subject key identifier:   11:E1:01:F1:DB:71:A5:8B:17:53:31:AE:88:5A:4D:49:E2:DF:E5:99
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       2A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10C5D36831C011EBAD51AA41F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:24:15 +0000
ROA not before:           Sat 28 Nov 2020 21:24:11 +0000
ROA not after:            Sun 30 Jul 2023 21:24:11 +0000
asID:                     37119
IP address blocks:        105.169.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:24:11 2020 GMT
            Not After : Jul 30 21:24:11 2023 GMT
        Subject: CN=5fc2bfff-fc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:26:bc:86:61:41:12:21:fc:0c:48:dd:61:
                    d8:1c:63:c1:46:53:fc:c6:6f:07:d0:11:24:5d:52:
                    47:74:57:94:d9:76:87:32:96:11:51:8a:a7:ca:49:
                    ad:b6:81:44:85:b1:7b:21:8d:ce:5c:61:f2:ad:c3:
                    01:cb:ae:3f:1c:92:d5:ea:b1:1f:1e:a8:3b:1e:d2:
                    af:05:29:6a:90:bc:cb:c2:82:80:18:22:fd:cd:1a:
                    be:b8:42:c2:67:0c:90:63:ee:6a:0a:89:48:b7:7f:
                    57:f0:b9:22:c6:2b:a6:85:a1:1f:56:0b:13:8d:a0:
                    fa:44:ff:03:92:28:de:6b:64:4f:3b:a6:d3:dd:cf:
                    90:93:eb:f7:d9:9d:34:df:24:ca:c5:25:83:32:43:
                    d3:5f:85:92:58:10:01:d0:0e:8c:dd:c7:98:6a:b9:
                    1a:60:9e:bb:37:75:b6:b1:ac:82:60:82:fe:dd:04:
                    b8:1d:79:9b:95:bf:5b:5a:5e:af:7e:84:ce:0f:9f:
                    f8:89:76:20:5f:c6:78:ca:47:9e:10:75:2a:0c:33:
                    a8:4b:5d:02:16:7f:b4:16:32:d5:0f:d3:ee:10:d3:
                    66:e7:12:8f:72:ca:1e:49:6b:e1:45:70:1e:86:61:
                    c0:d5:61:65:8e:fb:46:a8:a8:fd:52:98:9a:10:81:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:01:F1:DB:71:A5:8B:17:53:31:AE:88:5A:4D:49:E2:DF:E5:99
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/10C5D36831C011EBAD51AA41F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:0b:2c:6b:7d:d3:c3:35:d7:90:63:3a:17:ec:15:eb:34:
         9f:a5:62:91:3d:26:23:a5:ac:db:60:a3:b0:c3:c7:18:ae:00:
         68:34:ec:fd:d1:a2:8c:65:54:4b:ee:71:9e:80:e6:ba:d9:a0:
         43:29:31:04:da:a6:f5:f0:63:c4:3a:4b:5a:31:c1:e5:7f:06:
         b3:50:17:98:9c:2e:56:fd:f6:64:6f:54:23:d1:da:8d:ec:77:
         13:d7:66:47:82:f8:43:72:49:14:3c:77:e0:4d:85:a9:dc:37:
         9b:96:b1:13:84:ff:c5:36:14:99:2c:34:10:6c:d4:e8:51:37:
         0a:9b:d8:bb:9d:db:ad:4f:50:fd:3d:fe:2d:87:fd:78:e6:f8:
         82:e7:47:ae:7b:f5:1d:2a:29:ff:e3:54:9f:db:11:9b:b6:f5:
         86:cb:cb:60:60:06:84:a5:38:d7:48:b1:73:3f:c2:ce:19:b8:
         0b:31:01:3d:46:7a:a0:69:17:62:f8:3e:21:a6:d5:84:8d:32:
         87:26:3a:fa:dc:df:a4:e7:3f:97:da:3f:07:f9:f7:ef:32:36:
         a9:8d:56:b4:ca:a9:bf:35:a8:2a:33:8c:f4:bb:bb:2e:e2:92:
         6e:70:29:cc:55:61:bb:84:84:89:94:3f:18:16:40:f7:27:c5:
         c5:35:72:4c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
MEY1MEFGMTEwLwYDVQQFEyhBRTk4QTVGREFEMkRDOUY0RkMxQkU0N0Y2Njg1N0E4
QzQ3OTg4MTAyMB4XDTIwMTEyODIxMjQxMVoXDTIzMDczMDIxMjQxMVowGDEWMBQG
A1UEAxMNNWZjMmJmZmYtZmM4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQfJryGYUESIfwMSN1h2BxjwUZT/MZvB9ARJF1SR3RXlNl2hzKWEVGKp8pJ
rbaBRIWxeyGNzlxh8q3DAcuuPxyS1eqxHx6oOx7SrwUpapC8y8KCgBgi/c0avrhC
wmcMkGPuagqJSLd/V/C5IsYrpoWhH1YLE42g+kT/A5Io3mtkTzum093PkJPr99md
NN8kysUlgzJD01+FklgQAdAOjN3HmGq5GmCeuzd1trGsgmCC/t0EuB15m5W/W1pe
r36Ezg+f+Il2IF/GeMpHnhB1KgwzqEtdAhZ/tBYy1Q/T7hDTZucSj3LKHklr4UVw
HoZhwNVhZY77Rqio/VKYmhCBAq0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQR4QHx
23GlixdTMa6IWk1J4t/lmTAfBgNVHSMEGDAWgBSumKX9rS3J9Pwb5H9mhXqMR5iB
AjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhBRUEyMjgvcnBpbF9h
MHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnBpbF9hMHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhB
RUEyMjgvMTBDNUQzNjgzMUMwMTFFQkFENTFBQTQxRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWmpQDANBgkqhkiG9w0BAQsF
AAOCAQEALk8LLGt908M115BjOhfsFes0n6VikT0mI6Ws22CjsMPHGK4AaDTs/dGi
jGVUS+5xnoDmutmgQykxBNqm9fBjxDpLWjHB5X8Gs1AXmJwuVv32ZG9UI9Hajex3
E9dmR4L4Q3JJFDx34E2Fqdw3m5axE4T/xTYUmSw0EGzU6FE3CpvYu53brU9Q/T3+
LYf9eOb4gudHrnv1HSop/+NUn9sRm7b1hsvLYGAGhKU410ixcz/Czhm4CzEBPUZ6
oGkXYvg+IabVhI0yhyY6+tzfpOc/l9o/B/n37zI2qY1WtMqpvzWoKjOM9Lu7LuKS
bnApzFVhu4SEiZQ/GBZA9yfFxTVyTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org