Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B09567431CA11EB941B6D4CF8AEA228.roa
File:                     1B09567431CA11EB941B6D4CF8AEA228.roa (raw, json)
Hash identifier:          Yi1zIgMnvRrLCQjMd/cwB0Fg4MTQuNK49btJh0S2hcM=
Subject key identifier:   71:0F:90:D6:12:7D:05:B5:3B:D1:C1:38:71:E2:4E:83:27:ED:13:29
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       59
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B09567431CA11EB941B6D4CF8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:36:07 +0000
ROA not before:           Sat 28 Nov 2020 22:36:02 +0000
ROA not after:            Sun 30 Jul 2023 22:36:02 +0000
asID:                     37119
IP address blocks:        105.172.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:36:02 2020 GMT
            Not After : Jul 30 22:36:02 2023 GMT
        Subject: CN=5fc2d0d7-193a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:0b:1a:9e:7b:61:2f:de:54:56:57:98:5e:
                    53:23:e4:1d:7b:60:32:87:73:db:26:f5:c1:de:ef:
                    1c:0c:49:c9:8b:f5:1a:de:8c:88:06:94:7f:17:97:
                    0f:16:51:3c:08:e9:0b:60:61:4b:66:e7:aa:ee:60:
                    50:41:b8:45:8a:4e:28:6d:88:26:7b:b6:05:c5:d3:
                    a1:0e:78:12:fd:74:74:c6:56:5e:f2:f5:b2:13:8d:
                    d0:15:94:5b:90:8b:93:f6:60:c1:cb:84:3a:08:db:
                    72:1e:eb:a9:89:2a:b3:0f:90:84:10:a5:d6:15:64:
                    1e:eb:f2:84:d8:cd:24:72:c8:be:4b:c2:81:86:f6:
                    c4:a8:ec:7e:1f:3e:e9:2e:e6:a2:87:9b:ea:0f:0f:
                    23:ea:65:d6:57:fe:c1:fb:4e:68:69:29:c6:f2:72:
                    96:7c:94:dd:0f:56:4a:51:a9:97:e2:cf:8c:a7:d4:
                    9c:f7:d2:95:86:b7:b0:0f:b1:6f:2e:d7:bf:17:f7:
                    91:d4:4e:1a:5a:bb:a7:7a:b9:90:2a:22:11:d0:4b:
                    dd:bd:83:cf:00:c2:c1:99:41:6a:26:cc:da:35:e1:
                    40:57:ba:72:c5:76:8d:1d:4f:6f:42:ec:72:7a:37:
                    cd:65:6f:55:2e:88:fd:81:b3:73:85:dd:57:81:5c:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:90:D6:12:7D:05:B5:3B:D1:C1:38:71:E2:4E:83:27:ED:13:29
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B09567431CA11EB941B6D4CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:66:d2:fa:8d:4c:d5:26:21:65:cc:4e:51:fc:ca:6e:68:
         ee:be:60:18:9c:31:8e:e8:01:12:09:ab:a1:20:30:4d:7c:48:
         44:f1:8d:c2:60:50:01:2c:a5:36:39:a6:f2:c1:dd:8f:a2:cf:
         6a:7e:43:9e:5e:f4:63:2e:7f:8e:f0:96:b4:40:94:9f:cc:a7:
         69:d2:a7:09:50:44:47:92:fc:95:0c:0e:3f:12:b3:2b:36:ab:
         c3:19:dd:78:b5:a5:00:3c:a3:c7:73:90:4d:0e:4b:01:03:3b:
         d6:61:73:1f:3c:63:87:e2:cc:a8:7c:d8:42:51:ba:37:14:f9:
         d1:d8:e6:40:e4:02:55:25:8c:71:3d:5c:82:92:ca:98:cd:a9:
         d5:99:7f:61:7b:d4:6c:10:1d:3b:e0:9b:d8:a7:b2:e4:0d:ac:
         1d:26:33:dd:8f:0c:22:a2:12:5c:8f:6a:89:e1:11:d0:3d:2b:
         07:97:a1:5f:25:d7:5e:5b:53:89:98:c9:1f:eb:73:b9:e4:0c:
         b3:5f:f9:b3:ff:df:55:ff:c0:ec:ac:a6:83:68:8b:30:04:02:
         bd:6b:f6:b4:ef:5a:20:65:50:51:e2:1b:98:ae:a9:dc:e7:c7:
         af:0e:0c:5e:a4:56:76:d5:3d:3b:f1:1f:b8:54:3d:29:a9:2d:
         26:2a:64:29
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBWTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
MEY1MEFGMTEwLwYDVQQFEyhBRTk4QTVGREFEMkRDOUY0RkMxQkU0N0Y2Njg1N0E4
QzQ3OTg4MTAyMB4XDTIwMTEyODIyMzYwMloXDTIzMDczMDIyMzYwMlowGDEWMBQG
A1UEAxMNNWZjMmQwZDctMTkzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8fCxqee2Ev3lRWV5heUyPkHXtgModz2yb1wd7vHAxJyYv1Gt6MiAaUfxeX
DxZRPAjpC2BhS2bnqu5gUEG4RYpOKG2IJnu2BcXToQ54Ev10dMZWXvL1shON0BWU
W5CLk/ZgwcuEOgjbch7rqYkqsw+QhBCl1hVkHuvyhNjNJHLIvkvCgYb2xKjsfh8+
6S7mooeb6g8PI+pl1lf+wftOaGkpxvJylnyU3Q9WSlGpl+LPjKfUnPfSlYa3sA+x
by7Xvxf3kdROGlq7p3q5kCoiEdBL3b2DzwDCwZlBaibM2jXhQFe6csV2jR1Pb0Ls
cno3zWVvVS6I/YGzc4XdV4FcTT8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRxD5DW
En0FtTvRwThx4k6DJ+0TKTAfBgNVHSMEGDAWgBSumKX9rS3J9Pwb5H9mhXqMR5iB
AjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhBRUEyMjgvcnBpbF9h
MHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnBpbF9hMHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhB
RUEyMjgvMUIwOTU2NzQzMUNBMTFFQjk0MUI2RDRDRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWmsoDANBgkqhkiG9w0BAQsF
AAOCAQEAW0pm0vqNTNUmIWXMTlH8ym5o7r5gGJwxjugBEgmroSAwTXxIRPGNwmBQ
ASylNjmm8sHdj6LPan5Dnl70Yy5/jvCWtECUn8ynadKnCVBER5L8lQwOPxKzKzar
wxndeLWlADyjx3OQTQ5LAQM71mFzHzxjh+LMqHzYQlG6NxT50djmQOQCVSWMcT1c
gpLKmM2p1Zl/YXvUbBAdO+Cb2Key5A2sHSYz3Y8MIqISXI9qieER0D0rB5ehXyXX
XltTiZjJH+tzueQMs1/5s//fVf/A7Kymg2iLMAQCvWv2tO9aIGVQUeIbmK6p3OfH
rw4MXqRWdtU9O/EfuFQ9KaktJipkKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org