Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/486E687E31D011EB83BAB352F8AEA228.roa
File:                     486E687E31D011EB83BAB352F8AEA228.roa (raw, json)
Hash identifier:          15s95k0b8HX7flnN1az93//iEqpr70rDFQ49B1jMiYU=
Subject key identifier:   41:F2:CC:2C:D6:AC:82:A4:87:62:59:2A:51:CE:01:9E:8D:A1:77:4C
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       6D
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/486E687E31D011EB83BAB352F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:20:21 +0000
ROA not before:           Sun 29 Nov 2020 23:20:16 +0000
ROA not after:            Sun 30 Jul 2023 23:20:16 +0000
asID:                     37119
IP address blocks:        105.173.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:20:16 2020 GMT
            Not After : Jul 30 23:20:16 2023 GMT
        Subject: CN=5fc2db34-2fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:be:4c:70:90:62:1b:87:b8:1d:be:01:b1:
                    9c:3a:63:28:5a:49:5f:85:66:95:76:e8:85:7c:ef:
                    99:84:ce:a4:de:10:87:e9:57:98:bf:a1:fd:5d:ec:
                    e6:a5:9f:d7:4a:95:40:76:be:3c:2f:02:8f:f5:a9:
                    93:d0:26:fe:1d:6b:4f:e5:60:5c:82:5d:d2:37:5e:
                    b4:58:8d:82:47:ce:93:0f:a9:2b:70:58:50:74:39:
                    9d:c4:bc:3c:6b:70:b7:fa:f5:1d:9b:a2:fc:ee:f3:
                    a1:e4:41:1b:02:ce:00:29:00:27:a7:d4:f2:c4:db:
                    56:43:34:bd:fa:e6:a4:6d:42:07:44:e0:fa:43:d9:
                    cd:46:85:c7:51:d3:26:fb:8a:62:3b:44:71:f4:b2:
                    6b:a6:e7:ea:96:de:05:bc:55:10:7d:d9:49:c2:55:
                    a7:a2:bd:f9:7d:f9:8a:0a:d6:7f:5d:1e:40:fc:36:
                    bb:27:dc:78:41:bf:0d:79:e3:30:ea:5b:c2:39:b6:
                    87:cf:e8:e4:47:cc:c1:72:49:52:74:a0:73:19:23:
                    9a:0a:10:91:fb:17:28:1c:01:10:62:01:43:cf:5d:
                    ce:db:69:16:09:c6:33:08:33:35:64:39:79:b1:02:
                    ef:e1:22:0a:39:71:db:01:da:f4:f5:fb:95:f9:80:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:CC:2C:D6:AC:82:A4:87:62:59:2A:51:CE:01:9E:8D:A1:77:4C
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/486E687E31D011EB83BAB352F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:c1:57:36:33:c2:69:22:9e:17:45:23:1b:65:69:05:bc:
         8d:e7:56:fa:a7:73:b0:ae:f9:91:99:ea:84:7f:1e:6b:bc:d8:
         a7:3a:04:a2:71:10:7e:d5:61:b0:d7:50:2d:46:7d:02:67:22:
         aa:56:f7:36:0e:9e:9b:70:f8:a7:57:57:de:ec:88:71:b9:39:
         14:c3:fe:89:db:94:d3:f8:96:90:76:09:b4:5c:65:12:b0:2c:
         5c:8a:7f:55:1e:c9:70:d1:ef:fc:8e:a8:80:16:43:de:7c:31:
         7f:bb:c0:be:f1:c0:87:80:66:ac:c9:3d:f5:db:6e:f8:89:35:
         2f:f3:d0:77:41:06:26:ed:70:fc:dc:a2:ae:1c:cf:e6:ce:a2:
         0a:2e:52:3b:3a:fa:ea:e5:af:43:8d:0d:96:ca:6b:f7:92:13:
         4a:88:57:6b:f5:00:f2:18:11:bd:03:c4:9d:7b:95:13:17:d6:
         2a:13:14:f4:83:36:a5:58:0c:da:60:fa:88:98:11:7d:ef:51:
         a6:24:e6:48:64:4d:4a:67:13:c5:95:bd:35:b9:5b:14:67:5c:
         2a:a9:18:fa:1f:5e:60:f3:19:02:2e:b3:5b:c2:f8:1f:b9:0b:
         8f:38:e8:f0:3b:5f:aa:71:8a:c7:60:55:cf:89:e1:1b:7d:08:
         2f:da:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org