Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7794269434CC11EBAB9E352EF8AEA228.roa
File:                     7794269434CC11EBAB9E352EF8AEA228.roa (raw, json)
Hash identifier:          1GOfl3/oPCJ4mp0OSk6DmPcllQOe+Be7C2SYDqegOKM=
Subject key identifier:   A1:15:C0:4F:2D:11:03:8F:53:01:0D:93:21:24:39:2D:CF:E7:28:B4
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       90
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7794269434CC11EBAB9E352EF8AEA228.roa
Signing time:             Wed 02 Dec 2020 18:30:35 +0000
ROA not before:           Wed 02 Dec 2020 18:30:31 +0000
ROA not after:            Sun 30 Jul 2023 18:30:31 +0000
asID:                     37119
IP address blocks:        105.169.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Dec  2 18:30:31 2020 GMT
            Not After : Jul 30 18:30:31 2023 GMT
        Subject: CN=5fc7dd4b-2494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:bd:b4:37:91:f7:22:2d:54:95:d5:77:ea:
                    8c:9f:1c:be:49:96:57:e3:e1:f5:1d:19:89:87:84:
                    83:a0:95:cc:64:45:ce:bc:8f:5d:17:82:23:61:69:
                    9c:a8:4f:17:06:ad:e7:a8:51:9b:50:81:f5:6a:09:
                    c1:3c:de:e2:e9:cf:d7:86:0e:29:71:e9:45:6c:96:
                    42:f2:02:ab:77:0c:38:03:c5:ca:e0:f7:88:04:b0:
                    99:4d:dd:73:38:67:81:e3:b6:79:9f:f1:2c:a7:12:
                    d3:d8:af:38:ae:2c:5c:2c:4e:49:bf:0c:08:4c:f7:
                    5a:a3:20:4a:4e:4a:c3:c1:da:33:5e:8d:26:8d:34:
                    65:0f:1f:3a:58:1f:89:70:1e:17:fa:f9:e8:46:cd:
                    95:97:cd:15:01:66:7e:a9:c2:24:f6:f0:e0:51:84:
                    7f:d3:4b:b3:fa:c5:2b:61:69:af:83:70:2f:7e:e7:
                    87:b2:10:7f:1f:51:12:6b:bf:68:ff:5a:89:aa:fe:
                    0e:17:f6:62:c3:69:e7:e4:46:06:c1:6c:48:2f:d5:
                    3d:12:2b:5a:97:0f:29:e6:1f:92:4d:7f:e9:fd:f7:
                    7d:0b:99:ec:80:32:c3:b9:f5:df:9e:13:c5:33:20:
                    0f:89:f3:ac:48:3c:cc:94:82:03:e0:b9:97:9d:75:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:C0:4F:2D:11:03:8F:53:01:0D:93:21:24:39:2D:CF:E7:28:B4
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7794269434CC11EBAB9E352EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:de:55:a4:07:54:f2:25:5e:83:61:8e:be:d2:e8:90:60:
         02:58:7c:92:8d:7c:34:e3:57:36:65:1a:f3:20:84:b6:d4:2f:
         39:e7:83:5b:f6:df:e6:1f:54:ce:35:44:18:28:1d:1a:4d:20:
         02:95:ea:dc:c4:18:9e:50:70:60:44:1a:ce:ef:ed:eb:cf:24:
         87:02:e6:39:0b:2d:1f:16:86:84:10:4a:e8:5a:17:01:34:76:
         84:bb:57:6a:17:aa:a3:c2:eb:bd:5b:31:f3:25:f6:76:59:fe:
         45:d0:b1:60:02:8d:68:ed:74:ce:2c:b5:2b:ea:67:83:bb:42:
         50:c1:61:a7:01:4b:ec:ea:ca:11:d4:b6:1a:c8:58:66:bc:18:
         9a:80:67:00:19:c8:e3:8a:c2:dc:c2:70:46:56:19:8f:d3:fd:
         7a:25:3b:e1:6d:62:c6:82:d8:ba:f6:90:3b:5d:2f:48:d1:c7:
         6d:77:bf:22:44:99:c1:e5:f4:16:a7:b8:f9:ed:d3:de:ea:2e:
         26:7b:7f:dc:53:c8:39:12:4f:3e:0e:02:7a:86:6a:e4:2f:8c:
         18:cf:2c:18:39:ba:9f:b6:f5:70:b8:b3:8b:43:a4:96:a0:8c:
         c3:44:ef:be:81:1c:98:12:c8:d4:65:c9:e4:22:ac:fb:7f:40:
         e0:2a:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 18:57:36 2023 by rpki-client on console-fra.rpki-client.org