Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9535D41431BF11EBB3D52941F8AEA228.roa
File:                     9535D41431BF11EBB3D52941F8AEA228.roa (raw, json)
Hash identifier:          qhQhxwbvy8wTGJF+SnxcCJxefBJsT/udPzmLNY+lSYk=
Subject key identifier:   D8:4D:93:20:34:82:0A:B0:56:11:4D:53:CF:E8:12:A1:A3:40:59:6C
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       28
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9535D41431BF11EBB3D52941F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:20:48 +0000
ROA not before:           Sat 28 Nov 2020 21:20:43 +0000
ROA not after:            Sun 30 Jul 2023 21:20:43 +0000
asID:                     37119
IP address blocks:        105.169.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:20:43 2020 GMT
            Not After : Jul 30 21:20:43 2023 GMT
        Subject: CN=5fc2bf30-bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:d8:a2:0c:f5:57:b7:6c:14:1a:55:83:e9:
                    4a:82:ba:67:04:86:95:68:2d:df:53:82:45:f9:fb:
                    48:2f:7c:78:0c:cd:72:3b:ec:fc:30:e9:5e:4a:a4:
                    09:5b:90:de:5b:03:59:bb:19:8d:fd:1f:ad:00:b5:
                    e3:0e:84:eb:5f:10:52:f3:86:9c:6a:0b:50:96:67:
                    97:18:c1:3d:ff:e4:d9:57:bb:27:18:f8:7e:f5:1f:
                    7f:23:e5:d2:75:d6:eb:02:f1:6d:02:df:bd:b8:f6:
                    94:69:98:f6:74:a7:57:6b:bb:25:7d:81:66:ec:60:
                    b8:7a:b8:09:64:13:c3:1b:ab:d6:25:88:b4:92:f7:
                    4c:a3:66:47:88:98:1a:0c:e0:55:c6:6a:4d:d7:59:
                    83:2e:fd:c9:1f:eb:c5:9e:11:83:8a:34:1c:28:55:
                    07:47:82:f3:b4:ad:55:4a:79:b5:7d:32:38:0f:ca:
                    b8:59:91:1b:70:1a:46:4b:91:0f:78:76:cf:76:2f:
                    42:19:40:e6:9d:d1:22:2b:8d:18:4d:a7:19:90:e6:
                    b6:71:d0:0c:89:42:c0:d6:e1:bf:37:50:53:65:b3:
                    9b:87:5d:63:eb:cb:28:75:b9:57:42:4e:b2:6e:d9:
                    7d:70:0c:cf:e9:ee:3d:61:20:1a:09:1e:04:b2:8b:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4D:93:20:34:82:0A:B0:56:11:4D:53:CF:E8:12:A1:A3:40:59:6C
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9535D41431BF11EBB3D52941F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:ea:c5:38:5b:6d:20:f1:4b:a1:f0:df:ee:38:91:30:ce:7a:
         e9:15:c7:ce:9d:29:10:cf:4f:91:94:ba:90:dd:c8:14:e1:7f:
         86:19:1b:dc:b1:23:a1:bb:77:35:02:cc:cb:69:32:25:24:74:
         7d:d1:00:23:c6:a7:f5:d4:c6:3c:fa:2b:0b:ce:21:da:55:78:
         ff:7a:12:1e:ba:98:49:20:ec:b0:97:7d:1b:db:25:68:4b:19:
         67:93:70:69:4f:74:1a:11:40:fc:35:ea:0c:69:fe:f2:26:5b:
         21:ef:40:31:97:13:19:b9:f5:12:84:d4:57:66:e3:78:ea:95:
         0a:6a:fd:64:40:41:ea:03:15:90:28:ea:fc:fa:b7:7f:15:ae:
         63:2d:91:10:77:e7:22:9d:aa:1e:c6:b5:0d:8c:14:0c:63:6e:
         db:03:6a:31:f1:48:e4:64:83:50:7d:05:df:32:8c:e2:60:46:
         84:57:bf:c8:b5:1d:0d:ae:e1:67:e5:81:3a:32:ee:ed:37:85:
         78:08:95:33:89:7d:3c:3c:34:ab:c0:67:d6:c2:65:c7:9f:57:
         12:9d:01:27:2d:b8:59:25:bd:d1:59:60:ee:8d:ae:87:e0:be:
         1d:f0:4e:0d:26:66:82:12:23:3c:9b:94:82:9f:6a:b3:6c:c3:
         81:3f:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org