Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DC81C59CEFCB11EBBE0F985DD8A014CE.roa
File:                     DC81C59CEFCB11EBBE0F985DD8A014CE.roa (raw, json)
Hash identifier:          mPagDlT3NQyIGPnxQBQe5a6T++BQ7bK+bKLFN2PnZB8=
Subject key identifier:   49:3E:FA:17:57:F9:C0:90:E3:26:4A:6E:F7:08:FE:2E:7A:BA:1F:E2
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0196
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DC81C59CEFCB11EBBE0F985DD8A014CE.roa
Signing time:             Wed 28 Jul 2021 17:47:42 +0000
ROA not before:           Thu 29 Jul 2021 17:47:38 +0000
ROA not after:            Sun 30 Jul 2023 17:47:38 +0000
asID:                     37119
IP address blocks:        105.174.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 17:47:38 2021 GMT
            Not After : Jul 30 17:47:38 2023 GMT
        Subject: CN=6101983e-c84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:2f:e4:eb:d8:fc:ba:b6:c4:f6:c8:d3:3b:
                    2a:18:9f:e6:6e:f0:ca:82:a9:9e:d9:9a:f1:b7:64:
                    12:f9:8a:d0:92:15:23:56:e9:a3:b7:9f:54:07:b6:
                    67:09:f4:4c:73:82:6c:4e:70:ce:5f:8c:18:82:76:
                    45:6b:20:25:74:ba:29:6e:22:a8:ac:fb:ab:ca:b2:
                    35:c6:92:2c:74:21:92:fc:43:65:81:ef:0b:ad:21:
                    46:61:0c:af:5e:e2:31:51:e7:4c:62:48:ab:04:96:
                    2f:d0:73:f3:e9:f4:69:0f:c4:a4:43:19:23:9a:79:
                    f0:bf:2f:86:2a:69:d0:3b:be:8b:ab:2f:d3:09:42:
                    5c:59:04:92:06:47:58:3f:8d:ab:58:e8:a5:3e:d2:
                    3d:58:55:1f:47:c8:45:68:bd:9b:8d:3c:e3:ed:72:
                    5e:6d:f9:c0:ec:d5:4a:0e:23:75:f3:0a:48:70:f2:
                    b0:d2:04:21:14:d7:7e:ae:ed:da:7b:31:9d:ad:39:
                    4a:1f:1b:56:c8:a4:e2:c5:42:13:7c:45:22:91:30:
                    01:80:7c:fc:14:58:9a:00:05:98:6e:18:cd:63:c8:
                    d4:08:de:b2:45:b8:f8:b4:2e:be:f8:3b:52:92:f1:
                    8b:86:7a:56:69:53:de:a6:66:54:37:08:88:cb:2f:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3E:FA:17:57:F9:C0:90:E3:26:4A:6E:F7:08:FE:2E:7A:BA:1F:E2
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DC81C59CEFCB11EBBE0F985DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:2f:b8:2e:df:47:f9:f5:f5:53:90:5c:cb:1b:35:e9:c9:
         b2:01:4d:d7:88:d0:0f:cd:7e:4a:10:8b:a7:9a:67:97:f4:0a:
         9f:ef:08:22:b6:4a:ba:cf:48:f0:ea:18:a8:2e:dc:70:e2:8d:
         23:ad:78:38:ed:87:25:48:7f:5e:42:0c:67:05:bb:68:32:55:
         9d:74:37:c7:e5:c2:33:8a:e4:94:77:55:a3:2a:1b:a3:b9:3c:
         7c:17:8d:c6:a6:8d:38:50:3e:44:95:fe:b8:09:89:8e:62:4f:
         ba:1e:40:59:b5:6b:e8:a3:48:ec:aa:83:64:78:1c:e0:aa:ff:
         5c:70:d7:f0:65:3f:0d:9e:e5:11:41:97:7f:82:cb:42:6c:b7:
         48:04:2d:fe:74:2e:82:c2:a7:7a:8d:fc:8a:fe:5e:52:7c:69:
         75:f1:fa:95:a2:5e:f4:ed:52:be:d5:d8:53:1e:f9:db:41:5b:
         09:77:ff:4d:1a:72:40:1b:b2:66:da:8a:16:e8:89:a7:4b:8d:
         e7:07:1a:42:a4:ad:af:cb:e1:ce:1c:f2:d8:4b:20:60:e8:16:
         d6:21:3b:25:8a:e7:e4:01:33:68:46:86:c5:03:d5:e7:e4:f3:
         91:a4:1b:28:c1:b1:0a:1f:a2:83:54:6a:ff:15:11:87:e1:2e:
         3b:3d:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org