Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E016E0E631D211EBB7268055F8AEA228.roa
File:                     E016E0E631D211EBB7268055F8AEA228.roa (raw, json)
Hash identifier:          COnGV+BzHv38ruJ85mlLFaSsAue/HgQ6BcrtXjJZPyo=
Subject key identifier:   D1:8E:34:6B:22:A2:03:D1:76:DE:B7:3A:18:24:08:87:C1:5C:81:5E
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       79
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E016E0E631D211EBB7268055F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:38:54 +0000
ROA not before:           Sun 29 Nov 2020 23:38:48 +0000
ROA not after:            Sun 30 Jul 2023 23:38:48 +0000
asID:                     37119
IP address blocks:        105.174.34.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:38:48 2020 GMT
            Not After : Jul 30 23:38:48 2023 GMT
        Subject: CN=5fc2df8e-8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:7f:2d:99:4c:d7:31:76:cd:20:c0:7e:da:
                    e4:df:9c:ff:f4:8a:fb:1e:e3:79:d7:ae:f7:5d:cf:
                    2f:db:ce:36:d5:31:d2:df:b9:74:1f:12:ef:d6:9b:
                    b0:8f:12:27:3a:f2:03:96:3f:25:53:b8:70:46:8e:
                    26:f1:9c:bc:33:8a:7e:8f:90:da:a7:02:73:78:60:
                    a5:ec:e0:d4:d3:b1:a7:c1:66:47:8e:1e:14:89:e8:
                    d7:4b:c4:27:cb:8b:52:b0:4a:29:29:4c:bc:6c:35:
                    9a:ea:0b:9d:c2:f4:c1:43:ed:39:b2:00:0b:54:9d:
                    2c:1f:58:67:57:79:66:b5:30:12:69:c9:88:10:c8:
                    7f:0a:a6:7d:0a:61:07:97:b5:01:67:32:2e:eb:47:
                    f0:5e:96:fe:57:56:fd:ed:2f:42:ce:74:96:69:32:
                    32:da:27:fe:51:af:53:92:4b:0f:b1:6c:10:13:f8:
                    9b:c7:15:d9:11:88:6c:67:07:89:1b:f9:82:d6:ce:
                    43:0d:1c:ec:d9:9c:6a:ee:94:44:62:b0:5b:44:fa:
                    14:1e:4b:d4:58:3e:6a:80:35:d2:63:b3:0c:ef:6f:
                    56:15:6d:3b:ae:70:04:32:6e:f0:41:66:5e:4f:94:
                    9a:0a:2c:4a:26:93:dc:90:8b:f4:c5:4e:ca:0d:a4:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:34:6B:22:A2:03:D1:76:DE:B7:3A:18:24:08:87:C1:5C:81:5E
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E016E0E631D211EBB7268055F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:38:67:18:7f:5f:46:8b:a4:fa:49:aa:35:94:1a:d2:7b:1f:
         0d:8b:e2:54:20:19:23:0c:3f:3f:94:56:60:34:94:64:cb:3c:
         3d:96:f2:1c:15:6e:a7:77:27:3e:69:6a:f0:d8:62:ba:14:32:
         4b:87:c2:61:48:e2:c7:25:7f:a5:49:50:d3:e4:b1:67:6f:d4:
         38:53:a4:51:b5:ea:21:d9:c9:e8:12:83:d1:d3:44:85:ec:27:
         8e:ab:d9:6d:4a:3b:b3:8b:d6:2c:52:a4:2c:96:39:76:ad:d0:
         4e:69:77:7d:d9:ad:36:30:cd:b2:20:6b:8b:8f:ca:3e:43:0a:
         7e:17:42:99:d8:46:de:29:45:93:85:b5:10:8e:c9:d9:69:12:
         00:f6:d6:3f:70:6f:74:47:eb:a9:f7:28:f4:5e:f9:50:e9:cd:
         1e:ec:e7:55:52:77:1d:a9:f9:5f:7b:ad:92:49:1e:0e:f5:e0:
         da:f6:dd:06:93:b2:12:90:7f:f0:e8:e9:54:22:ca:a0:76:58:
         f1:85:37:a0:f0:6a:46:9c:68:a7:d6:ab:ab:05:6f:75:7c:4e:
         2c:b5:09:df:2c:6a:85:d6:f5:dc:12:e8:7c:a5:b3:f1:40:05:
         bc:cb:73:f8:64:03:c7:a7:de:52:20:69:80:7d:d8:1d:1c:54:
         cb:f0:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org