Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDF4015C34D011EB9B43CB32F8AEA228.roa
File:                     EDF4015C34D011EB9B43CB32F8AEA228.roa (raw, json)
Hash identifier:          k1B5o/sPZ5Q69TzaS8I9ksVlfXg0sm0sxuTdC4VwnkE=
Subject key identifier:   66:4C:14:0E:7D:65:17:5B:F1:E7:DF:92:5A:5A:06:60:07:AC:F6:6B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       9C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDF4015C34D011EB9B43CB32F8AEA228.roa
Signing time:             Wed 02 Dec 2020 19:02:32 +0000
ROA not before:           Wed 02 Dec 2020 19:02:27 +0000
ROA not after:            Sun 30 Jul 2023 19:02:27 +0000
asID:                     37119
IP address blocks:        105.173.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Dec  2 19:02:27 2020 GMT
            Not After : Jul 30 19:02:27 2023 GMT
        Subject: CN=5fc7e4c8-4209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:07:e7:cb:3b:f9:21:4f:d3:6b:05:58:fe:
                    09:0d:43:2c:d8:51:d9:b8:8e:48:d9:9b:04:3c:d6:
                    e8:04:47:c8:dd:fb:b7:33:f2:83:c4:9a:94:2f:10:
                    d4:f6:bc:7b:a4:2e:6a:a9:70:da:8d:ca:62:6c:c0:
                    2c:00:82:6f:7e:ac:5c:d9:2d:8d:3c:33:a0:69:3e:
                    ae:06:c7:82:f0:15:aa:71:8c:e7:a7:8f:6c:ee:04:
                    8b:fe:92:49:8b:83:50:56:db:f4:0b:86:d0:65:53:
                    70:66:31:9c:c0:29:d4:0b:fb:d5:f9:dd:ed:e0:72:
                    e3:3c:9f:8c:e7:6a:a7:93:a7:90:1f:84:9f:c8:fc:
                    1b:db:f3:83:69:d6:2b:dd:68:ea:24:87:cc:27:3a:
                    42:f1:01:b3:d8:cc:93:9f:82:c3:38:39:bd:b8:94:
                    62:1c:02:a9:e1:d6:af:0c:3e:81:f8:37:7d:ac:5d:
                    89:fa:a2:66:b2:db:fc:fe:f5:bb:bf:6a:e5:ed:c8:
                    0f:d6:bf:19:d6:c9:ac:b1:d1:c9:6a:8a:11:ce:f0:
                    52:0d:f7:bd:0f:7c:9f:f4:dd:62:c4:a9:b7:d2:7a:
                    c2:a7:b6:02:61:a9:91:f1:05:ed:6e:a8:b8:17:da:
                    2b:e1:90:26:4e:7c:10:00:ff:9c:41:d5:17:6f:dc:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:14:0E:7D:65:17:5B:F1:E7:DF:92:5A:5A:06:60:07:AC:F6:6B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EDF4015C34D011EB9B43CB32F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:88:fd:4a:ff:57:f5:24:9b:17:1d:24:66:34:75:1f:a3:
         cb:c1:75:b4:4c:5b:f0:0f:83:62:8f:c7:b0:c4:49:98:9b:30:
         22:b3:4a:04:10:16:3a:f6:8e:d3:e4:c3:97:08:4e:5d:31:8c:
         d2:32:4e:ec:f9:07:1a:0e:36:7c:66:a0:1b:d8:d9:3d:d6:50:
         76:6a:a6:f2:d5:05:67:0f:11:94:a6:d9:dd:52:21:ba:3f:bb:
         62:3b:b5:59:bf:48:f4:6f:c8:7e:21:43:e8:4a:e0:8d:a3:7c:
         6f:4d:8e:60:20:db:53:aa:b3:27:f2:c3:69:a4:1a:c6:97:ef:
         3a:94:f4:9e:e5:1e:f1:b1:11:ab:70:32:d4:85:45:60:bb:5b:
         88:84:1d:48:13:84:f7:4f:f7:03:05:ca:10:9a:9a:f2:6f:a9:
         1f:e7:ba:cd:44:b2:8c:26:af:2d:64:4b:96:eb:1e:05:b7:8c:
         e0:67:0a:4a:02:32:f3:7f:b2:07:aa:32:e6:66:84:d1:e5:d4:
         a5:33:d2:76:98:3b:93:d7:52:ec:83:e4:9d:83:90:e1:44:9d:
         cf:a8:17:02:17:06:d3:ff:68:d9:a7:4e:e3:a8:71:92:ac:ee:
         67:af:25:9f:9e:cf:7d:8d:d2:05:34:cf:1a:fb:22:16:d2:6d:
         84:61:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org