Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/793B01823F4711EFAC378B71762E951A.roa
File:                     793B01823F4711EFAC378B71762E951A.roa (raw, json)
Hash identifier:          aBIyKozkqnwqJjZrAcd3uBit7PX8V7VBc5WULj1EctI=
Subject key identifier:   E2:9D:A2:BF:15:D3:B5:92:B7:9F:9F:81:00:32:52:B4:2F:A0:DC:55
Certificate issuer:       /CN=F36D65B9AF/serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
Certificate serial:       03
Authority key identifier: 05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/793B01823F4711EFAC378B71762E951A.roa
Signing time:             Thu 11 Jul 2024 05:36:08 +0000
ROA not before:           Thu 11 Jul 2024 05:36:05 +0000
ROA not after:            Sat 27 Jul 2024 05:36:05 +0000
asID:                     328192
IP address blocks:        196.6.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D65B9AF/serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
        Validity
            Not Before: Jul 11 05:36:05 2024 GMT
            Not After : Jul 27 05:36:05 2024 GMT
        Subject: CN=668f6f48-1537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:53:3a:5d:85:1e:92:c0:bb:7b:df:c7:2a:
                    cf:ce:18:0b:eb:b1:b8:d6:bc:ed:12:fa:7d:5a:f3:
                    80:12:bd:e6:9b:31:81:cf:db:da:b5:2c:29:fe:39:
                    c2:df:87:d4:4d:d7:a2:09:a6:77:a8:7e:88:a4:da:
                    ec:79:6d:96:1c:d5:0e:24:c3:aa:07:78:88:a3:a1:
                    bb:78:16:e7:be:01:63:2b:0f:90:60:72:12:24:4d:
                    33:0d:78:6d:c2:57:1d:36:39:42:03:0c:58:82:6c:
                    f0:20:b7:1e:5e:cc:c3:e2:70:9a:07:5f:bd:2f:d0:
                    e6:7f:52:a9:ff:a6:00:6b:f9:8f:83:fe:e8:df:ec:
                    71:d4:88:18:88:b1:84:74:c4:21:2a:69:39:75:55:
                    87:86:8e:c9:16:cc:7a:5c:25:9b:42:ce:bc:13:36:
                    66:de:f7:f8:38:85:b6:fb:1d:56:42:36:96:6b:e0:
                    86:18:92:be:b3:3b:21:45:7a:9b:30:c2:59:3d:36:
                    86:28:a1:32:33:83:d4:f5:b6:da:ab:b9:08:76:f1:
                    6a:ff:a1:57:2f:25:46:e0:ab:76:98:31:ae:3d:41:
                    c7:51:0f:f8:2c:7a:60:04:bc:bb:3c:eb:dc:46:1a:
                    64:99:d4:22:34:87:40:8c:c6:2d:99:71:96:b1:19:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:A2:BF:15:D3:B5:92:B7:9F:9F:81:00:32:52:B4:2F:A0:DC:55
            X509v3 Authority Key Identifier:
                keyid:05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/793B01823F4711EFAC378B71762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d2:26:33:a9:37:e4:08:c0:51:bc:38:1a:5c:dc:45:d2:a1:
         65:b5:0b:ae:fe:c1:1f:ca:79:12:82:04:fc:8a:06:e2:7b:93:
         de:9c:ff:1c:bf:dd:34:07:0a:78:eb:18:29:82:8e:55:86:07:
         9c:38:d2:ba:8c:53:ea:cb:94:80:aa:ac:fc:a6:69:89:b2:38:
         85:35:9f:54:6b:ef:95:c8:2a:a7:b9:81:8f:28:de:54:9d:05:
         ae:bc:cb:2d:f7:f8:d2:67:3b:c3:25:00:91:06:5e:94:52:b9:
         29:b4:47:8d:e9:e9:ee:76:bf:d4:56:6d:2f:a0:45:ab:7a:ee:
         2a:f3:f5:07:a0:35:da:a2:90:51:2b:7d:24:f9:61:af:be:dd:
         c0:08:87:87:3e:66:12:09:18:80:1f:6d:df:db:3d:ac:9b:f3:
         ac:26:2a:1a:f0:6e:d9:b7:dd:d8:e4:28:39:bd:11:a7:9a:7a:
         63:29:da:c1:e0:01:57:c8:9d:f7:f5:c8:b8:b3:36:74:8e:6b:
         87:75:98:f5:8b:8e:0f:de:19:cb:e5:88:72:74:97:4e:a5:a4:
         17:ab:ad:fa:3f:b0:08:88:49:2a:ee:0f:c6:51:ee:37:36:61:
         a4:c1:18:5a:ec:ef:d1:5a:85:59:f0:df:4c:50:0f:99:08:dc:
         34:98:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 05:00:48 2024 by rpki-client on console-ams.rpki-client.org