Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/6C0F6270D5FF11E99E9E843BF8AEA228.roa
File:                     6C0F6270D5FF11E99E9E843BF8AEA228.roa (raw, json)
Hash identifier:          16cAQpjzWYK9uFfUNrvm92XT521UheVvKTZu46RaCY4=
Subject key identifier:   B0:39:B6:F1:AC:74:F2:65:6C:A5:80:13:3C:B8:CC:F5:FF:FC:AB:19
Certificate issuer:       /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial:       02
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/6C0F6270D5FF11E99E9E843BF8AEA228.roa
Signing time:             Fri 13 Sep 2019 08:21:02 +0000
ROA not before:           Fri 13 Sep 2019 08:20:55 +0000
ROA not after:            Wed 13 Sep 2023 08:20:55 +0000
asID:                     36969
IP address blocks:        2c0e:7800::/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Validity
            Not Before: Sep 13 08:20:55 2019 GMT
            Not After : Sep 13 08:20:55 2023 GMT
        Subject: CN=5d7b516e-6d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:d5:d2:3d:3a:60:a0:c0:9c:d8:7a:45:95:
                    bf:96:1c:40:58:de:59:de:9d:b1:f5:f1:43:43:5d:
                    67:1d:08:aa:61:68:01:40:77:71:63:f4:23:c9:26:
                    06:86:da:74:a4:69:27:b4:06:09:49:aa:2c:9e:51:
                    5b:39:72:50:ff:6e:0a:7e:57:98:eb:d2:c2:99:52:
                    d7:3d:f6:a6:57:bf:2f:06:5e:b0:43:e0:ef:17:74:
                    c0:df:06:6f:7d:23:ac:5f:d4:3c:02:40:0d:51:2b:
                    a5:6c:60:f6:2e:7e:fa:b5:fa:d2:06:88:23:20:b0:
                    5c:77:3a:61:67:7b:25:99:be:69:75:8a:23:3a:22:
                    97:d4:2d:ae:ef:6c:f7:78:01:69:aa:b9:1a:d8:b4:
                    e0:9e:47:90:3a:ce:db:60:81:08:ef:4e:8f:6c:50:
                    c8:f5:ba:b7:76:53:b1:75:67:80:27:2c:04:f2:b6:
                    42:54:d4:07:e5:fb:bd:31:9c:2b:d1:84:68:31:b1:
                    8e:93:4c:c1:5f:27:aa:16:a7:ee:67:93:9d:d1:90:
                    f3:0f:20:6f:2d:f7:dd:15:a9:2e:48:c0:43:6a:91:
                    9f:e5:f3:8c:9d:9d:d1:18:3f:29:d6:af:98:97:5d:
                    ff:74:fb:5a:26:49:82:fa:1b:9b:58:de:ab:86:08:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:B6:F1:AC:74:F2:65:6C:A5:80:13:3C:B8:CC:F5:FF:FC:AB:19
            X509v3 Authority Key Identifier:
                keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/6C0F6270D5FF11E99E9E843BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0e:7800::/24

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:c3:8d:21:2c:49:1a:fc:4e:0a:88:f8:a7:c0:7e:24:5f:
         7c:7c:0f:51:86:3c:4a:c8:4d:1f:32:75:7a:44:0d:98:b0:11:
         80:f4:de:a2:1b:64:35:59:93:a2:88:9b:d6:45:44:52:f6:24:
         41:59:f5:41:17:e5:f0:bd:bc:05:56:df:35:3a:43:97:33:f1:
         51:87:d1:73:ed:6f:bc:d4:84:15:09:2c:21:c4:b4:46:39:7a:
         8c:f4:64:2a:39:05:f2:3b:7a:b3:10:e7:8b:6b:ea:df:84:6e:
         2f:ba:51:93:f8:c8:9e:d1:54:e4:6f:c5:f2:a2:ca:d4:71:de:
         ec:53:c2:6f:25:95:4a:41:65:ba:68:88:df:69:98:94:fc:35:
         43:a9:e1:b3:74:6f:7c:c2:59:e5:3b:12:76:b4:56:1b:2d:90:
         ee:d8:42:5c:71:7c:a8:85:77:cb:b0:e1:c4:31:ae:ba:24:45:
         ef:a5:09:1d:27:4a:d8:f4:43:f8:7e:69:f9:6f:7d:43:e1:46:
         c3:b6:29:4e:41:48:29:8c:1b:19:00:92:a9:db:7c:2c:66:6c:
         01:78:ea:8c:63:b6:72:06:1f:28:4b:c6:59:3f:05:15:68:fc:
         da:c5:8f:b3:4a:72:56:0d:a9:ac:a3:c5:2a:99:94:ac:b1:a1:
         32:8c:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org