Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F20FED24876611ED9E0328C4F1222468.roa
File:                     F20FED24876611ED9E0328C4F1222468.roa (raw, json)
Hash identifier:          x7mMS0pO4xZWseuDcUdQKPCke1fcpHCR2ey1MnNtPq4=
Subject key identifier:   1D:A6:FF:00:75:A8:F9:02:13:9C:6A:6C:99:2D:7C:7E:BE:21:CE:DE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       023D
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F20FED24876611ED9E0328C4F1222468.roa
Signing time:             Thu 29 Dec 2022 10:52:54 +0000
ROA not before:           Thu 29 Dec 2022 10:52:50 +0000
ROA not after:            Fri 29 Dec 2023 10:52:50 +0000
asID:                     209854
IP address blocks:        196.44.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Dec 29 10:52:50 2022 GMT
            Not After : Dec 29 10:52:50 2023 GMT
        Subject: CN=63ad7185-720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:8c:cc:c3:30:34:e4:d2:9e:be:f7:0c:ff:
                    e9:fa:da:a7:e6:11:b0:be:78:3b:ec:b9:9d:78:e5:
                    a7:2e:d6:93:b6:60:c1:77:a1:02:00:14:f1:18:4b:
                    e2:54:b2:3a:4d:bd:3a:b6:9a:c5:ed:ab:d5:e0:cc:
                    4b:68:20:99:b1:6e:e2:9d:73:69:d8:46:58:4c:ba:
                    e9:94:db:5c:fc:e5:06:f3:7c:f0:36:aa:34:15:71:
                    b6:b2:49:74:57:4b:8f:ea:1e:0f:ce:e0:a0:86:93:
                    7c:0b:5f:d4:99:50:72:d2:53:a8:cb:af:20:d6:87:
                    9f:5f:c5:99:cf:5f:fb:8f:48:68:68:88:40:8e:67:
                    f3:59:c4:e6:a4:93:a3:55:21:1e:91:d2:69:40:b2:
                    28:e3:83:fe:3e:4c:a5:70:2f:dc:2c:d1:90:72:bb:
                    d1:75:d3:c1:1b:66:1f:bd:35:37:9d:4c:68:28:ac:
                    f4:bd:74:40:ce:49:de:13:a4:67:23:54:b2:9d:4e:
                    f2:0e:72:f8:2b:a4:38:13:56:49:b2:0d:29:d4:a8:
                    92:5d:a0:2b:ac:83:c7:36:d5:29:55:9a:a2:73:3e:
                    dd:26:93:05:53:39:55:c7:85:dd:fe:8a:2a:87:ae:
                    9f:3e:03:35:aa:24:92:f1:56:cf:8e:14:13:49:af:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A6:FF:00:75:A8:F9:02:13:9C:6A:6C:99:2D:7C:7E:BE:21:CE:DE
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/F20FED24876611ED9E0328C4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:6b:c8:6a:c6:e0:1f:73:9e:68:c8:7a:98:51:f5:b7:ee:
         13:9b:2a:ba:ed:33:38:9b:5d:fc:02:c0:27:32:ef:48:bb:4a:
         06:c7:7f:fa:c0:e9:3b:91:01:f4:f1:45:96:85:86:ab:af:21:
         f0:ad:33:8f:26:56:d0:a2:71:4b:27:7a:b0:ae:60:71:4d:2f:
         ef:8c:c0:38:4d:df:8a:ca:46:48:8e:ce:18:b2:21:4e:55:99:
         bb:9c:fb:cf:eb:3f:e5:54:6a:7a:5d:70:f5:61:f5:54:a4:7b:
         b7:b1:7b:82:e2:03:12:70:7b:bd:ae:4f:a8:c5:db:52:12:83:
         c0:6b:6e:3a:6e:ba:bc:cd:07:fe:58:16:2a:fd:fe:72:a6:c4:
         9d:6e:09:78:1c:6d:9b:fe:07:65:5e:c1:fb:d0:1b:7e:96:7c:
         7d:db:b8:c9:d4:36:91:af:e7:42:ba:d9:f7:64:ca:8a:26:a7:
         54:ad:d1:5f:89:ad:62:bd:dd:c8:1c:17:4b:0a:db:0c:11:00:
         59:8b:be:a1:c7:b8:c2:2e:e1:20:86:a1:b9:21:d4:cb:29:7a:
         11:61:b8:25:90:c4:94:fe:f8:8a:aa:86:d8:c4:69:65:cf:27:
         12:1f:96:a4:a0:35:7f:d6:f8:76:8b:d5:4d:67:54:e5:fc:ae:
         3f:a7:c8:de
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yMjEyMjkxMDUyNTBaFw0yMzEyMjkxMDUyNTBaMBgxFjAU
BgNVBAMMDTYzYWQ3MTg1LTcyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAzozMwzA05NKevvcM/+n62qfmEbC+eDvsuZ145acu1pO2YMF3oQIAFPEY
S+JUsjpNvTq2msXtq9XgzEtoIJmxbuKdc2nYRlhMuumU21z85QbzfPA2qjQVcbay
SXRXS4/qHg/O4KCGk3wLX9SZUHLSU6jLryDWh59fxZnPX/uPSGhoiECOZ/NZxOak
k6NVIR6R0mlAsijjg/4+TKVwL9ws0ZByu9F108EbZh+9NTedTGgorPS9dEDOSd4T
pGcjVLKdTvIOcvgrpDgTVkmyDSnUqJJdoCusg8c21SlVmqJzPt0mkwVTOVXHhd3+
iiqHrp8+AzWqJJLxVs+OFBNJr/3vAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHab/
AHWo+QITnGpsmS18fr4hzt4wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFL0YyMEZFRDI0ODc2NjExRUQ5RTAzMjhDNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELGAwDQYJKoZIhvcNAQEL
BQADggEBABQMa8hqxuAfc55oyHqYUfW37hObKrrtMzibXfwCwCcy70i7SgbHf/rA
6TuRAfTxRZaFhquvIfCtM48mVtCicUsnerCuYHFNL++MwDhN34rKRkiOzhiyIU5V
mbuc+8/rP+VUanpdcPVh9VSke7exe4LiAxJwe72uT6jF21ISg8BrbjpuurzNB/5Y
Fir9/nKmxJ1uCXgcbZv+B2VewfvQG36WfH3buMnUNpGv50K62fdkyoomp1St0V+J
rWK93cgcF0sK2wwRAFmLvqHHuMIu4SCGobkh1MspehFhuCWQxJT++IqqhtjEaWXP
JxIflqSgNX/W+HaL1U1nVOX8rj+nyN4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org