Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
File:                     7B84270E188211EDB933FD91F1222468.roa (raw, json)
Hash identifier:          TGRqo3cmhpGOVYRjin44FwBHo3QISoPJvDra+JbgoCQ=
Subject key identifier:   B2:36:67:8C:BE:88:63:63:56:96:4D:01:B4:38:51:55:98:33:2B:EA
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       34
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
Signing time:             Wed 10 Aug 2022 08:00:21 +0000
ROA not before:           Wed 10 Aug 2022 08:00:18 +0000
ROA not after:            Wed 09 Aug 2023 08:00:18 +0000
asID:                     37028
IP address blocks:        41.183.0.0/16 maxlen: 24
                          196.10.112.0/22 maxlen: 24
                          196.10.116.0/23 maxlen: 24
                          196.11.125.0/24 maxlen: 24
                          196.11.126.0/23 maxlen: 24
                          196.11.128.0/22 maxlen: 24
                          196.11.132.0/23 maxlen: 24
                          196.11.134.0/24 maxlen: 24
                          2c0f:fdf8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Aug 10 08:00:18 2022 GMT
            Not After : Aug  9 08:00:18 2023 GMT
        Subject: CN=62f36595-2cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:7c:71:bd:99:47:4a:16:0b:d8:4c:b4:9b:
                    e2:1c:97:93:90:d5:c1:dd:00:5e:82:92:fd:31:6a:
                    c9:f8:d1:88:10:4d:72:ea:5e:ac:82:7c:4e:6f:1b:
                    47:08:aa:4d:62:74:39:54:ee:a1:b8:d7:b1:09:fb:
                    7e:69:02:4e:0f:c5:c5:16:49:a8:50:db:70:0f:9c:
                    7d:bf:2a:0b:c9:a9:55:86:5e:1b:e4:28:28:fd:73:
                    08:88:31:31:43:8e:da:3b:8e:03:44:57:b7:62:03:
                    a9:fb:ed:3f:70:c3:03:48:5a:58:0e:3d:df:24:30:
                    1f:c8:dd:15:cf:15:a6:44:40:4d:df:58:47:d6:a4:
                    01:41:b2:0f:fa:07:a7:70:df:59:9d:b1:41:6a:b4:
                    83:c9:57:1d:1b:e6:19:a0:f5:d7:74:0a:38:b9:a2:
                    fe:f8:ea:23:c6:13:71:c9:95:f6:2b:53:69:b9:99:
                    18:06:27:00:e4:08:bf:04:9c:ff:69:82:1d:18:ee:
                    14:05:72:29:79:e2:f1:08:7d:93:ef:f9:5a:ca:cc:
                    2b:68:47:81:ad:23:c8:70:96:a6:61:74:27:24:57:
                    38:3f:fa:83:e4:fa:e4:9b:d4:01:fa:3c:aa:61:63:
                    fa:cb:05:b9:72:70:f5:c9:ea:56:42:d9:05:6d:5a:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:67:8C:BE:88:63:63:56:96:4D:01:B4:38:51:55:98:33:2B:EA
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.183.0.0/16
                  196.10.112.0-196.10.117.255
                  196.11.125.0-196.11.134.255
                IPv6:
                  2c0f:fdf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:7f:d1:78:f7:fa:5d:f6:1d:44:a2:83:cb:2a:1e:03:9a:a1:
         15:dc:71:64:8f:3c:27:f8:58:f0:d9:4d:f3:6f:c4:17:c3:d3:
         bb:dc:0c:8f:46:f6:b2:46:b9:a1:fe:95:d7:b5:a7:da:92:b0:
         74:a0:29:8d:e3:79:a6:13:a5:03:88:cd:68:cc:04:51:5a:c8:
         a4:7c:17:d2:59:1f:57:86:71:fa:a3:d1:38:9a:35:af:3a:f7:
         50:1d:f6:69:d4:43:e9:b7:b8:09:9f:b5:56:c2:5f:85:d4:f2:
         8f:0f:a1:99:ab:7b:15:35:d1:31:9a:7a:cb:2d:82:60:dd:c8:
         c7:b4:a9:c0:be:60:20:18:81:ab:e1:c7:18:80:32:c9:3e:39:
         ae:09:74:f3:ea:a9:ce:33:72:1c:78:f3:3d:51:51:51:30:b4:
         c3:80:48:99:86:74:df:9f:84:64:a1:82:e2:19:7c:8a:8b:89:
         ad:dd:32:10:98:bd:1d:22:82:01:5d:f8:1c:d3:6f:a3:fe:e0:
         6e:0a:a9:46:23:65:cd:31:2f:cd:3c:32:d6:ab:bf:11:f3:15:
         20:52:59:ac:bd:c5:ad:0e:80:20:18:24:ab:8a:6a:07:96:54:
         12:ff:de:bf:3d:8e:8e:50:b8:cd:fb:a1:27:5a:e2:85:23:35:
         82:dc:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org