Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C34194E5E011ECA286269FF1222468.roa
File:                     11C34194E5E011ECA286269FF1222468.roa (raw, json)
Hash identifier:          jQ8QUoauz3u737/oZlXEknaqZJyb4r8G5J6HsP7lyL8=
Subject key identifier:   5C:E5:0F:A7:F7:E9:16:7A:97:41:84:07:0C:E2:25:88:5B:E7:6F:4E
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       072C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C34194E5E011ECA286269FF1222468.roa
Signing time:             Mon 06 Jun 2022 21:31:48 +0000
ROA not before:           Mon 06 Jun 2022 21:31:44 +0000
ROA not after:            Tue 06 Jun 2023 21:31:44 +0000
asID:                     203999
IP address blocks:        161.123.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun  6 21:31:44 2022 GMT
            Not After : Jun  6 21:31:44 2023 GMT
        Subject: CN=629e7243-a6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:1b:d5:54:bd:57:06:5b:ea:64:07:8f:ec:
                    b9:6c:61:9f:bb:0c:28:c3:b5:a4:e7:3f:7c:9a:75:
                    f8:f7:3c:42:c2:ad:8a:16:99:44:3c:45:49:ec:d3:
                    79:15:ef:15:2a:bd:69:c3:a6:18:0a:24:5c:87:1d:
                    6e:a8:52:b9:51:76:8d:88:26:cc:95:82:36:ca:f0:
                    bd:b5:8b:84:44:5f:49:7e:82:19:90:ac:36:52:fa:
                    f6:92:22:44:9d:cb:77:91:17:67:40:a4:a8:a7:e5:
                    83:44:5f:db:92:83:83:ff:06:e3:ba:fd:2c:e6:9e:
                    cc:de:c4:db:e2:11:8d:ff:d6:7d:c4:d0:53:9e:3e:
                    dc:59:90:5a:bc:cd:a7:15:f6:14:90:28:73:e7:d9:
                    4c:a4:bd:d8:55:95:66:e4:76:8b:c3:83:ee:5a:0b:
                    d1:24:04:38:50:aa:55:80:bd:4c:02:bf:28:d3:7e:
                    6d:00:3c:d3:60:f6:9f:19:fd:0f:9f:16:a1:e3:97:
                    7f:6c:14:25:6c:46:3d:b4:85:df:eb:fe:99:e2:79:
                    8c:22:32:67:d6:0e:50:01:8c:d2:67:19:76:dc:9b:
                    d8:b0:b6:11:0c:6f:6d:47:00:82:46:61:5f:95:8c:
                    12:29:e2:86:d4:3a:41:0a:f4:90:ec:5c:bb:1e:c3:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:0F:A7:F7:E9:16:7A:97:41:84:07:0C:E2:25:88:5B:E7:6F:4E
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C34194E5E011ECA286269FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:04:2e:19:33:19:c6:d8:f4:9e:0a:7e:5f:bd:17:6e:ca:8f:
         1c:83:8b:d7:84:ad:e4:13:da:c9:db:9a:c8:13:b5:cb:a6:51:
         cd:52:f8:50:91:d0:bb:70:e1:99:d7:8d:b8:4d:d2:b1:ad:36:
         74:c4:8a:6c:1e:73:f0:00:ac:dd:43:1d:83:98:6a:b2:06:e4:
         d5:8f:0d:a2:88:4a:53:b9:3f:fd:66:3b:67:ed:9d:ca:90:e3:
         fd:cd:4b:34:ba:47:6b:96:f5:1b:a5:e9:4f:7d:c2:f2:f1:42:
         9b:38:0d:67:e3:ca:86:01:ae:44:5d:d8:6a:94:8d:1a:c2:d5:
         3f:7d:c2:50:00:52:50:de:fa:4a:92:3e:de:38:95:5e:bb:80:
         56:d9:4f:15:36:e3:03:76:eb:35:67:43:c9:79:c4:0f:fb:84:
         bb:12:a4:5d:6c:0f:2d:2e:b0:56:e4:3b:46:ea:7a:31:14:92:
         64:70:7d:bf:f5:d0:2c:77:37:e6:b2:2b:38:07:8d:17:41:66:
         e8:08:1b:1f:6f:c5:ab:fc:6a:63:bf:65:e4:58:e2:1c:f4:15:
         ab:f4:bb:2f:a0:59:ff:24:3e:09:45:7b:eb:43:9c:4e:b6:1e:
         bc:e7:3e:fc:dc:0c:a1:37:44:a7:1a:0e:f8:3d:1c:03:52:ab:
         cd:06:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org