Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F6EAA741E6B11EDB4A8B7CEF1222468.roa
File:                     9F6EAA741E6B11EDB4A8B7CEF1222468.roa (raw, json)
Hash identifier:          r9suEsHT2hFHPTmQyUbUBn4LxtDMdy4M4CcobaVq5EU=
Subject key identifier:   5D:61:E2:6B:B5:F7:B0:94:4B:7F:9B:96:AE:FB:E5:9C:ED:73:0C:FE
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       07E6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F6EAA741E6B11EDB4A8B7CEF1222468.roa
Signing time:             Wed 17 Aug 2022 20:31:50 +0000
ROA not before:           Wed 17 Aug 2022 20:31:45 +0000
ROA not after:            Thu 17 Aug 2023 20:31:45 +0000
asID:                     210654
IP address blocks:        161.123.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 17 20:31:45 2022 GMT
            Not After : Aug 17 20:31:45 2023 GMT
        Subject: CN=62fd5036-ed2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:83:7c:78:b5:ad:00:e2:09:86:89:2b:a4:
                    ca:7c:c4:2b:3c:f7:82:00:5e:17:20:80:78:05:cf:
                    64:be:92:bc:f7:66:6a:27:a0:db:4d:78:64:bd:fe:
                    e3:66:72:e5:4e:6d:74:42:d6:02:44:db:24:4f:2a:
                    ab:5a:4c:c5:14:36:5d:d9:c9:2b:b0:d0:1e:13:a7:
                    55:29:20:e4:f8:2b:54:36:97:48:ec:9f:e2:c0:05:
                    1a:18:f4:7e:bc:01:12:59:80:f5:47:cd:c6:11:52:
                    fe:a9:c3:dc:1b:6f:5f:b3:c4:5c:4f:81:0f:7d:60:
                    91:b9:7d:90:de:b6:93:d3:3c:48:8f:62:28:67:e1:
                    ca:7b:7d:5c:bd:1e:d7:ac:f8:25:b7:d6:80:23:6e:
                    87:be:66:d0:44:eb:dc:3d:71:a8:cc:78:02:6b:2d:
                    d4:a0:43:8d:0c:17:1f:7c:5d:16:92:d2:24:86:15:
                    16:8d:bc:3a:e9:50:01:03:bb:01:35:45:c0:b8:ae:
                    2c:89:d5:b3:81:21:b3:c5:e4:9b:e9:4a:d1:b5:1f:
                    c9:42:39:25:a5:65:6b:eb:46:f2:4c:81:8d:ae:24:
                    c7:e6:08:81:cf:0a:7f:05:ff:42:6d:aa:72:38:4c:
                    1c:93:a3:01:fd:ca:b9:ef:c4:95:89:0f:15:79:e4:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:61:E2:6B:B5:F7:B0:94:4B:7F:9B:96:AE:FB:E5:9C:ED:73:0C:FE
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F6EAA741E6B11EDB4A8B7CEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:a5:e2:4c:d1:c0:35:04:eb:6d:97:4a:25:0c:e2:2d:24:
         21:82:a0:e6:03:b8:1e:c3:94:d4:24:d7:b8:60:8c:2a:7c:c2:
         e6:97:ef:45:c3:8e:1a:10:b5:d9:bd:86:57:46:d8:4b:9f:d2:
         1a:69:52:d2:1f:72:2b:12:fe:9c:c0:48:cb:4d:e0:f7:f3:9f:
         21:54:1c:f3:68:65:74:06:29:5c:98:63:cf:23:b7:c7:20:de:
         1a:98:88:5b:af:3b:d6:a5:2b:01:2c:43:cd:dd:89:b1:18:1d:
         f3:08:a9:6f:8d:9e:00:a0:f8:34:2a:12:c7:3b:88:dc:96:a6:
         df:65:3d:f0:4c:ba:07:67:7a:50:63:f7:b4:6a:48:7e:de:44:
         0a:d0:4e:ad:b3:b9:29:fb:d4:f4:6e:92:e8:81:cc:8b:f9:31:
         73:bf:e7:30:ea:1a:21:41:6f:fe:f0:07:52:a8:60:60:e3:94:
         75:94:2c:ad:99:f5:43:8e:97:d5:b7:3f:17:84:54:52:67:2f:
         a5:b2:ce:e9:a1:83:08:0a:ec:f2:a8:66:5c:41:5f:db:02:72:
         78:b2:0d:e4:79:19:2e:42:3b:92:e3:75:69:a4:d2:3a:03:aa:
         d4:dd:7a:c2:b7:a4:ff:1c:47:62:ef:c4:60:46:e9:46:ca:a7:
         34:86:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org