Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
File:                     E9247F54FD5711EA9B0FD43AF8AEA228.roa (raw, json)
Hash identifier:          wmN70k1gK9uM9+CwWEM8tYYHwD77feYMxhZXPtvtG88=
Subject key identifier:   FE:1B:91:62:D3:C4:84:72:49:00:79:DB:83:DE:81:3F:1E:4F:E2:FC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       03BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
Signing time:             Wed 23 Sep 2020 04:47:41 +0000
ROA not before:           Wed 23 Sep 2020 04:47:34 +0000
ROA not after:            Fri 02 Sep 2022 04:47:34 +0000
asID:                     174
IP address blocks:        154.16.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 23 04:47:34 2020 GMT
            Not After : Sep  2 04:47:34 2022 GMT
        Subject: CN=5f6ad36c-43ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:fc:46:85:4c:c4:36:3a:19:1b:57:ff:b6:
                    d4:b9:86:fe:d4:50:48:33:6b:60:a1:8e:df:ab:89:
                    2e:fe:54:df:37:4e:22:69:1f:d9:76:3e:06:18:50:
                    a3:1c:3a:3b:74:d0:2f:00:f4:69:6c:71:33:41:0e:
                    38:b8:58:75:ab:6a:41:a3:ca:8f:04:fc:ba:11:d5:
                    39:12:bd:8a:55:d7:2c:2f:1c:0c:92:80:6e:59:ae:
                    2c:71:db:ea:a9:3d:96:aa:af:85:45:a5:e0:ce:29:
                    81:cc:4f:09:3a:3c:46:37:7b:bf:49:02:3c:e9:43:
                    e8:09:70:d7:19:f3:4d:fe:a6:50:39:4d:e9:97:a7:
                    ba:80:d2:f4:1e:bb:9e:c3:15:db:58:42:f2:03:65:
                    51:71:c3:8f:cb:5d:b1:d3:68:64:e8:97:8f:7a:1a:
                    e5:fd:7c:a2:86:bf:e7:8b:36:cc:4f:fa:c3:23:dc:
                    be:c2:84:ac:02:c7:c3:fc:e5:3b:8a:44:78:83:dd:
                    b6:77:07:65:e9:40:fc:5d:09:bf:b5:35:17:94:52:
                    da:1b:db:9f:a0:45:38:0e:b2:58:a0:21:1a:12:8b:
                    d2:94:a9:a8:ea:80:ca:da:f8:0c:73:90:02:9c:de:
                    a7:44:9d:cf:9d:74:d6:c5:75:52:15:6f:a7:a2:45:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:91:62:D3:C4:84:72:49:00:79:DB:83:DE:81:3F:1E:4F:E2:FC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:8d:26:66:11:e1:eb:20:71:83:24:41:c8:a7:fb:6c:4c:
         86:46:d4:c5:d1:bb:61:f6:d5:9f:50:35:96:f0:f7:08:af:aa:
         0d:4a:94:d4:05:b0:5d:3e:73:33:37:f1:d8:5e:e2:7e:71:4b:
         f5:e1:c3:c8:c4:8c:56:72:04:b6:84:4f:34:00:47:9a:95:f8:
         ef:18:5e:2a:de:f4:75:4d:d4:a3:70:52:0d:f3:08:7f:97:19:
         31:88:ea:c9:43:d4:33:7b:2b:af:a0:4e:2d:87:86:1e:26:82:
         50:20:6f:17:83:04:af:ea:c5:1a:c9:57:a9:85:02:7f:6c:7d:
         78:95:5d:48:ef:0d:a5:47:51:e6:91:a1:c0:67:e3:5c:a7:39:
         f0:56:8a:31:61:e9:30:f7:e2:f2:4e:83:0f:62:d1:e6:66:60:
         1e:c2:30:22:38:75:7b:c2:53:69:16:2e:88:e4:99:17:1e:f1:
         e0:3b:db:ed:8b:85:8c:56:bc:57:98:18:10:5b:8d:0b:36:14:
         c1:db:fc:53:77:c5:ab:29:f7:0a:67:7b:32:af:8c:09:f0:56:
         37:2a:3e:44:a0:04:1e:b6:87:a7:80:aa:37:d2:f8:93:72:59:
         c6:15:f7:f6:bc:72:be:32:d7:ac:c1:c7:67:64:21:fb:42:08:
         88:e7:44:84
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA70wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMDA5MjMwNDQ3MzRaFw0yMjA5MDIwNDQ3MzRaMBgxFjAU
BgNVBAMTDTVmNmFkMzZjLTQzZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyOPxGhUzENjoZG1f/ttS5hv7UUEgza2Chjt+riS7+VN83TiJpH9l2PgYY
UKMcOjt00C8A9GlscTNBDji4WHWrakGjyo8E/LoR1TkSvYpV1ywvHAySgG5Zrixx
2+qpPZaqr4VFpeDOKYHMTwk6PEY3e79JAjzpQ+gJcNcZ803+plA5TemXp7qA0vQe
u57DFdtYQvIDZVFxw4/LXbHTaGTol496GuX9fKKGv+eLNsxP+sMj3L7ChKwCx8P8
5TuKRHiD3bZ3B2XpQPxdCb+1NReUUtob25+gRTgOsligIRoSi9KUqajqgMra+Axz
kAKc3qdEnc+ddNbFdVIVb6eiRVKdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/huR
YtPEhHJJAHnbg96BPx5P4vwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0U5MjQ3RjU0RkQ1NzExRUE5QjBGRDQzQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaELgwDQYJKoZIhvcNAQEL
BQADggEBADLOjSZmEeHrIHGDJEHIp/tsTIZG1MXRu2H21Z9QNZbw9wivqg1KlNQF
sF0+czM38dhe4n5xS/Xhw8jEjFZyBLaETzQAR5qV+O8YXire9HVN1KNwUg3zCH+X
GTGI6slD1DN7K6+gTi2Hhh4mglAgbxeDBK/qxRrJV6mFAn9sfXiVXUjvDaVHUeaR
ocBn41ynOfBWijFh6TD34vJOgw9i0eZmYB7CMCI4dXvCU2kWLojkmRce8eA72+2L
hYxWvFeYGBBbjQs2FMHb/FN3xasp9wpnezKvjAnwVjcqPkSgBB62h6eAqjfS+JNy
WcYV9/a8cr4y16zBx2dkIftCCIjnRIQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org