Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464537FA077211EF9B71241D017001B1.roa
File:                     464537FA077211EF9B71241D017001B1.roa (raw, json)
Hash identifier:          G0nLFxNmPTnxv8IlkrdU1ZHMY/IJB+iLjPQkhJi7D8Q=
Subject key identifier:   C9:AC:B2:E7:63:88:DC:34:F1:4C:82:DF:A4:E9:F6:B0:13:30:A8:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B302
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464537FA077211EF9B71241D017001B1.roa
Signing time:             Wed 01 May 2024 04:21:26 +0000
ROA not before:           Wed 01 May 2024 04:21:22 +0000
ROA not after:            Sat 11 May 2024 04:21:22 +0000
asID:                     142062
IP address blocks:        154.206.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45826 (0xb302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  1 04:21:22 2024 GMT
            Not After : May 11 04:21:22 2024 GMT
        Subject: CN=6631c346-08a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:57:94:2d:32:7b:1f:cc:5c:88:5a:60:6e:7d:
                    12:af:96:53:fe:5a:e2:a3:f9:41:bf:b8:c1:e3:9f:
                    fd:44:58:00:a3:bb:a9:76:28:24:8b:ad:6a:fe:63:
                    3f:75:43:ca:e3:04:92:c8:7a:03:aa:f3:57:67:b2:
                    d2:5a:92:1c:c2:72:c1:98:85:71:3e:0c:88:0a:ed:
                    b2:75:8e:94:13:90:40:49:74:58:ce:47:05:69:32:
                    0c:26:a7:44:ce:c8:53:3f:d8:e0:cf:7f:df:fd:de:
                    38:02:51:6e:b2:fc:1c:20:ee:c2:75:21:e2:3b:ca:
                    70:2b:74:cc:88:45:f8:df:d9:6b:88:69:5b:7f:e8:
                    32:b9:1c:1f:9b:31:50:2e:ca:8f:a8:ea:5d:c0:40:
                    34:b7:10:b7:44:e0:b3:fa:00:6f:86:c9:14:fe:29:
                    26:22:f4:9f:2c:0a:7d:36:26:ea:a2:1f:c0:ad:d9:
                    ad:2c:89:51:3d:6f:61:ef:17:d2:59:83:cf:aa:a2:
                    c4:2f:3d:b4:e1:07:18:5b:f7:66:75:91:64:23:54:
                    49:1c:c6:31:4e:b2:8c:69:7b:72:20:d8:c9:9c:21:
                    af:d9:05:e4:37:af:ed:3b:83:9a:24:49:6c:95:ab:
                    e6:d3:4e:98:94:2d:84:9c:3c:cd:7f:46:42:23:5a:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:B2:E7:63:88:DC:34:F1:4C:82:DF:A4:E9:F6:B0:13:30:A8:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464537FA077211EF9B71241D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:0b:61:50:8c:03:87:77:f5:43:40:0b:66:1b:76:d6:ec:f5:
         5e:59:f3:4b:ab:2b:32:9f:1b:63:44:d9:34:eb:63:ad:c2:a1:
         21:28:bc:80:bd:a5:7d:e6:50:ea:2e:8b:3d:ef:d6:e0:1e:fe:
         7e:4e:b5:c2:81:54:3e:ac:a3:3a:ad:d8:e7:03:9a:b2:16:56:
         1c:f6:9a:98:83:28:b0:05:0e:33:61:99:b0:ac:8b:9f:4a:5d:
         53:e5:87:5c:ad:73:5a:99:ae:3c:92:e5:96:ab:58:57:6f:5c:
         76:6b:1e:26:31:a2:6c:75:ba:c0:1d:af:8e:36:e6:34:6e:92:
         19:9b:e2:8d:04:11:bb:af:b7:f3:45:8b:23:f6:ce:9f:29:07:
         5c:6a:59:73:6f:d8:1b:d4:8a:7b:bf:ee:e2:3e:af:33:b3:58:
         ec:e0:72:32:0c:a7:55:6a:7c:99:3e:2a:0e:3e:4b:30:5d:d6:
         70:f4:87:bd:e1:d3:a1:03:07:a3:86:ba:61:e0:c7:e0:0e:41:
         d0:6c:0b:8d:2e:6e:cf:df:61:8c:ea:0c:a5:3f:3a:80:6c:e5:
         c0:b6:b0:a6:d9:35:fc:69:2c:b3:03:f0:df:b6:49:65:82:f0:
         0e:b1:4a:a5:f6:1d:45:5a:49:d4:0d:8c:96:51:44:bc:23:38:
         ea:32:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org