Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693DD8F8294A11EFA48B89177DDC24C2.roa
File:                     693DD8F8294A11EFA48B89177DDC24C2.roa (raw, json)
Hash identifier:          6/Y71CMEAJsVk80TR1LYZ3yb8ZT7GuWjNEVQEr1qzmQ=
Subject key identifier:   13:0B:A0:3E:6F:1D:92:EA:F7:8A:DC:5C:4F:01:0B:59:0F:2A:08:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       C200
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693DD8F8294A11EFA48B89177DDC24C2.roa
Signing time:             Thu 13 Jun 2024 06:01:44 +0000
ROA not before:           Thu 13 Jun 2024 06:01:41 +0000
ROA not after:            Fri 21 Jun 2024 06:01:41 +0000
asID:                     44559
IP address blocks:        154.210.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49664 (0xc200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 13 06:01:41 2024 GMT
            Not After : Jun 21 06:01:41 2024 GMT
        Subject: CN=666a8b48-9f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:66:cb:62:1e:a9:8f:da:27:3f:d0:b4:c5:
                    ab:af:36:23:d7:c5:5e:99:18:d1:2b:ca:af:24:ef:
                    fb:47:96:7d:ea:5d:f6:e4:b4:1d:ea:97:39:9d:8b:
                    f9:08:36:f7:03:11:a1:68:f4:e8:0d:a2:50:0a:5a:
                    19:b8:4c:89:9a:3a:6f:75:0a:02:81:41:46:08:a6:
                    b3:ca:e0:99:e3:fe:fa:9d:14:cd:d1:c4:52:3b:a0:
                    d3:66:99:c0:10:1c:4d:64:93:f9:b2:4f:3e:44:71:
                    fd:12:85:25:7c:2a:85:f0:b2:33:44:c8:6b:ab:80:
                    06:50:93:95:05:2f:51:f5:31:b7:81:af:e6:b1:cc:
                    01:c8:24:bf:df:e4:04:da:cf:1e:ac:76:cc:af:00:
                    10:d3:63:91:06:a1:78:54:08:fd:6d:89:12:6e:47:
                    44:a6:01:5c:0d:a2:93:50:35:18:f8:7c:91:62:7d:
                    f7:0b:59:58:12:72:6a:e2:9a:bf:ac:ab:9d:6f:06:
                    ba:64:69:af:1b:c5:70:62:ab:11:11:23:82:28:dd:
                    aa:55:98:26:64:38:3c:d2:c9:8f:df:ab:78:af:ec:
                    85:23:b5:a9:76:e5:db:30:3a:aa:47:eb:ab:b4:99:
                    40:f7:d0:47:62:20:61:0c:4e:63:cf:34:2c:63:e7:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0B:A0:3E:6F:1D:92:EA:F7:8A:DC:5C:4F:01:0B:59:0F:2A:08:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693DD8F8294A11EFA48B89177DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:77:fd:d3:6d:95:65:cb:fd:3b:4b:11:e8:7f:df:6b:7e:
         74:10:44:23:50:7b:ff:16:cd:fe:4c:ec:de:9a:87:d9:36:aa:
         62:98:c1:ee:ff:0d:a5:c1:60:9b:4b:bb:09:a3:3f:73:6f:fb:
         be:ff:99:ac:45:ba:6a:fc:c1:8b:65:d4:ae:53:2b:be:a6:cc:
         56:61:e4:db:ea:d7:95:bf:08:c4:f3:c5:9b:dc:d1:12:a0:42:
         06:9a:dc:c8:39:a9:85:fe:2e:67:c1:d9:eb:87:ba:47:3c:5c:
         24:d4:d5:c0:b7:a5:01:9e:0b:11:23:ee:27:9b:dc:35:6c:de:
         0b:b1:cc:5d:2c:aa:d1:96:92:59:07:68:65:e7:06:c2:57:35:
         a5:db:08:6b:fb:48:ba:68:0e:e2:ce:92:8c:3f:9b:8f:19:81:
         7e:bb:6f:f8:ec:b1:39:49:26:7a:67:24:ea:60:b9:6b:13:d8:
         41:d0:bb:a4:5f:b0:c0:4e:a4:8e:8c:23:88:3b:e9:ec:92:49:
         7d:37:70:93:8e:12:30:95:5c:de:92:a5:6a:e6:6e:75:ce:72:
         c1:49:36:fc:8c:5d:4d:9e:24:6e:55:68:87:6b:51:f5:59:f9:
         9c:f1:e2:cb:52:95:da:1e:33:e9:10:1e:fb:36:61:96:d2:a1:
         00:5d:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:30 2024 by rpki-client on console-ams.rpki-client.org