Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1781FA0B4711EFBD612542017001B1.roa
File:                     CE1781FA0B4711EFBD612542017001B1.roa (raw, json)
Hash identifier:          CO8PIIt4dqB61pBA6g65KuGT6MFwmv5n79a6HtjjHRI=
Subject key identifier:   50:D0:1A:9A:49:77:0C:2D:3F:89:59:9B:A9:1E:61:7F:FF:33:EF:3F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B450
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1781FA0B4711EFBD612542017001B1.roa
Signing time:             Mon 06 May 2024 01:27:30 +0000
ROA not before:           Mon 06 May 2024 01:27:27 +0000
ROA not after:            Thu 16 May 2024 01:27:27 +0000
asID:                     44559
IP address blocks:        154.81.62.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46160 (0xb450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  6 01:27:27 2024 GMT
            Not After : May 16 01:27:27 2024 GMT
        Subject: CN=66383202-bfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:f4:54:7f:63:6b:f2:11:96:23:9b:e9:e3:
                    dc:52:ab:95:60:b9:6b:57:ee:df:d3:7b:b1:e0:5c:
                    af:55:47:2b:98:ec:0f:22:6a:40:31:e5:f4:ca:3c:
                    f7:8c:ab:64:d0:42:ce:30:13:ef:6e:cd:9f:d4:de:
                    3a:7e:9b:5b:7a:20:ed:a6:57:0d:24:40:d7:f9:26:
                    ae:87:8a:72:c9:a9:71:c9:0b:93:ff:26:0c:ca:22:
                    6f:3b:ac:2b:0e:ba:64:be:02:18:39:02:96:08:f9:
                    bf:56:4d:91:2d:04:f8:6d:2e:bb:6c:bb:a5:ef:dc:
                    82:20:e2:37:d8:0b:2a:f6:4a:96:c9:a5:ec:c2:7e:
                    ad:5a:a3:a0:9e:0c:72:28:26:b1:91:ff:03:f2:69:
                    4d:cf:0d:e2:81:3b:cf:6b:5f:10:dd:f3:80:b5:fe:
                    b1:ed:7b:b8:4a:e4:63:28:c5:0c:e1:63:10:cd:e7:
                    67:9c:5f:fd:d9:cd:cc:d1:cc:f9:e2:dd:3b:6f:3e:
                    53:1e:9c:f1:d0:38:63:0f:d8:bc:d8:40:7f:3e:6b:
                    74:1b:8c:61:8d:98:d1:50:d8:a5:31:de:12:6a:8b:
                    f9:a4:ca:8c:a4:8e:b9:15:c1:c6:2f:91:97:5c:eb:
                    c6:7d:ff:32:4a:56:f4:e3:6e:20:2b:be:e3:c1:8b:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:1A:9A:49:77:0C:2D:3F:89:59:9B:A9:1E:61:7F:FF:33:EF:3F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1781FA0B4711EFBD612542017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:cc:6e:7b:c9:6a:4b:41:e4:a3:0e:17:c3:d0:79:ed:c2:
         6c:59:0c:99:f5:4e:47:1d:0d:23:a0:2a:dd:f4:c6:03:20:a6:
         a6:2a:cf:56:49:65:f4:cf:82:e1:91:59:37:4a:35:08:e8:68:
         bf:c4:6d:54:86:a6:b3:04:ed:51:42:9a:f9:46:46:e4:80:23:
         91:da:67:76:60:bd:ac:b9:f4:29:c6:7a:4d:82:a9:f4:bb:60:
         7e:f9:ab:29:06:b1:87:b6:2a:c8:2b:e0:af:4b:c3:c9:1e:be:
         1a:b9:66:7c:2d:6e:2e:f6:7d:06:3d:24:c9:8f:42:ff:7c:5a:
         97:66:27:35:31:cf:d9:2e:46:f3:64:9b:01:a9:72:d6:07:a4:
         d0:60:f0:fe:1e:3a:ac:86:2b:fb:c9:5f:94:44:7a:55:71:5b:
         85:6d:26:7f:27:4e:ab:02:ed:b3:5d:2f:a4:f8:b4:1c:51:76:
         d0:6a:aa:01:13:5b:6e:cd:0d:8b:33:9e:fb:c7:c5:79:00:37:
         7e:f0:2a:ad:33:49:ab:5c:85:2c:32:a8:05:20:1a:b8:a5:39:
         52:ec:6f:81:07:2b:7e:e5:3a:0f:63:e1:d3:5c:be:a7:1c:35:
         02:c7:32:c5:3c:22:ce:1a:cc:8c:f5:49:9c:b3:03:76:c0:54:
         6d:fc:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:54 2024 by rpki-client on console-fra.rpki-client.org