Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6260092077711EF89348D49017001B1.roa
File:                     E6260092077711EF89348D49017001B1.roa (raw, json)
Hash identifier:          BpvEC81GInLoj0PuXua1ubOLM1PC9mp6VZE3BCp43rs=
Subject key identifier:   BE:3D:E6:98:02:CA:A6:32:B5:B2:F1:B3:66:26:62:23:97:D4:2A:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B336
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6260092077711EF89348D49017001B1.roa
Signing time:             Wed 01 May 2024 05:01:42 +0000
ROA not before:           Wed 01 May 2024 05:01:38 +0000
ROA not after:            Sat 11 May 2024 05:01:38 +0000
asID:                     142062
IP address blocks:        154.206.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45878 (0xb336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  1 05:01:38 2024 GMT
            Not After : May 11 05:01:38 2024 GMT
        Subject: CN=6631ccb5-3797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:61:2d:ab:25:f4:c6:c3:8b:8e:0f:4c:95:
                    86:7b:9a:9a:ed:46:9b:09:54:3f:9a:f9:ca:91:55:
                    33:f6:ba:15:aa:74:cf:bc:aa:c2:7d:d3:1c:53:2d:
                    25:8e:26:7d:65:c1:31:14:48:b3:19:b6:af:49:af:
                    ee:c4:9f:99:18:74:11:9e:68:69:45:c7:c3:4f:36:
                    70:3e:85:a9:ea:30:0d:28:e0:82:0a:f7:1c:27:7f:
                    16:27:3a:9e:4d:d0:a2:59:15:e2:c1:3d:6f:30:d3:
                    31:98:65:c2:29:ee:7b:e1:96:23:cf:d7:92:0a:7a:
                    3d:2c:5d:9f:79:61:db:53:de:ec:5a:08:f2:ed:82:
                    61:24:ac:3f:e0:05:7c:74:01:50:68:ad:75:da:fd:
                    99:0c:7f:5f:4b:69:75:4b:d0:51:26:eb:82:84:63:
                    d1:85:1d:f1:45:e8:a0:11:94:c5:35:e5:28:95:04:
                    e5:32:fd:fb:dd:bc:d8:f7:3a:2c:e0:11:fa:4e:91:
                    20:5e:7d:6a:e5:0f:1f:36:cc:18:11:b0:7e:51:ff:
                    16:b0:ff:d6:f1:e4:cb:9a:46:36:9b:b1:44:a4:c9:
                    f7:72:f2:ce:6d:50:16:2f:d7:e4:7f:ae:ab:2c:f1:
                    a7:77:d9:b6:9e:c0:ad:73:0c:a1:f3:8b:1b:98:a8:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3D:E6:98:02:CA:A6:32:B5:B2:F1:B3:66:26:62:23:97:D4:2A:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6260092077711EF89348D49017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:1c:24:f2:c3:61:f8:76:a2:89:1e:38:aa:a2:c6:e7:1b:
         b2:aa:fa:b4:7d:97:23:f9:cf:8b:fb:60:86:10:d3:20:f6:73:
         21:1d:8e:02:3f:38:1e:44:40:de:05:94:d7:8c:e0:5b:1e:95:
         6e:d7:58:12:e8:e7:6a:63:93:92:5a:1f:2c:f5:92:01:bc:3f:
         8e:c5:37:23:1c:08:4d:75:92:f0:14:42:41:3a:b5:5e:30:6c:
         c9:fe:33:44:8c:bb:26:b6:27:17:3a:2f:03:8f:0d:b3:a8:bd:
         e4:39:a7:79:06:6d:db:6e:7a:e1:13:31:d2:ee:76:88:1c:14:
         c4:0e:2c:42:8b:1a:35:ea:55:17:52:82:97:eb:b9:d5:55:65:
         c5:2f:0b:91:60:e6:cf:68:90:6b:42:d7:df:01:55:e2:f9:07:
         c8:d0:49:fa:09:ed:3a:80:8d:3c:69:11:74:17:e8:f2:d9:d4:
         03:23:fc:4c:66:60:2c:97:58:63:02:ea:5c:85:ca:c4:69:ed:
         e7:ed:cd:28:c8:13:d6:dd:77:5b:3b:25:d1:e4:d8:e8:d6:28:
         2f:0b:07:66:9c:62:af:8b:2f:ec:9f:6b:13:82:dc:fa:0c:4b:
         4e:b8:24:c7:7b:69:2a:cd:a0:80:fd:71:ee:98:b8:f2:7d:f9:
         7d:66:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org