Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0861B136C31011ED9A94497EF1222468.roa
File:                     0861B136C31011ED9A94497EF1222468.roa (raw, json)
Hash identifier:          xjKsCdvHBc83DmU6liAnjP+5sAsA66NE33Fr6MfjMFM=
Subject key identifier:   7A:F5:DB:66:D8:44:BF:5D:8A:FB:17:12:6E:14:51:4F:97:27:05:51
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A0D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0861B136C31011ED9A94497EF1222468.roa
Signing time:             Wed 15 Mar 2023 09:01:55 +0000
ROA not before:           Wed 15 Mar 2023 09:01:51 +0000
ROA not after:            Fri 15 Mar 2024 09:01:51 +0000
asID:                     207990
IP address blocks:        161.123.232.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573 (0xa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 15 09:01:51 2023 GMT
            Not After : Mar 15 09:01:51 2024 GMT
        Subject: CN=64118983-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:97:33:8e:ba:e7:e9:e8:60:7d:8a:b4:f5:
                    4d:49:94:f5:8f:40:ee:41:39:07:b1:33:82:7e:af:
                    d3:78:fc:d0:18:9c:6e:ad:90:55:4a:61:b3:be:24:
                    6a:62:96:41:6f:b2:f7:7e:f2:4d:2c:8c:89:d4:de:
                    d5:f8:97:9c:82:dd:03:3f:a2:8f:44:61:b7:57:48:
                    f0:5c:4e:81:12:a9:7a:f8:c7:7d:1a:27:c9:cd:55:
                    23:d9:00:2a:15:51:08:11:af:f6:c3:b0:0a:b3:2b:
                    cb:3a:66:4a:89:7b:d1:af:29:b2:50:36:68:d5:fd:
                    b0:e3:3b:bf:8d:e1:22:e5:69:f6:78:53:f2:1d:d5:
                    37:a3:fe:2e:07:db:b1:55:ae:30:f7:d2:9a:67:9c:
                    62:77:18:e0:c6:77:99:bc:8f:3d:0b:45:3e:a0:71:
                    2e:61:fd:10:0b:25:c8:6c:7f:cf:d1:fc:9a:55:4a:
                    c0:1f:e3:29:02:63:aa:d0:b8:0d:aa:75:5d:58:f1:
                    55:7f:14:a3:27:d4:cf:d8:33:e9:f6:e1:fd:80:42:
                    8c:d9:15:1a:79:5a:bd:fa:ff:b7:85:8d:44:af:63:
                    a2:cd:60:2e:f0:ca:0b:5f:8e:42:b7:24:29:5a:2f:
                    1f:ff:5e:46:7e:cb:de:49:1d:67:82:b5:ac:4d:31:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:DB:66:D8:44:BF:5D:8A:FB:17:12:6E:14:51:4F:97:27:05:51
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0861B136C31011ED9A94497EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:d2:9a:61:2b:d0:09:cf:12:e6:84:ad:d3:27:6e:69:0f:
         9e:fb:37:c8:e6:8d:cf:bf:cb:59:5e:16:93:48:77:0e:6f:69:
         1d:cd:88:64:2c:dc:a7:6e:a2:b3:96:e7:d3:f2:0a:d5:89:fb:
         8e:f6:25:33:03:8b:ae:f7:a0:f5:aa:e9:57:43:a9:6b:68:65:
         21:80:2d:3c:1a:e9:cc:a6:39:50:e9:1e:4e:94:3b:65:38:18:
         ba:8b:c6:ec:61:d5:97:43:7e:ed:1f:c1:97:ec:41:df:9d:ed:
         9e:16:26:17:62:1d:5a:c9:a5:62:98:85:4b:b9:3c:32:b1:49:
         bb:9c:26:ce:27:14:57:87:50:70:a6:61:9f:c5:2d:90:55:f9:
         05:e9:1c:95:50:9e:15:d2:3d:dc:aa:cd:15:fe:e9:7b:88:d8:
         71:64:34:ba:a6:c8:51:35:1f:3a:3f:38:a8:4e:ac:4c:5a:b4:
         77:4d:ad:5f:c0:5b:76:28:60:81:b5:e8:1b:d6:bc:53:74:62:
         92:84:cf:cc:97:aa:8b:8f:da:4e:c7:43:b6:13:50:73:21:3d:
         8b:70:96:eb:8f:4b:94:cd:8b:68:65:4a:da:b7:59:78:ab:d5:
         7c:8e:d3:a7:c4:96:66:4d:ab:0f:57:f6:f3:c1:3f:0b:66:2a:
         b5:b8:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 02:53:56 2024 by rpki-client on console-ams.rpki-client.org