Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AF0DD710828611ECAB6516B35A40D577.roa
File:                     AF0DD710828611ECAB6516B35A40D577.roa (raw, json)
Hash identifier:          Eb4Hvm0awo8bjVcQsT/NssHdAXW83PoxRVWv7gO7ve4=
Subject key identifier:   D0:B4:0C:07:72:59:EC:D3:22:FD:B9:2F:5C:8E:57:AB:D2:D6:67:AE
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       055F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AF0DD710828611ECAB6516B35A40D577.roa
Signing time:             Mon 31 Jan 2022 11:12:32 +0000
ROA not before:           Mon 31 Jan 2022 11:12:27 +0000
ROA not after:            Tue 31 Jan 2023 11:12:27 +0000
asID:                     213035
IP address blocks:        161.123.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 31 11:12:27 2022 GMT
            Not After : Jan 31 11:12:27 2023 GMT
        Subject: CN=61f7c41f-ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:89:d3:b3:e8:9b:47:d6:3e:92:73:70:45:
                    0d:78:be:95:6d:5f:35:4e:e6:6f:3e:21:11:ce:1c:
                    f9:b8:92:4c:df:9e:4f:63:ae:84:bc:64:ae:1f:06:
                    59:6d:52:b8:fc:86:91:11:67:da:2c:76:22:b2:49:
                    af:dc:46:1d:62:02:7e:0d:95:80:12:32:e8:45:e8:
                    4b:fa:41:90:46:6f:a5:dd:2f:99:ce:91:00:c5:35:
                    f0:54:15:ce:c5:e2:65:eb:b4:80:de:70:93:26:71:
                    3d:62:1c:3f:c0:68:f7:d2:e8:b5:43:28:fb:18:dc:
                    30:23:c3:bf:80:17:f5:25:10:e3:6e:46:96:0a:20:
                    56:fa:fb:a9:62:59:f5:a9:15:c4:26:c6:9d:4f:a9:
                    85:dc:2f:45:38:66:76:c3:e3:8c:57:6a:47:e3:64:
                    d8:f0:6a:9c:0a:a9:6c:6a:70:dd:53:b8:13:08:6a:
                    52:39:96:65:98:a6:56:4e:65:62:f5:86:7f:2f:d7:
                    e1:e4:ef:e5:9d:ea:8d:1e:0c:d6:c0:9c:92:8d:b7:
                    0a:94:f6:a0:cd:b0:b4:ae:8c:79:ec:22:d2:a9:33:
                    07:f1:2d:0c:a0:b4:32:4d:48:15:2b:cb:50:8c:0b:
                    5c:55:05:cb:c1:30:7b:dc:df:7d:f3:58:95:cf:da:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B4:0C:07:72:59:EC:D3:22:FD:B9:2F:5C:8E:57:AB:D2:D6:67:AE
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AF0DD710828611ECAB6516B35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:96:7f:cc:19:84:bd:36:47:35:63:ca:41:31:8f:1b:6a:
         89:6b:66:c1:6e:77:27:7a:fd:5b:bd:24:80:a2:8d:4b:a9:32:
         cc:f7:e5:2f:31:74:31:fd:4d:cd:7e:aa:cb:a3:02:04:5e:3e:
         7d:4d:97:95:53:1e:b7:c7:0f:98:9c:5b:d6:ea:6d:ad:b6:46:
         00:6c:a3:82:1d:92:13:4d:53:12:ee:e6:04:d5:06:a2:2a:49:
         f8:f1:17:46:f0:d6:a0:0d:54:ec:93:e1:bf:0c:c9:b6:6c:07:
         4d:34:e8:49:76:26:de:8b:d3:40:4c:f3:c5:b1:8d:e8:0a:d0:
         01:9e:5a:87:91:6d:d5:2f:3c:29:c4:9f:8f:86:ae:1c:fa:69:
         b4:09:f1:66:27:dc:71:0f:5b:f1:3b:fe:28:1a:e0:4b:24:66:
         a1:3d:1a:0c:ec:3e:ad:9f:1c:0a:2c:01:28:f8:09:e6:7d:c7:
         c4:2c:32:fc:b3:fc:37:23:93:68:38:ef:46:16:98:b8:ed:89:
         ff:0d:b6:8a:7d:c1:a6:37:7f:2f:ea:a4:c1:60:63:2e:51:dc:
         b9:67:4b:02:bf:07:0a:5a:13:cc:42:56:24:3b:2b:4c:d9:62:
         b5:a5:0e:ea:c8:f9:97:0d:ed:a6:55:84:5d:46:77:b9:52:0b:
         85:72:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org