Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0FB9C76F60811EC86F0347FF1222468.roa
File:                     E0FB9C76F60811EC86F0347FF1222468.roa (raw, json)
Hash identifier:          SAvRo4eCAotYNXA2uqnIMhD7zbO+NRoMwMK0tgoYG7E=
Subject key identifier:   0C:D1:97:9D:6F:88:07:B7:BC:3C:B3:FE:4A:FB:6B:CB:6A:1C:4A:54
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0780
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0FB9C76F60811EC86F0347FF1222468.roa
Signing time:             Mon 27 Jun 2022 11:04:14 +0000
ROA not before:           Mon 27 Jun 2022 11:04:10 +0000
ROA not after:            Tue 27 Jun 2023 11:04:10 +0000
asID:                     203999
IP address blocks:        161.123.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 27 11:04:10 2022 GMT
            Not After : Jun 27 11:04:10 2023 GMT
        Subject: CN=62b98eae-88be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:86:1f:fc:da:d7:d9:58:20:22:46:1f:f0:
                    e4:47:63:19:49:55:c0:8c:51:57:5e:6e:48:9a:8c:
                    c1:4e:5f:98:7a:04:e3:de:18:c4:f4:32:04:29:88:
                    69:d8:64:d8:49:a2:d7:0b:08:3a:f0:f5:0b:46:bf:
                    17:e5:07:d4:19:c6:16:5d:6c:51:d6:30:6c:3c:4a:
                    f3:5c:02:49:e0:6d:62:88:33:29:d8:01:8f:04:54:
                    14:d6:ed:55:6d:82:20:a7:fc:84:f0:36:77:04:69:
                    74:60:4d:13:25:08:e0:f0:c3:13:cc:e8:81:6f:4d:
                    63:fc:80:1f:f0:8e:80:90:cc:0f:06:74:bc:a1:cc:
                    9e:17:09:61:fb:0c:3b:7e:da:59:fc:32:d3:88:b3:
                    73:27:e7:27:25:91:2f:ba:85:60:1b:84:6f:0b:3d:
                    ce:b4:2d:f6:64:ec:33:fd:76:de:b2:7f:6b:d1:7a:
                    05:99:6e:ef:f0:e4:39:1d:01:62:01:22:3a:de:f0:
                    8e:ad:b1:6c:e1:90:76:5f:69:ab:4c:aa:b7:22:02:
                    1c:f8:83:3b:50:46:19:75:bb:93:81:28:f6:ee:e3:
                    62:73:46:7a:f2:c7:23:7c:97:1a:a5:21:c0:52:7e:
                    81:2d:ed:55:d9:80:35:aa:d8:e6:bf:b4:f7:57:75:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:97:9D:6F:88:07:B7:BC:3C:B3:FE:4A:FB:6B:CB:6A:1C:4A:54
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0FB9C76F60811EC86F0347FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:83:a2:5f:43:83:f3:93:aa:48:cd:05:e3:b3:b0:99:a5:
         cd:dc:82:21:59:7e:1d:13:2a:ad:0d:f9:ab:0d:1f:14:ad:e5:
         c4:2a:02:dc:48:62:42:f6:4c:43:cf:da:55:07:16:7e:eb:fb:
         80:72:73:9e:09:3c:ca:cc:94:fe:40:73:de:67:9a:62:1d:6b:
         16:17:cd:4c:8e:0c:d8:6c:9b:c5:e4:e1:82:d8:23:f6:e3:b9:
         5d:5b:15:03:f6:a0:5d:8f:81:be:b4:49:b5:bc:22:59:e3:96:
         80:4f:91:8d:1a:fb:dc:32:d7:47:32:75:93:3d:0e:e5:43:70:
         b4:8b:84:97:c3:df:f3:11:c5:23:95:9a:e6:0e:53:e0:b0:cd:
         f8:f9:16:68:f6:bf:a9:67:c1:58:12:b8:07:a1:cc:60:ad:58:
         28:69:1e:3a:bd:0e:e4:4b:ac:7f:cd:72:61:86:64:61:98:1e:
         a5:1a:1c:e8:2e:dc:0f:82:d9:ab:9d:a3:a1:b7:a0:f1:05:c1:
         95:c6:9f:0d:30:45:c6:b8:59:13:55:d7:5f:cd:3a:b1:58:b1:
         16:6a:0c:4e:4b:71:a8:46:47:11:75:9b:8f:0e:75:08:e7:4b:
         53:19:0f:3e:5e:f6:e1:a2:b2:02:9e:eb:d0:ba:8a:a4:14:09:
         55:dc:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org