Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
File:                     542A84F04F9611ED835C7D8CF1222468.roa (raw, json)
Hash identifier:          tgYtofSUvr+47hIaF0LhQICKNcZUDF7JDAHFnGc0lZ4=
Subject key identifier:   E7:51:64:4B:E8:35:A8:95:63:D6:CE:C1:97:CB:7D:E8:AF:2A:BB:B8
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       12
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
Signing time:             Wed 19 Oct 2022 10:11:00 +0000
ROA not before:           Wed 19 Oct 2022 10:10:56 +0000
ROA not after:            Fri 31 Mar 2023 10:10:56 +0000
asID:                     329159
IP address blocks:        102.214.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Oct 19 10:10:56 2022 GMT
            Not After : Mar 31 10:10:56 2023 GMT
        Subject: CN=634fcd33-4a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:0c:0a:e2:f6:80:32:97:d9:b9:9e:01:49:
                    a6:0b:7a:7d:c2:89:44:af:cb:17:b7:90:95:96:f6:
                    bc:6c:a0:03:ec:da:39:65:49:25:5f:96:39:83:65:
                    3a:0a:aa:02:48:39:87:41:d9:fd:cc:9c:51:0c:ce:
                    41:01:cb:2e:91:72:f0:d3:e1:b6:7f:34:50:ae:ac:
                    1f:2d:7c:79:0b:c4:dc:bf:e0:c9:15:5b:d3:40:77:
                    fa:f0:45:28:4b:89:65:6c:52:1d:0a:31:ce:e1:b0:
                    89:a5:b7:fe:49:5c:83:e9:66:70:61:a5:61:67:ee:
                    d1:1e:5c:01:1f:e6:12:b6:f1:31:52:85:63:16:49:
                    cf:01:47:64:6e:08:ad:6a:76:a2:0f:4d:dd:2d:07:
                    a5:bd:00:2e:2b:04:b5:80:67:6f:aa:2d:59:d2:3d:
                    c1:5a:ea:89:7d:71:64:69:61:88:37:c7:7e:b7:74:
                    8d:de:81:36:1e:9d:1f:5e:7b:7c:25:1e:25:29:a7:
                    c4:fa:03:c8:99:98:43:03:15:3e:cf:72:2d:7b:ac:
                    11:11:b0:85:ba:00:ba:93:f9:a0:98:23:ea:2e:18:
                    e1:69:eb:03:99:2b:3e:f1:f3:ad:f8:b4:8e:8a:d0:
                    1f:ce:ce:8d:1d:a1:19:54:7b:b0:3d:b8:9f:dd:a6:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:64:4B:E8:35:A8:95:63:D6:CE:C1:97:CB:7D:E8:AF:2A:BB:B8
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:34:81:36:5c:b5:42:66:17:e3:1d:fa:0b:7f:cd:d3:cf:fd:
         a9:8a:5b:11:9d:b4:f7:93:45:54:3c:94:2f:07:ae:83:9d:d1:
         80:75:b0:71:a8:5b:bd:a4:95:09:94:90:37:51:b6:92:57:8c:
         b6:c3:46:38:50:ff:8b:0d:24:97:b3:1b:d6:12:bb:9c:f1:cc:
         23:ed:45:20:4b:36:b9:a3:67:26:98:c9:f6:8d:23:89:c5:84:
         09:fd:13:7e:3e:dd:77:d1:58:36:dc:2e:ce:94:77:7d:e8:ef:
         57:07:91:6d:fa:9f:d9:2b:7b:0d:3f:f5:68:df:f2:55:05:dd:
         3f:e1:70:ef:ca:6d:98:cc:9a:2f:8e:3c:55:11:f1:e5:70:b4:
         d7:c1:da:8f:d3:a2:b5:20:40:ea:97:0f:10:d1:43:36:c9:60:
         53:bf:4a:9f:51:82:7c:b2:ed:c2:e4:3e:1f:73:5c:ef:1f:e5:
         d1:cb:10:ed:64:76:d1:2e:c1:a8:87:da:16:79:56:fa:4c:7b:
         08:38:c8:07:af:b4:6a:66:ec:44:9c:fa:b3:6c:90:d7:c5:a4:
         89:99:82:43:ce:2a:79:ff:36:7e:04:79:59:f9:78:d1:ba:f4:
         dc:cc:38:60:7a:15:19:eb:2d:59:3e:74:f5:46:fb:f7:43:8a:
         51:52:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----