Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
File:                     6CF0BE8EDAAF11ECB5646CD7F1222468.roa (raw, json)
Hash identifier:          KxfEbd81Bkl/ZFRGOA8YCIO6pgZFbRHpelggzfmp1LI=
Subject key identifier:   39:D1:9A:C7:C1:CC:EB:A6:C4:98:35:18:3C:23:29:43:80:1F:64:19
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       02
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
Signing time:             Mon 23 May 2022 15:45:52 +0000
ROA not before:           Mon 23 May 2022 15:45:43 +0000
ROA not after:            Mon 27 May 2024 15:45:43 +0000
asID:                     328164
IP address blocks:        169.255.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: May 23 15:45:43 2022 GMT
            Not After : May 27 15:45:43 2024 GMT
        Subject: CN=628bac30-a2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:6f:12:da:4d:e8:22:05:a5:6a:d7:ba:b8:
                    27:0c:bd:ba:4b:31:84:98:6e:0a:75:d3:a0:98:b5:
                    0f:dd:27:43:77:23:99:f7:d4:a6:94:a2:94:f8:30:
                    f9:20:3b:d6:93:25:72:a6:f8:a1:7c:1c:d2:7b:1c:
                    eb:98:c8:42:78:73:f0:78:0f:7d:bb:b7:2b:2a:22:
                    92:4e:5c:bf:e7:28:65:4b:8e:7a:19:bc:4b:eb:23:
                    e1:35:99:cc:f6:c2:cf:d2:47:b4:31:47:83:e5:b2:
                    3c:ce:fc:39:5e:9b:8a:a3:80:d2:1c:70:ac:5a:f9:
                    f1:b8:f1:a4:c2:42:52:07:bb:b2:85:49:c5:63:3a:
                    95:35:c9:67:bc:8d:60:c7:2a:e3:77:68:3c:94:bc:
                    93:fc:a6:0e:e1:71:e8:f6:14:50:51:b6:c2:b0:b1:
                    6c:86:9c:db:a9:d1:98:ae:1f:81:24:49:f7:5c:ff:
                    38:89:72:b2:e1:28:2b:d8:ed:6a:5a:be:c7:f2:0e:
                    b4:3e:f0:ac:47:07:d1:c5:e6:5d:25:ae:be:98:58:
                    dc:fe:27:92:01:68:b0:37:87:0d:63:f2:54:0b:0a:
                    1d:db:57:12:cb:a7:43:a7:a0:86:77:95:ea:e0:15:
                    e1:07:1b:aa:6a:78:8e:34:18:c0:df:f9:3f:41:a9:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:9A:C7:C1:CC:EB:A6:C4:98:35:18:3C:23:29:43:80:1F:64:19
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:b0:53:16:88:3f:a4:78:c1:3d:8c:c7:2a:2d:b2:14:9f:
         02:d1:d2:51:f8:99:56:10:3e:8a:7b:29:cc:bb:4f:f8:7d:32:
         d7:23:fd:f2:da:1e:18:36:56:aa:5c:dd:8c:66:80:94:46:9b:
         32:b9:72:d2:54:01:7b:e3:7e:22:3a:3b:a3:f6:8f:f6:9c:dd:
         36:29:0d:22:63:fe:5f:6e:89:2f:a2:d5:a8:4d:43:99:5a:ac:
         94:ba:a2:fc:fa:fe:99:29:d4:e3:ec:5a:8f:c7:2a:9f:3b:d0:
         3f:5a:f5:4b:57:60:a8:9d:14:35:ea:67:58:78:76:c2:21:b1:
         45:00:bc:ce:17:75:2f:8c:39:27:8a:7e:ad:27:aa:89:81:b1:
         d5:24:1f:af:6c:c5:e2:7e:e1:65:28:c9:82:67:25:8d:34:fe:
         cd:b8:67:72:e2:da:d7:f2:84:33:a2:c8:83:b9:42:2f:7f:e1:
         8c:6c:5f:38:dd:f1:00:da:31:b2:05:32:2e:6a:44:eb:d4:00:
         a3:06:74:f9:da:27:10:99:fa:ab:2b:b4:b2:7c:4b:11:a1:11:
         46:92:e2:a3:72:e0:d9:88:c5:df:4b:70:0a:f3:2e:74:57:df:
         e0:a0:4a:14:c4:cc:f4:f3:65:04:4f:52:d4:14:1e:f0:6e:f0:
         9c:8c:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org