Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/BFAA4A6CAE8D11EC881D4D875A40D577.roa
File:                     BFAA4A6CAE8D11EC881D4D875A40D577.roa (raw, json)
Hash identifier:          02KDewlTHVjlXwyo2AwWQURcc+4/+rGTxOpNN4sRGCs=
Subject key identifier:   27:8C:22:13:37:97:5A:A3:36:10:90:77:0C:AF:01:0B:D1:36:5F:13
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       01A8
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/BFAA4A6CAE8D11EC881D4D875A40D577.roa
Signing time:             Mon 28 Mar 2022 11:53:57 +0000
ROA not before:           Mon 28 Mar 2022 11:53:54 +0000
ROA not after:            Tue 28 Mar 2023 11:53:54 +0000
asID:                     328010
IP address blocks:        196.49.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Mar 28 11:53:54 2022 GMT
            Not After : Mar 28 11:53:54 2023 GMT
        Subject: CN=6241a1d5-914d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:fe:00:bd:8a:d1:19:83:c7:30:a9:c8:b9:
                    8c:da:81:53:a8:3d:c3:98:6f:a6:b8:e8:e3:02:4c:
                    bd:1d:e7:bc:e2:53:9e:d0:d4:bb:5f:cc:29:ae:b9:
                    3e:ed:f9:7a:fb:95:87:ea:b7:ee:54:09:ed:4e:40:
                    15:0c:7f:a8:04:e1:36:5b:57:6d:36:05:d4:d3:76:
                    42:fc:58:74:da:20:26:0c:86:7a:ee:8a:62:39:31:
                    c4:d3:66:dc:9b:f1:05:73:aa:6f:45:ea:5f:ec:78:
                    0a:58:62:be:4b:77:be:35:8e:c9:0e:54:ef:65:d3:
                    86:15:0d:ab:a9:8e:f5:88:e2:18:c4:34:75:81:aa:
                    b8:b4:e4:45:84:c5:a1:64:91:d3:8d:0d:53:8c:f2:
                    a7:95:ce:93:58:bc:6a:b3:62:ac:df:96:b1:af:f0:
                    11:3c:0c:1a:55:df:58:6d:53:93:f9:3e:76:1b:44:
                    d1:23:15:7a:99:5c:7a:91:b9:50:61:1c:58:96:5c:
                    ff:7e:2d:83:f0:3e:b6:26:bf:28:49:d5:ba:8d:55:
                    04:5d:0b:84:db:b5:b8:12:13:1f:f6:93:4d:0a:68:
                    33:3b:0e:4b:20:4f:71:5d:df:de:73:4b:28:23:d5:
                    79:dc:09:0e:b6:1a:7f:0d:59:f0:34:44:d3:9f:b8:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8C:22:13:37:97:5A:A3:36:10:90:77:0C:AF:01:0B:D1:36:5F:13
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/BFAA4A6CAE8D11EC881D4D875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:df:28:ec:bb:89:12:71:9d:e9:7a:57:c5:18:fe:f0:89:da:
         c3:d5:c1:51:91:ff:13:41:1d:d6:57:76:c0:98:00:28:0a:67:
         03:a9:3e:2f:17:ac:61:5e:b6:5c:35:b7:b2:f2:6a:92:bd:6e:
         28:a5:b8:f2:26:2d:3c:2b:09:d0:c6:b4:be:78:3f:5b:84:5b:
         11:4e:96:66:95:71:71:b5:2c:18:4c:73:98:8f:a9:7d:b8:3c:
         c5:1a:3b:25:82:d4:60:19:dc:88:99:76:6a:a4:ac:3d:80:90:
         f8:eb:c9:f0:c8:07:9b:17:94:26:35:bd:b1:b2:7a:d3:e3:3c:
         51:1f:10:4c:37:39:35:23:11:ae:a8:22:27:c5:80:1b:08:7a:
         88:b7:b5:08:d3:a7:5b:03:c2:38:7e:62:ce:ef:43:1a:0c:84:
         fa:c3:d3:5f:75:a2:e4:f5:df:bb:2f:06:f3:4e:28:2c:08:10:
         b8:5c:a2:5c:3b:35:e4:51:8f:96:f3:a1:5b:ca:f3:a7:e1:f6:
         5f:6f:45:4a:8a:4a:42:2c:82:45:11:3d:26:71:b1:fa:e1:60:
         32:b5:1c:84:dc:3a:e2:da:63:b3:3a:d3:34:38:74:4f:d3:c4:
         82:1c:a3:fe:11:ab:0b:53:6c:f2:65:c1:0b:49:53:dd:c8:25:
         a6:60:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org