Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
File:                     081A2944B7F811EBADE93033F8AEA228.roa (raw, json)
Hash identifier:          4POW33vfBFZYe+1V9uRR6pUQ5FfiV6e9AIfO9SHRC4Q=
Subject key identifier:   7F:67:E3:1D:D4:BD:7A:84:D4:47:87:8D:07:6E:85:A8:88:62:36:D4
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       058B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
Signing time:             Tue 18 May 2021 16:42:28 +0000
ROA not before:           Tue 18 May 2021 16:42:22 +0000
ROA not after:            Wed 18 May 2022 16:42:22 +0000
asID:                     13876
IP address blocks:        154.16.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 18 16:42:22 2021 GMT
            Not After : May 18 16:42:22 2022 GMT
        Subject: CN=60a3ee74-e7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:fc:bf:9b:b7:6e:cf:b1:2a:20:01:2b:cf:
                    b8:e6:7a:0e:6e:9b:ae:a6:d5:49:fa:05:ef:f0:24:
                    08:1c:64:68:1a:0f:fc:61:a4:14:51:a1:5b:6f:a9:
                    86:01:bd:fc:cf:05:b1:4d:96:42:26:e7:5b:e8:4c:
                    e4:d4:04:81:00:1b:1e:4a:29:e5:27:15:89:be:28:
                    a2:db:42:e5:95:27:28:a6:3b:34:85:e9:99:7f:72:
                    31:c5:02:18:dc:eb:56:ba:c1:a2:5c:4b:52:85:d9:
                    cc:9e:57:e2:d9:ad:61:78:f6:fe:02:53:d1:cd:74:
                    89:13:c3:72:05:7a:1d:5b:c5:5b:5f:f1:92:26:57:
                    fd:cc:19:ae:83:d1:57:5a:d4:9b:8a:84:ac:ae:64:
                    d4:5f:b6:5a:28:4c:d1:27:f1:27:5b:a0:ef:b1:c3:
                    00:cd:be:83:4b:dd:fb:73:1c:68:74:d5:15:2e:4d:
                    1f:20:10:e6:69:61:a4:27:43:5d:5a:16:9b:07:1c:
                    39:e2:7a:d5:74:4a:0b:d2:79:f2:14:7f:3c:bc:58:
                    74:65:20:79:fa:09:ed:73:d7:7b:f9:36:3f:ee:f7:
                    ae:d3:9d:cc:1f:8e:2f:e0:31:30:ec:5b:f1:a1:ee:
                    5f:af:0e:f2:7a:42:ab:f9:cd:7e:c1:35:78:26:e6:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:E3:1D:D4:BD:7A:84:D4:47:87:8D:07:6E:85:A8:88:62:36:D4
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7a:81:bb:b0:58:5f:64:b4:58:bb:06:79:0d:b9:b8:47:86:
         c8:91:85:68:2b:ce:30:6c:7d:51:20:c3:54:11:29:0b:a2:ad:
         2b:82:77:be:0c:81:c0:95:67:df:26:9f:96:10:b2:77:16:c4:
         9c:c6:64:66:f6:46:fb:0a:33:f9:98:fc:77:49:5f:49:5b:cd:
         0e:62:ad:50:48:ff:d3:59:8c:f6:57:21:72:b4:76:6c:7b:eb:
         90:a8:e2:43:4d:ed:ab:3f:e1:b3:0b:19:aa:f8:92:e3:92:93:
         e3:a1:b0:29:5a:7f:d0:db:44:d3:c5:ea:3d:e0:79:b6:1e:b4:
         1b:ed:f3:b1:3f:37:b3:c6:ee:52:7f:f6:c6:9c:70:28:aa:09:
         fa:dd:2d:ef:a1:b1:c4:87:59:8c:d2:f6:02:fd:d9:72:6d:63:
         ab:8e:34:e8:3e:82:30:95:3a:8c:50:ba:2d:9b:75:e3:fd:36:
         24:27:0c:17:36:86:5f:0b:f3:8e:6e:50:69:d7:b0:52:cf:35:
         84:6d:fa:9d:a3:f6:4a:12:d5:a9:3b:97:4e:c1:4a:b9:4f:d1:
         33:51:6c:a3:09:a8:c8:c6:37:09:b2:6e:c4:f7:9f:0a:4c:06:
         6a:5b:f1:5f:4e:bb:c6:2b:47:6e:f2:a2:7a:da:30:08:74:90:
         ac:6b:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org