Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
File:                     10C26B46232D11EDBEE319ECF1222468.roa (raw, json)
Hash identifier:          QFJW4y20NU+Mx5AcY2HmfKrwg32hk6zuccNyjpTlvKM=
Subject key identifier:   75:83:C2:47:BC:CB:8D:45:BC:CA:1C:B0:28:94:C1:4C:2D:69:71:F6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       094D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
Signing time:             Tue 23 Aug 2022 21:46:38 +0000
ROA not before:           Wed 24 Aug 2022 21:46:33 +0000
ROA not after:            Thu 24 Aug 2023 21:46:33 +0000
asID:                     42831
IP address blocks:        154.16.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 24 21:46:33 2022 GMT
            Not After : Aug 24 21:46:33 2023 GMT
        Subject: CN=63054abe-9da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:7d:c3:a9:a5:95:af:b3:df:e9:61:2f:7b:
                    b4:37:06:cd:22:5c:68:69:f6:44:3f:8e:32:ff:96:
                    1b:a1:f5:b4:bf:a1:68:56:7a:e6:58:ee:3e:cf:c2:
                    bb:c6:8b:e9:12:42:54:09:60:10:f3:e3:30:7d:23:
                    fd:66:8f:84:31:19:bf:6a:07:0b:a8:ba:c2:22:3c:
                    f8:9c:fd:59:94:b8:f4:eb:09:f7:da:a3:bc:1c:8a:
                    55:a4:e8:1f:9b:8d:27:36:36:08:8d:8e:5b:85:3c:
                    ea:e4:30:7f:7a:08:09:8e:14:67:5e:4a:88:99:20:
                    d5:d3:db:7a:7e:a2:2a:5d:8d:01:47:ec:38:32:05:
                    ff:bb:7f:4d:d1:f4:a8:e2:33:34:bf:f9:67:f7:e7:
                    58:67:d1:df:cf:10:94:c6:b9:7a:c3:fa:a8:2a:e2:
                    1f:57:85:c4:2a:f2:b7:8d:ef:8f:a4:53:07:29:39:
                    39:b5:e1:d2:81:20:a6:a0:85:69:7e:f2:17:f4:50:
                    8d:99:fe:b8:ca:a8:4f:bb:8b:1d:59:46:fa:3c:0a:
                    ae:01:71:37:0c:6f:94:a5:94:d0:42:da:61:99:67:
                    32:3d:d3:e9:80:fe:37:0c:66:1e:06:71:8d:65:d2:
                    24:f6:0c:8f:8a:c9:f1:17:01:b9:61:e5:a4:e5:cb:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:C2:47:BC:CB:8D:45:BC:CA:1C:B0:28:94:C1:4C:2D:69:71:F6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:62:db:3d:34:50:4b:ac:a8:2c:7e:65:47:21:f8:28:d6:
         fc:fa:21:7c:7a:55:67:49:e4:b9:f7:6b:06:ca:28:80:9c:ff:
         67:3a:46:67:34:8f:5f:e4:cf:71:b2:56:32:55:b5:92:de:c2:
         df:c3:59:2d:8f:80:9e:c5:ee:eb:59:c9:2d:80:d9:ef:65:05:
         41:f0:9b:3d:30:39:5f:eb:26:6a:49:27:6f:97:a0:04:6d:7a:
         65:ef:e9:c9:56:32:99:cd:49:fc:85:68:4d:0c:2e:ac:be:4a:
         7b:c5:17:08:7c:fd:c2:a7:40:03:aa:f6:91:fa:8e:b8:e5:fd:
         4b:d6:ed:86:85:f6:0e:46:cd:a2:7a:ef:7a:38:a6:36:e4:c6:
         a6:30:27:db:8a:f8:b8:2b:a3:7c:c5:c9:26:b0:b5:dd:a2:16:
         2c:9c:6a:70:29:8d:83:0e:34:2d:e2:a7:5c:a2:ed:fe:f8:43:
         0f:d6:54:01:0d:a9:88:42:e8:d2:c4:ff:2d:f7:4c:7e:ea:27:
         ce:04:00:0e:09:d5:9f:e5:fe:57:bf:7b:67:4e:5c:67:de:ec:
         70:2c:0f:24:e4:4b:db:e9:b2:b8:e1:1a:78:7a:3f:ea:44:62:
         8d:ac:eb:13:17:27:8d:4c:f5:15:40:ec:98:ec:bb:a8:63:87:
         64:50:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:10 2024 by rpki-client on console-fra.rpki-client.org