Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C15E286DDF11EC95CA2DAC5A40D577.roa
File:                     18C15E286DDF11EC95CA2DAC5A40D577.roa (raw, json)
Hash identifier:          GQw2tmBwtlE26xr4Pij2E28QvcTi3VCGunMNPHRbW+Y=
Subject key identifier:   D9:AF:01:EA:05:3E:C6:F4:3A:02:D4:97:72:80:58:12:38:B3:F0:73
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0765
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C15E286DDF11EC95CA2DAC5A40D577.roa
Signing time:             Wed 05 Jan 2022 04:22:30 +0000
ROA not before:           Wed 05 Jan 2022 04:22:27 +0000
ROA not after:            Thu 05 Jan 2023 04:22:27 +0000
asID:                     400040
IP address blocks:        154.16.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan  5 04:22:27 2022 GMT
            Not After : Jan  5 04:22:27 2023 GMT
        Subject: CN=61d51d06-fece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:4f:a0:43:b2:d8:bc:fb:c2:7e:06:05:56:
                    40:a1:7e:1e:48:e7:5e:d9:42:f6:c5:31:9f:43:cd:
                    e8:2a:d7:8c:bb:d2:1c:7d:41:f5:db:ce:08:00:a8:
                    f3:e0:36:49:63:67:fa:05:3b:fa:39:d3:7c:5d:93:
                    74:04:80:f7:a6:52:75:a2:78:56:46:5c:00:ca:0b:
                    cf:d0:bb:ce:49:a1:24:6c:5a:1f:29:82:15:bf:b1:
                    6b:9c:46:99:1d:83:08:53:90:d0:34:22:d1:35:64:
                    0e:bb:6c:ea:61:b0:4e:da:37:e1:ee:3f:3d:d2:8d:
                    42:17:9a:c5:97:34:c1:e6:83:19:58:77:ec:83:8b:
                    82:08:77:cf:1d:64:04:8a:44:b5:aa:ff:4c:9a:8f:
                    54:45:fd:6c:1a:3d:cd:7a:71:e1:5d:f5:e3:7f:0c:
                    a1:50:3f:3b:ef:75:74:d8:c4:ad:1f:45:29:75:f6:
                    c9:34:26:8c:d7:31:af:07:8f:2c:a7:0a:37:2a:1b:
                    dc:b7:ad:da:75:42:7c:9f:2e:4c:9c:94:97:32:0e:
                    2d:1a:82:3b:c1:f8:f4:20:31:c5:e6:7d:b1:71:13:
                    cb:11:9b:0c:ba:65:1f:7c:19:e4:27:ea:62:30:cf:
                    0c:d5:3e:ef:3c:a6:9a:48:a6:f3:6c:e7:3b:88:34:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AF:01:EA:05:3E:C6:F4:3A:02:D4:97:72:80:58:12:38:B3:F0:73
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18C15E286DDF11EC95CA2DAC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:3c:9c:7e:8a:0d:f9:f6:96:1d:df:fa:5d:09:76:9b:74:
         e6:a2:e3:d7:11:12:44:dc:75:11:90:20:28:b9:ad:41:a1:d0:
         8b:d5:7d:5c:b9:d4:42:db:b2:a0:30:48:d8:9a:46:37:0e:9a:
         76:a5:96:40:9b:85:38:fd:9b:ed:79:f5:01:93:03:1c:b6:0c:
         9a:02:39:c2:08:dd:5e:8a:9e:e6:98:9e:ba:d8:2a:5b:48:c4:
         31:2f:a8:9e:d5:90:57:ae:d9:30:c8:bc:2a:b6:62:6f:cf:67:
         27:17:68:62:46:81:5c:ba:e8:5c:67:c2:54:ce:f5:f5:cc:3f:
         e9:50:ec:cc:3a:35:2d:46:c3:49:f4:2d:40:0e:85:98:35:7c:
         c6:50:01:4f:cc:79:d9:f4:5a:c9:12:83:13:70:d8:1a:2f:11:
         d2:f6:12:0e:cf:80:38:c4:f0:15:b8:72:a0:73:d6:f7:22:41:
         f9:72:a7:4b:7c:26:bf:d8:3f:db:d3:3e:70:ac:95:6d:62:10:
         fe:41:16:3b:e0:a7:db:c4:e9:46:d4:4e:fb:73:71:72:a9:70:
         33:13:2d:ae:30:f0:74:0b:c3:b1:c0:ae:a4:c2:24:7f:dc:bf:
         19:76:4b:c3:04:02:ed:21:a3:74:94:28:6f:af:06:fa:42:55:
         47:ba:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org