Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/643687D07F8911E98A81B75BF8AEA228.roa
File:                     643687D07F8911E98A81B75BF8AEA228.roa (raw, json)
Hash identifier:          YCrxgXDftAEwESCPWbrWanrM4PCCQ2HQU5JCS83dHiU=
Subject key identifier:   DE:29:92:8C:E9:27:CC:45:BA:9C:1E:47:10:C8:B5:B2:2B:33:E4:D3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0111
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/643687D07F8911E98A81B75BF8AEA228.roa
Signing time:             Sun 26 May 2019 07:39:29 +0000
ROA not before:           Sun 26 May 2019 07:39:23 +0000
ROA not after:            Wed 25 May 2022 07:39:23 +0000
asID:                     19437
IP address blocks:        154.16.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 26 07:39:23 2019 GMT
            Not After : May 25 07:39:23 2022 GMT
        Subject: CN=5cea42b0-1f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:b8:6f:34:4b:6a:75:47:1f:38:3d:50:81:
                    6d:16:eb:88:24:df:c7:1f:c8:5e:04:8e:ea:2c:22:
                    a0:5b:24:ee:4a:dc:ff:ed:0f:44:a0:20:7e:f7:78:
                    c8:8f:ba:ef:52:a3:02:86:8e:58:eb:17:0d:1b:b2:
                    5f:e6:92:03:88:5a:ab:19:b2:17:6e:69:9a:d7:a9:
                    dc:0b:46:9d:90:23:25:4f:41:37:82:fa:c4:48:43:
                    42:04:93:98:55:3f:87:5e:53:f9:8a:24:5b:c4:4e:
                    97:fd:aa:4a:17:fb:ba:2d:0d:b6:19:53:4a:ba:43:
                    5f:bf:82:89:f1:37:6b:b7:eb:27:78:46:b8:60:f5:
                    fe:35:3f:4a:03:c8:2b:8f:64:34:2d:06:f7:51:29:
                    33:8d:43:12:e1:25:79:85:02:71:02:61:4e:45:92:
                    9f:5b:86:f3:be:b4:00:b8:2b:0c:55:ca:1e:ec:82:
                    aa:f3:24:8a:bf:95:d0:96:5a:6d:d4:21:c3:f0:0d:
                    a6:58:e2:17:81:36:ef:c2:75:d9:21:6c:f8:e3:96:
                    48:23:c4:48:b2:88:20:a4:6f:2d:f7:96:3d:fb:13:
                    f2:5e:6b:2a:ca:d3:1a:fb:33:5c:03:3f:21:2c:5e:
                    b9:b9:ab:6f:9b:86:22:57:12:3e:18:39:b0:d9:4c:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:92:8C:E9:27:CC:45:BA:9C:1E:47:10:C8:B5:B2:2B:33:E4:D3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/643687D07F8911E98A81B75BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:77:cd:03:32:d7:e9:95:c7:9d:5c:52:fc:ef:c3:e5:19:7e:
         0e:e4:fb:ce:94:d0:6c:ac:c2:00:77:d6:d1:32:79:35:aa:68:
         37:75:03:15:a8:ae:01:b6:38:d5:30:75:2c:2c:18:48:35:29:
         c0:c9:db:e0:47:75:f5:26:4c:3e:a2:cb:7b:5b:e3:3c:19:7c:
         4e:99:39:77:8b:d7:9a:b6:51:97:39:55:e2:89:44:4e:41:03:
         7a:b0:d7:94:d9:0d:30:72:05:68:2f:7e:73:da:cf:f8:00:c5:
         b7:4e:c9:4d:33:bc:1f:32:4d:ed:9e:ff:9b:b2:3d:71:72:18:
         11:b7:8d:8c:12:a6:75:3c:96:8c:4f:65:79:63:a5:6f:d3:7e:
         51:6d:ca:67:da:b2:1e:61:e3:d2:02:80:96:50:59:68:52:df:
         68:1a:dd:d8:4e:17:f5:d1:41:de:2f:fc:e3:80:4f:ac:16:6c:
         7f:90:39:25:93:fd:23:fe:a1:95:2e:53:72:4b:10:76:f9:a6:
         9f:44:bc:93:08:36:91:87:4e:82:a3:ba:5c:9d:e4:30:1a:e0:
         36:84:cf:de:0d:98:65:5b:cb:f1:a4:f6:36:fa:77:d4:d4:54:
         c3:ea:4a:b9:49:21:34:4e:ae:57:20:59:8c:bb:35:66:06:eb:
         f1:d0:15:e0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0xOTA1MjYwNzM5MjNaFw0yMjA1MjUwNzM5MjNaMBgxFjAU
BgNVBAMTDTVjZWE0MmIwLTFmMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCe3rhvNEtqdUcfOD1QgW0W64gk38cfyF4EjuosIqBbJO5K3P/tD0SgIH73
eMiPuu9SowKGjljrFw0bsl/mkgOIWqsZshduaZrXqdwLRp2QIyVPQTeC+sRIQ0IE
k5hVP4deU/mKJFvETpf9qkoX+7otDbYZU0q6Q1+/gonxN2u36yd4Rrhg9f41P0oD
yCuPZDQtBvdRKTONQxLhJXmFAnECYU5Fkp9bhvO+tAC4KwxVyh7sgqrzJIq/ldCW
Wm3UIcPwDaZY4heBNu/CddkhbPjjlkgjxEiyiCCkby33lj37E/JeayrK0xr7M1wD
PyEsXrm5q2+bhiJXEj4YObDZTGArAgMBAAGjggJuMIICajAdBgNVHQ4EFgQU3imS
jOknzEW6nB5HEMi1sisz5NMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY0MzY4N0QwN0Y4OTExRTk4QTgxQjc1QkY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJoQfTANBgkqhkiG9w0BAQsFAAOCAQEA
CXfNAzLX6ZXHnVxS/O/D5Rl+DuT7zpTQbKzCAHfW0TJ5NapoN3UDFaiuAbY41TB1
LCwYSDUpwMnb4Ed19SZMPqLLe1vjPBl8Tpk5d4vXmrZRlzlV4olETkEDerDXlNkN
MHIFaC9+c9rP+ADFt07JTTO8HzJN7Z7/m7I9cXIYEbeNjBKmdTyWjE9leWOlb9N+
UW3KZ9qyHmHj0gKAllBZaFLfaBrd2E4X9dFB3i/844BPrBZsf5A5JZP9I/6hlS5T
cksQdvmmn0S8kwg2kYdOgqO6XJ3kMBrgNoTP3g2YZVvL8aT2Nvp31NRUw+pKuUkh
NE6uVyBZjLs1Zgbr8dAV4A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org