Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6B6855B2126511EC88E1900BD8A014CE.roa
File:                     6B6855B2126511EC88E1900BD8A014CE.roa (raw, json)
Hash identifier:          XFKhbYC2igMIxEBKLdr38QY4x93vexK0mR8OzWSP5/o=
Subject key identifier:   3A:0E:27:AF:01:1B:36:58:52:8C:50:F3:ED:05:BF:E8:65:02:DA:CD
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0669
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6B6855B2126511EC88E1900BD8A014CE.roa
Signing time:             Fri 10 Sep 2021 18:32:15 +0000
ROA not before:           Fri 10 Sep 2021 18:32:10 +0000
ROA not after:            Sat 10 Sep 2022 18:32:10 +0000
asID:                     23470
IP address blocks:        154.16.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 10 18:32:10 2021 GMT
            Not After : Sep 10 18:32:10 2022 GMT
        Subject: CN=613ba4ae-d3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:ba:79:00:59:3a:76:63:3f:11:73:38:0e:
                    30:79:98:c5:e3:10:0f:20:02:77:ee:ec:d8:bc:46:
                    12:00:84:95:1d:39:a7:da:42:67:71:5f:e8:40:42:
                    f5:ef:5f:29:6f:3a:47:cd:da:b9:76:63:0c:f0:f5:
                    5f:d7:7f:82:bd:71:6c:14:1c:cd:f9:37:45:89:b5:
                    5c:62:1a:7f:bf:99:66:84:04:11:5c:ae:b9:0b:c0:
                    8c:ee:d4:cf:89:d9:cd:62:10:67:c8:e2:e0:86:d7:
                    7c:cd:1f:34:84:05:53:6b:7d:11:be:1c:54:f7:29:
                    10:04:d8:01:a4:82:6f:ab:4f:47:d4:6f:15:c5:7c:
                    2e:ec:22:d1:b4:40:42:2d:70:ae:2d:f4:1b:6f:67:
                    52:ad:db:48:8d:1a:2e:05:b7:1a:24:7d:98:82:5c:
                    d6:8f:7c:a2:52:62:de:7e:19:8d:d0:fa:1b:6b:2a:
                    92:b2:1e:ba:99:ce:ad:a7:5b:b8:fd:45:80:0a:2f:
                    a5:d9:16:dd:9d:96:8b:07:4f:ed:b1:85:84:1e:08:
                    65:26:15:29:0f:fc:51:3c:99:63:e4:51:62:d0:86:
                    f9:90:ec:f5:b1:50:f8:d6:ff:ac:51:cc:bb:69:a9:
                    39:d3:a9:28:b5:f1:5a:0c:3f:f4:7b:0d:56:f4:07:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:27:AF:01:1B:36:58:52:8C:50:F3:ED:05:BF:E8:65:02:DA:CD
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6B6855B2126511EC88E1900BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:17:8a:2d:f1:36:4e:63:c3:72:85:0c:b8:19:8c:ee:a4:
         0d:bc:32:76:d0:c1:0d:6f:bb:b7:3b:f5:d2:03:ec:ee:00:09:
         77:59:22:14:9f:1d:f0:98:ad:bf:f1:4d:4c:90:5c:ca:8b:3c:
         6e:d5:82:0c:b0:38:cd:f8:13:c7:03:68:1d:02:e6:43:8e:7d:
         3c:88:9b:ff:a3:4f:e1:1d:9b:a8:d3:55:98:ff:c9:59:28:85:
         28:78:73:0f:31:fd:40:8c:2e:20:01:e8:be:81:03:22:87:6f:
         07:aa:35:66:13:f9:da:91:91:b1:7a:18:78:ad:aa:fa:22:fd:
         26:c5:d3:f0:e7:22:ce:c7:f2:1c:ec:7f:5b:70:d2:25:62:d0:
         25:35:1f:f0:77:32:13:c6:29:b2:c1:a1:dd:59:2d:4c:63:d2:
         3e:c9:36:a5:7f:2f:bc:35:aa:2f:30:ca:1d:66:2e:e1:11:5d:
         ec:20:12:e0:c6:43:d3:e4:4c:88:8f:ee:1d:67:7a:3d:1a:d2:
         76:b9:b7:9b:73:b0:42:e7:89:5f:2a:04:63:33:cf:48:4c:10:
         5d:29:5b:d2:05:c9:4d:3d:af:3e:80:05:6b:2f:3a:bd:6c:9f:
         e7:09:b6:b8:1d:5c:3d:78:7d:7b:5e:10:f1:4a:27:7e:a8:b6:
         57:9a:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org