Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/807073C81AB611EC83402926D8A014CE.roa
File:                     807073C81AB611EC83402926D8A014CE.roa (raw, json)
Hash identifier:          4331X/g5PUCuEH51tcoXd8gt4bfOXX7mo74WJEQofWY=
Subject key identifier:   47:D8:78:2C:2C:7F:AB:CF:93:8C:EE:4E:21:DB:31:21:CF:B7:2A:CA
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       068B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/807073C81AB611EC83402926D8A014CE.roa
Signing time:             Tue 21 Sep 2021 08:32:49 +0000
ROA not before:           Tue 21 Sep 2021 08:32:42 +0000
ROA not after:            Wed 21 Sep 2022 08:32:42 +0000
asID:                     22773
IP address blocks:        154.16.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 08:32:42 2021 GMT
            Not After : Sep 21 08:32:42 2022 GMT
        Subject: CN=614998b0-d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:e3:63:9e:0f:75:62:b3:31:e6:a0:a7:ec:
                    03:ed:ea:07:fa:ac:47:09:91:e4:33:b6:65:64:15:
                    2e:84:14:92:98:44:40:da:b7:e6:38:ac:b2:32:14:
                    99:77:95:03:11:10:57:9f:43:09:1b:96:8e:86:cb:
                    6c:d0:fb:ff:7f:1f:89:50:1b:f8:64:10:e7:5c:cf:
                    ec:64:54:cf:0d:3d:9d:38:a8:31:f5:4d:59:e0:e8:
                    42:bf:20:74:13:a9:5f:74:62:bf:e2:1c:86:8f:5f:
                    4f:5c:00:61:f0:fd:8e:53:84:90:eb:d9:11:d9:67:
                    cc:b7:8d:6b:18:08:b5:08:e3:eb:37:7e:19:9e:14:
                    2d:cd:f7:a5:40:61:8b:2b:49:f1:d0:81:94:f9:10:
                    16:4e:d6:5f:b8:22:61:6d:77:ff:cd:96:d6:05:b6:
                    d5:91:b4:9c:a3:76:31:df:75:86:5d:14:5f:f7:d0:
                    27:5d:df:43:cb:ed:dc:87:41:e7:1b:7a:b0:b2:58:
                    19:a0:15:bf:47:c5:20:ab:7a:e5:62:3d:03:06:d0:
                    bc:0a:67:4d:6a:75:c5:79:fb:87:ea:6d:66:b1:8f:
                    67:eb:9d:ea:1b:9e:7d:9a:9a:b6:29:52:0b:03:39:
                    93:d6:c6:58:60:fb:94:df:80:2a:4e:75:8e:24:bb:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:78:2C:2C:7F:AB:CF:93:8C:EE:4E:21:DB:31:21:CF:B7:2A:CA
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/807073C81AB611EC83402926D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:f3:19:44:cf:22:f6:35:2c:47:2e:a5:56:4f:55:93:ed:
         0e:78:89:2d:e8:10:12:a3:bf:51:b9:40:85:e4:44:90:a3:b5:
         e4:41:31:b8:1f:2c:16:dd:c7:80:76:2f:10:56:17:c8:f0:82:
         49:4a:47:31:91:fe:90:ed:67:4e:85:c1:26:12:f2:4e:cc:21:
         c7:05:27:24:b5:de:10:d2:3c:bf:44:26:2e:d4:b4:c5:bd:be:
         f8:42:ff:78:bb:6b:e9:5e:c6:ff:a1:14:74:8a:b6:6e:5b:e0:
         1c:28:37:3b:82:96:ee:45:b7:63:a5:a3:2d:27:49:e0:44:36:
         3f:c8:30:2b:f2:6c:3c:65:44:b4:14:b0:27:1f:b5:d3:ce:9e:
         9b:54:b8:8e:88:4c:5a:f1:40:09:22:63:3f:72:88:8a:22:ca:
         33:d7:ec:e1:90:ee:aa:60:cf:4f:9d:a4:37:69:80:73:70:f3:
         68:59:83:d6:8a:d3:30:f9:ee:8f:22:2f:88:79:ab:4c:2d:9a:
         b0:4d:3a:32:04:38:60:74:b6:a9:b7:70:db:3e:1d:ab:68:78:
         1c:f6:55:f1:2c:aa:75:73:be:36:07:94:e1:62:00:66:6e:68:
         82:03:fb:3c:76:b7:10:f0:86:04:d6:f3:78:a2:5d:22:56:eb:
         3f:9b:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----