Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
File:                     84FC59405E9D11EC86509AD45A40D577.roa (raw, json)
Hash identifier:          uZBwmTSZKZBHWMP5EO63tUQs5WqrnOWx0IAIqBBgaxo=
Subject key identifier:   6B:AF:24:EE:4D:1F:1D:33:F4:8D:91:4E:51:B8:07:76:E6:52:61:1D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0737
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
Signing time:             Thu 16 Dec 2021 18:25:18 +0000
ROA not before:           Thu 16 Dec 2021 18:25:13 +0000
ROA not after:            Fri 16 Dec 2022 18:25:13 +0000
asID:                     207326
IP address blocks:        154.16.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 16 18:25:13 2021 GMT
            Not After : Dec 16 18:25:13 2022 GMT
        Subject: CN=61bb848e-0b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:83:43:7b:ad:20:c8:ec:4b:34:4d:f1:7e:
                    76:d1:65:bb:30:0c:fd:eb:cc:e0:1e:60:02:7d:3f:
                    68:b6:62:5d:ab:1f:b8:da:7c:8c:27:61:34:bf:4b:
                    79:05:d6:17:ca:bc:d1:17:02:86:47:06:f9:14:5d:
                    16:ce:22:65:b3:b0:4f:4b:84:5d:bb:cc:5a:09:bd:
                    ab:21:32:41:8c:a2:f3:18:a6:d0:6c:65:60:e4:a4:
                    2b:8c:a0:1a:8a:fb:24:b3:9a:a5:86:d2:1f:fe:04:
                    c3:16:e1:4a:3b:7e:61:6c:3f:66:d3:b0:f2:5b:b4:
                    10:34:37:e0:7a:ea:dc:e6:9f:fd:02:87:f3:03:83:
                    46:89:d6:c9:bf:07:64:f2:d5:1d:71:59:63:56:54:
                    e1:c3:ee:33:23:10:c0:4d:65:43:2f:3f:41:df:8d:
                    d2:be:f3:77:73:14:a8:c1:39:01:65:ca:4f:dc:9a:
                    db:9b:c9:11:1d:72:a6:46:9a:50:96:2e:79:a7:20:
                    e1:99:c5:ee:70:1c:d3:5c:43:4e:d7:34:c8:35:0b:
                    53:3c:05:d3:17:6e:a3:56:cc:32:68:20:74:d8:9c:
                    53:b5:5a:4e:c5:7a:94:f5:61:a4:36:7b:15:b7:29:
                    b1:1a:27:6e:31:23:56:a3:29:cd:de:42:31:ff:7d:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:24:EE:4D:1F:1D:33:F4:8D:91:4E:51:B8:07:76:E6:52:61:1D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:ba:86:28:3c:fe:f2:86:0b:e8:01:ea:ab:cd:6a:76:c2:
         f7:8e:e8:98:8f:18:18:a8:30:9c:6e:d4:b4:ab:9e:cb:80:83:
         3e:54:0b:cc:42:45:89:c5:02:d4:78:76:64:90:79:d6:38:cc:
         07:e9:54:68:c4:d2:03:87:41:17:75:97:3a:a0:52:33:17:e1:
         c7:3e:c8:92:0c:de:30:94:4d:0b:7c:27:02:aa:27:cb:b7:4c:
         d9:f7:b4:c8:f7:4d:97:7c:b9:f7:e1:ec:de:5f:52:ac:ab:5a:
         89:00:91:a8:82:7f:1e:a6:d3:73:1e:13:57:fa:92:07:e2:71:
         2a:0a:87:08:43:b9:e2:8b:8b:19:2f:f5:41:0d:93:75:a8:1b:
         5f:20:00:5d:a0:30:e5:ac:95:21:0a:74:11:09:4f:1f:a2:6a:
         6b:9d:7a:4d:47:66:7a:2d:18:9d:70:bd:60:73:3a:d5:79:b2:
         8f:de:9d:22:e6:38:75:4d:7d:21:cf:66:c8:d9:e8:25:43:b2:
         a4:20:ec:dc:a6:87:ca:c2:13:4a:d1:5e:50:8e:83:aa:db:8d:
         4b:3f:d4:ba:fc:54:4a:6d:d4:06:62:54:7c:6c:42:70:0c:d6:
         90:94:d2:76:a8:df:33:eb:f4:f3:33:e9:ea:5c:11:5c:3f:23:
         a5:84:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----