Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
File:                     8E13D0B2878C11EDA33E16A8F1222468.roa (raw, json)
Hash identifier:          wIbYY+oED6REn268HOJvIWBHr5CdN/sP+5RXRxvRyiw=
Subject key identifier:   D9:C6:8C:76:54:7C:B6:54:2A:20:53:89:4F:41:CB:6B:1F:18:7A:32
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0B1B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
Signing time:             Thu 29 Dec 2022 15:22:07 +0000
ROA not before:           Thu 29 Dec 2022 15:22:03 +0000
ROA not after:            Fri 29 Dec 2023 15:22:03 +0000
asID:                     61317
IP address blocks:        154.16.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2843 (0xb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 29 15:22:03 2022 GMT
            Not After : Dec 29 15:22:03 2023 GMT
        Subject: CN=63adb09f-9281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:04:ff:28:7f:dc:62:09:43:bf:37:e6:ff:
                    b2:d5:7a:be:08:fd:c1:4d:19:6b:0d:0c:17:72:bd:
                    02:11:e8:7d:ac:b7:4e:7f:5c:af:27:a6:da:d6:be:
                    48:b7:c5:31:5b:bc:83:8d:ed:23:2c:d6:0d:ee:55:
                    21:0b:b7:00:7d:3b:7e:30:3e:7e:7f:fb:14:ff:18:
                    c7:7d:6d:72:50:27:8a:37:24:2a:c0:39:2b:45:85:
                    c0:09:5f:84:7f:a9:46:f3:b8:e6:95:bc:6e:0e:4a:
                    02:0b:34:1a:ad:ae:f0:8a:d2:14:e8:c6:08:7a:66:
                    72:1a:4c:61:01:c0:f4:0d:b5:fa:8c:8b:b6:61:6b:
                    67:c9:2c:6a:87:73:57:a6:b5:4c:4a:22:ae:13:76:
                    06:c2:2e:9d:fd:84:eb:5d:6c:89:2c:96:36:78:22:
                    88:09:c7:1c:b9:6f:6c:b2:80:2a:72:f1:c3:0a:fb:
                    cc:cf:13:4d:89:3f:75:1f:91:ff:3a:cf:28:8d:d0:
                    ad:43:2f:c0:e4:ec:97:bb:3c:8a:48:2d:95:e4:2b:
                    b1:25:c7:25:2c:c1:b6:72:f1:b1:c5:d6:4c:88:65:
                    f1:df:71:52:6a:77:14:ee:13:9c:e8:a4:11:4f:25:
                    8d:62:87:1e:3b:ac:0a:b4:a9:04:9c:51:da:cb:e2:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:8C:76:54:7C:B6:54:2A:20:53:89:4F:41:CB:6B:1F:18:7A:32
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E13D0B2878C11EDA33E16A8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:ed:25:63:b1:e4:1d:59:7f:4f:a2:ac:2a:f2:b7:af:6e:
         00:e9:fb:31:46:f3:83:8c:f6:3f:7d:17:9e:76:f0:63:0e:5c:
         bf:ef:3e:b3:a6:bc:5e:62:9e:16:ba:24:f4:d0:87:e3:fa:36:
         ad:5d:7c:d8:64:09:c6:73:0e:87:ef:03:af:a6:d4:57:73:a6:
         ae:77:cd:fe:78:56:b1:c1:3a:11:a7:1f:72:ef:5a:81:e0:f0:
         94:1e:d7:45:cf:49:8b:3d:14:1d:9b:21:df:dc:84:37:0d:06:
         9c:39:9d:11:f0:19:79:87:65:89:44:55:9e:5c:5c:1a:a7:7d:
         ff:d4:c8:29:e4:b5:29:dd:e6:d4:6e:a3:9c:59:16:b4:01:2a:
         99:d5:27:59:8d:ac:44:17:2d:c3:e6:97:8a:70:94:f6:84:f2:
         9a:d7:6b:2e:9c:0e:3f:1f:0d:49:5e:c2:a0:d4:09:cb:c8:fb:
         b9:a5:35:af:56:8e:e7:96:31:e3:fa:72:6f:9b:12:4f:ec:a2:
         99:e8:3e:99:9c:2b:eb:18:9a:fd:7a:de:e2:1d:14:f6:65:e2:
         e3:dc:7c:94:aa:48:4f:46:8a:7e:0a:90:b6:b1:af:29:ac:91:
         3b:ab:cf:7a:cd:ce:cc:25:25:1d:9a:b4:ca:2d:b4:fb:c9:42:
         85:d0:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 01:26:31 2023 by rpki-client on console-ams.rpki-client.org