Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E26361966D1111ECBE1F87D25A40D577.roa
File:                     E26361966D1111ECBE1F87D25A40D577.roa (raw, json)
Hash identifier:          ESketuOjqZYqq/ZqUiQ7zRpgRCWuv12l9QaeETiX0Fk=
Subject key identifier:   AC:F8:25:DA:5A:3C:11:90:36:2B:58:36:F9:BE:47:06:96:BF:38:13
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       075F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E26361966D1111ECBE1F87D25A40D577.roa
Signing time:             Tue 04 Jan 2022 03:53:32 +0000
ROA not before:           Tue 04 Jan 2022 03:53:28 +0000
ROA not after:            Wed 04 Jan 2023 03:53:28 +0000
asID:                     20454
IP address blocks:        154.16.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan  4 03:53:28 2022 GMT
            Not After : Jan  4 03:53:28 2023 GMT
        Subject: CN=61d3c4bc-21b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:cc:9d:0d:a0:b1:7c:a6:62:f8:18:6f:bc:
                    f6:88:ac:2d:14:bd:29:b0:82:01:15:ba:70:63:85:
                    81:77:50:fa:ab:ed:d2:fb:77:0c:72:ea:f7:5d:ec:
                    dd:d4:4c:c8:06:17:f0:fa:d2:83:06:86:a8:3c:90:
                    9d:8f:9c:36:df:96:4c:53:d9:8a:c9:6f:51:d3:f1:
                    7a:8d:c3:1e:9e:68:fa:3f:58:92:c0:64:b9:24:bf:
                    9b:d1:9e:2e:01:14:c0:f4:44:53:31:34:de:ee:12:
                    a0:17:04:56:53:9c:c0:62:10:c4:3f:0b:bf:9a:77:
                    66:46:c3:c4:39:f1:7f:f0:46:f3:00:f8:a0:e3:37:
                    f8:be:2b:de:08:a4:51:a9:ea:3e:22:36:5a:cf:37:
                    71:78:17:1b:34:a3:38:d9:fd:25:9d:09:22:b2:a0:
                    a0:38:d2:f5:95:4e:66:5e:fc:1c:c4:e6:37:59:db:
                    64:d3:01:6e:de:88:a2:93:c1:bf:db:38:b0:10:06:
                    f3:46:5e:8b:0a:e9:1f:e2:de:cb:99:8d:92:12:68:
                    80:99:e3:02:83:58:6d:9a:1b:bf:07:3c:c1:c4:89:
                    f7:7d:2e:51:77:9a:9a:9e:8e:99:a3:ce:45:91:4f:
                    68:8e:c7:7a:c6:c4:a0:44:64:6f:a4:b8:4b:bc:a0:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:25:DA:5A:3C:11:90:36:2B:58:36:F9:BE:47:06:96:BF:38:13
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E26361966D1111ECBE1F87D25A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:e1:28:01:b1:28:af:6d:9b:76:18:18:00:3c:e5:04:fd:
         9c:99:e3:90:7c:6a:6f:39:f2:f6:60:75:5b:3b:cf:a9:92:0c:
         f3:53:c7:1c:34:40:5c:7c:d0:d3:f3:f9:5a:a4:95:8b:67:17:
         d2:73:39:8a:aa:1f:b0:7c:c5:e0:c9:0a:69:86:2d:d3:94:8a:
         e6:25:15:44:59:10:a1:93:87:71:07:4d:65:0b:e2:2d:22:be:
         af:b2:53:ec:f5:c6:3b:c8:69:fc:d8:ad:25:cd:93:99:70:87:
         bf:7b:56:54:99:7b:d0:ba:ed:fe:9b:95:f8:67:b0:0f:d5:35:
         8e:d4:23:64:96:68:b2:c0:87:25:f6:1a:5a:b1:48:db:07:92:
         5c:d4:73:c9:77:a0:fe:94:64:59:e5:2a:44:ce:4c:89:c9:d6:
         60:3f:0a:89:89:01:bb:a3:3c:7f:0c:19:87:d2:63:44:c2:b9:
         06:52:50:0e:a5:6d:8a:33:92:af:be:2e:9e:48:5b:4b:a6:4d:
         5e:5c:87:c6:86:df:af:3d:5d:32:c2:c8:ea:68:36:d0:1f:47:
         4d:72:d8:7d:be:e0:60:65:c9:2d:e0:10:18:05:02:8b:3d:4d:
         98:dd:6e:44:14:66:51:7e:dd:31:18:33:b2:0e:67:1d:bc:cb:
         47:82:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org