Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
File:                     E2D26186AD8111EBB9329427F8AEA228.roa (raw, json)
Hash identifier:          W2FDTzsj4b5KGBn7Kfw9AtPIE+g67XGaAXJlNJ3jISY=
Subject key identifier:   14:B1:01:D4:16:21:B1:4E:66:0D:72:33:64:56:75:B4:AC:72:80:78
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0577
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
Signing time:             Wed 05 May 2021 09:11:34 +0000
ROA not before:           Wed 05 May 2021 09:11:27 +0000
ROA not after:            Thu 05 May 2022 09:11:27 +0000
asID:                     174
IP address blocks:        154.16.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May  5 09:11:27 2021 GMT
            Not After : May  5 09:11:27 2022 GMT
        Subject: CN=60926145-120e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:f9:4f:38:15:3b:a1:c5:e6:b0:a3:08:a9:
                    7b:90:d5:c2:06:70:0d:1e:34:2c:89:67:b0:5e:e2:
                    cb:3d:12:d3:5a:38:32:82:2d:0f:b9:44:8f:62:1d:
                    42:f5:35:b9:72:8e:ac:d6:a5:78:1c:c2:c9:3c:eb:
                    6b:dd:7c:04:f4:1d:de:7f:89:58:1b:20:eb:39:09:
                    fd:23:ac:62:e5:0a:20:8c:d1:ab:a6:1f:e2:a2:d0:
                    6e:5f:c5:51:e0:92:0e:e2:7c:5b:a4:3a:57:dd:e2:
                    0c:86:f5:30:25:d6:00:1a:67:4f:c3:d1:be:23:b7:
                    b1:78:e8:0d:3e:64:fb:f4:58:8c:f5:15:af:f2:77:
                    47:97:c6:a9:cc:1f:88:c1:9b:7b:a1:2d:86:f8:ce:
                    fd:6a:78:5c:66:6d:76:00:5f:7d:ba:a9:c4:72:65:
                    a6:98:25:47:73:d5:c9:bc:dd:a9:72:5e:9f:21:45:
                    60:be:cd:8a:1d:18:14:5d:33:8a:9e:56:c1:0b:96:
                    d0:54:be:9d:92:31:69:82:14:38:17:60:f7:7b:1e:
                    85:8d:b1:8f:dc:70:91:ef:7b:4a:c0:1d:42:fd:e5:
                    84:43:3a:ef:36:ac:48:97:bc:d8:42:c8:8d:97:7b:
                    3f:e3:0d:cd:78:c7:4c:69:3e:06:66:32:4b:05:0a:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:01:D4:16:21:B1:4E:66:0D:72:33:64:56:75:B4:AC:72:80:78
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:e7:88:8f:1c:ae:a4:92:17:a3:fa:b0:82:3e:8e:db:3c:
         82:07:c5:3f:0d:fa:ce:4e:bd:ae:79:5a:dd:42:fc:e3:17:45:
         af:65:a9:12:98:fe:c2:b5:91:15:49:c3:b8:35:9a:d2:2b:be:
         1f:ea:1f:a6:14:21:90:b5:02:e5:e5:7e:7b:c5:94:97:f1:23:
         92:20:e1:31:bc:52:0f:0e:36:fd:f9:eb:d6:c6:a3:21:10:97:
         91:c5:ee:5e:6c:0e:99:26:79:a4:b7:a8:8d:3b:e5:4e:5e:43:
         45:f1:95:61:cd:49:f7:bb:ad:ca:16:7c:ad:4e:6f:07:3d:0a:
         07:48:6b:21:aa:7a:f3:8a:ff:76:39:c7:b8:38:d8:04:57:bd:
         88:06:8c:bc:95:fd:f1:79:4b:af:e3:39:51:45:69:be:44:67:
         16:7f:4b:fa:8e:cc:10:37:c2:70:f6:e4:31:b1:5e:73:31:43:
         9a:13:9e:f6:5a:80:89:3b:ad:d2:97:53:dd:0d:fc:4a:07:bc:
         ce:c5:c5:fa:e1:4f:a6:13:5a:2e:f5:7b:a4:65:8b:06:9d:b1:
         c5:50:2f:6e:4c:b0:27:14:f0:19:fb:80:32:5b:4e:5e:e7:f4:
         3e:10:dc:57:14:62:40:8b:da:a8:7f:54:6c:c5:46:ff:ef:0c:
         35:36:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org