Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECDC17100D4111EC8233947CD8A014CE.roa
File:                     ECDC17100D4111EC8233947CD8A014CE.roa (raw, json)
Hash identifier:          0IqYpe5TWFH9gEW7orh04SWllM8n/pgeND7tt6nwZWY=
Subject key identifier:   34:A5:36:26:1A:69:59:CD:75:84:EF:92:47:FC:7A:E5:30:EF:B4:CC
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       065A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECDC17100D4111EC8233947CD8A014CE.roa
Signing time:             Sat 04 Sep 2021 05:35:34 +0000
ROA not before:           Sat 04 Sep 2021 05:35:31 +0000
ROA not after:            Sun 04 Sep 2022 05:35:31 +0000
asID:                     399838
IP address blocks:        154.16.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  4 05:35:31 2021 GMT
            Not After : Sep  4 05:35:31 2022 GMT
        Subject: CN=613305a6-e609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:ce:38:1a:db:d8:35:69:80:27:31:0f:bc:
                    52:c0:b0:32:f4:50:43:d8:2f:38:c2:37:15:63:e7:
                    d8:bd:41:62:e9:fb:2e:1e:6d:dc:84:2d:95:4a:56:
                    f7:c2:e9:3c:3d:90:3e:55:ac:09:7d:d3:48:bc:26:
                    ba:c4:58:fb:1e:63:1f:ef:b5:82:da:54:25:e6:1d:
                    16:8f:c8:33:29:4e:f7:90:2c:d3:00:a2:31:9c:96:
                    07:9d:e3:d4:cf:73:f9:c8:8c:9a:1b:28:8a:ee:5e:
                    c1:1d:f8:e9:cb:5e:cb:89:68:02:9d:d3:8d:7b:96:
                    2d:e4:44:c3:8c:f1:47:3b:c4:05:7f:08:a5:2c:04:
                    f1:2b:2d:48:eb:fc:74:d4:cf:15:29:a0:74:ae:f5:
                    8b:ec:82:af:e7:73:bb:03:f8:53:ee:22:5c:76:df:
                    8d:f0:e9:7d:af:a5:f0:80:e7:aa:32:f5:18:fc:c4:
                    b0:c6:2e:e3:15:89:c0:b1:28:b2:12:81:8f:31:84:
                    f1:2e:6f:c7:03:b4:6c:e1:48:6f:0f:e6:52:1c:de:
                    28:98:e6:b6:94:25:e3:ce:7c:dc:03:1c:58:31:88:
                    65:16:75:23:c9:9e:a7:70:eb:9a:fd:7f:72:87:4f:
                    d6:4c:e2:81:6b:af:b9:45:6d:01:ea:b7:33:e3:0c:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A5:36:26:1A:69:59:CD:75:84:EF:92:47:FC:7A:E5:30:EF:B4:CC
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECDC17100D4111EC8233947CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:fb:86:89:30:96:43:0a:b6:8e:d5:88:8e:02:47:c4:13:
         ef:73:fb:37:75:66:0b:86:30:98:39:00:b7:cb:b2:ec:cb:b9:
         0f:f3:ef:5e:b1:68:ee:78:18:0b:b3:6b:96:38:2d:08:ce:b0:
         a4:5b:49:f3:de:10:07:e2:12:80:71:ac:30:e4:c6:a4:9f:cf:
         08:9f:96:51:2f:a7:44:b8:8f:b2:6f:b8:4d:cd:78:df:21:14:
         73:43:ae:c5:25:6e:9d:5e:c0:5f:32:f8:e5:5b:74:60:18:f9:
         a1:16:fb:d9:8f:43:a8:a3:4c:b3:0a:7f:ab:fc:fc:bc:ad:a6:
         76:a5:f4:0a:17:25:de:c1:fa:10:10:0f:b1:a6:89:58:6c:4e:
         87:95:35:e4:78:9a:c6:5d:63:75:35:a8:0a:dd:62:60:bb:06:
         5d:4e:4b:62:b6:3a:e5:99:08:91:3d:03:c1:b4:95:a5:a9:50:
         b2:f1:92:91:78:0c:c6:98:fa:2b:9f:69:97:ec:5b:e5:ac:44:
         02:b0:36:ae:5b:48:0f:6a:0e:f0:91:36:4b:85:3b:56:a2:31:
         fc:f6:a9:aa:33:34:86:d7:a7:35:60:f6:60:01:40:9f:54:2d:
         2b:24:d4:df:38:3d:c2:41:65:3e:5b:0e:1b:11:3c:87:db:5e:
         bd:38:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org