Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E7B8C6E57E11EB900DB82AF8AEA228.roa
File:                     01E7B8C6E57E11EB900DB82AF8AEA228.roa (raw, json)
Hash identifier:          Hl90BtYJujQD+4M9Sj52MAvfGP9N//f/sA340+zDRsk=
Subject key identifier:   64:6F:41:79:C1:73:CD:5F:6D:02:01:E6:13:6F:92:5D:6B:BB:5D:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       07BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E7B8C6E57E11EB900DB82AF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:04:53 +0000
ROA not before:           Thu 15 Jul 2021 15:04:49 +0000
ROA not after:            Sat 09 Jul 2022 15:04:49 +0000
asID:                     397630
IP address blocks:        154.201.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:04:49 2021 GMT
            Not After : Jul  9 15:04:49 2022 GMT
        Subject: CN=60f04e94-b757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:81:bd:c0:d2:ed:c4:93:db:20:f4:c7:5e:
                    87:87:0b:e1:a1:46:1f:f9:8a:f8:68:2d:fc:7f:5e:
                    30:24:3d:72:e6:22:36:4f:61:fa:d2:9f:f8:78:5a:
                    b2:5f:81:e8:f8:b9:d1:d3:b7:6a:d0:e9:68:9a:b3:
                    59:df:c7:78:f9:0a:58:44:d9:6a:a4:23:b1:ec:b9:
                    87:15:af:bd:bf:8e:f6:7f:0d:04:39:1b:b2:7f:fc:
                    cb:11:db:f3:54:d5:2d:1e:33:1e:38:c6:48:2a:41:
                    5c:28:23:52:fd:27:0d:e5:c1:94:8e:02:4e:68:d1:
                    9f:a0:2b:73:90:14:20:90:49:6a:79:e4:de:50:f9:
                    61:7a:dc:f8:a4:f0:6c:74:9b:09:42:c0:14:1e:b2:
                    f9:2e:44:d3:05:4f:c4:66:c2:d9:6f:8b:9d:63:ae:
                    61:c3:69:33:96:2b:88:a6:9c:01:b6:bc:eb:fe:37:
                    f5:06:be:c2:32:28:4d:cd:81:47:91:14:c1:67:50:
                    8c:e6:e0:18:2b:b2:aa:81:b3:ae:14:bd:5c:28:51:
                    28:ac:ec:18:5b:48:93:98:6a:de:10:75:ce:f1:92:
                    f4:74:b0:2e:b5:8e:3b:2c:1a:5d:78:7f:17:54:69:
                    5f:43:96:e4:c7:33:09:25:59:bb:ac:34:8a:d4:a9:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:41:79:C1:73:CD:5F:6D:02:01:E6:13:6F:92:5D:6B:BB:5D:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E7B8C6E57E11EB900DB82AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:db:0f:41:2a:be:29:22:c7:b0:f5:42:94:1e:1a:b0:1f:
         ad:b6:c0:33:c3:03:70:a0:d1:c8:de:82:ef:66:95:c9:a4:21:
         3e:b1:bd:8a:25:e6:d0:ec:ad:cd:8a:c3:b0:89:3e:12:78:17:
         fc:87:5e:2b:73:ad:aa:de:fc:1e:5d:76:e9:a1:65:d4:a7:f3:
         0e:fe:25:cd:47:6f:1d:e9:9a:39:9e:9f:7b:28:16:e3:57:c0:
         d8:59:31:4b:e9:c3:ca:05:82:66:70:81:b2:1b:f9:54:f9:6f:
         c3:51:fd:a9:38:f2:ee:6a:43:fa:bc:09:17:1e:a2:e2:5e:53:
         8f:c6:2b:c8:1d:6c:ab:bd:21:1f:ba:ff:37:1a:19:e6:f1:5a:
         a8:51:c7:f0:1d:8f:9c:c7:c2:cb:ba:90:18:39:f0:af:45:05:
         4d:df:4f:ae:f4:6d:ab:c2:36:1c:0d:4b:1c:b7:3f:2b:d6:ab:
         cc:1a:c5:f6:96:3b:e4:4d:62:a2:d2:a5:7e:a6:99:b1:a7:c8:
         bf:f3:09:5a:be:a6:4f:90:d6:54:09:50:2a:6a:65:06:52:0b:
         e3:1d:a6:44:af:48:71:37:d8:52:b8:f4:fe:8a:ac:cd:5b:1b:
         72:3e:49:33:0b:ea:0f:b0:59:3a:b0:0a:b6:cc:fb:90:25:3c:
         c6:18:e6:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB74wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTA0NDlaFw0yMjA3MDkxNTA0NDlaMBgxFjAU
BgNVBAMTDTYwZjA0ZTk0LWI3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0dYG9wNLtxJPbIPTHXoeHC+GhRh/5ivhoLfx/XjAkPXLmIjZPYfrSn/h4
WrJfgej4udHTt2rQ6Wias1nfx3j5ClhE2WqkI7HsuYcVr72/jvZ/DQQ5G7J//MsR
2/NU1S0eMx44xkgqQVwoI1L9Jw3lwZSOAk5o0Z+gK3OQFCCQSWp55N5Q+WF63Pik
8Gx0mwlCwBQesvkuRNMFT8Rmwtlvi51jrmHDaTOWK4imnAG2vOv+N/UGvsIyKE3N
gUeRFMFnUIzm4BgrsqqBs64UvVwoUSis7BhbSJOYat4Qdc7xkvR0sC61jjssGl14
fxdUaV9DluTHMwklWbusNIrUqZRdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZG9B
ecFzzV9tAgHmE2+SXWu7XaUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzAxRTdCOEM2RTU3RTExRUI5MDBEQjgyQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayTswDQYJKoZIhvcNAQEL
BQADggEBAHot2w9BKr4pIsew9UKUHhqwH622wDPDA3Cg0cjegu9mlcmkIT6xvYol
5tDsrc2Kw7CJPhJ4F/yHXitzrare/B5ddumhZdSn8w7+Jc1Hbx3pmjmen3soFuNX
wNhZMUvpw8oFgmZwgbIb+VT5b8NR/ak48u5qQ/q8CRceouJeU4/GK8gdbKu9IR+6
/zcaGebxWqhRx/Adj5zHwsu6kBg58K9FBU3fT670bavCNhwNSxy3PyvWq8waxfaW
O+RNYqLSpX6mmbGnyL/zCVq+pk+Q1lQJUCpqZQZSC+MdpkSvSHE32FK49P6KrM1b
G3I+STML6g+wWTqwCrbM+5AlPMYY5ss=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-fra.rpki-client.org