Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02234AB090AC11ECB23A57BD5A40D577.roa
File:                     02234AB090AC11ECB23A57BD5A40D577.roa (raw, json)
Hash identifier:          EGj5aksiVmIE1KqJtD7uMvbJZqtjLVG4ZBag926ENj0=
Subject key identifier:   1A:F2:8D:0D:B3:5C:B1:26:03:83:56:EB:75:4A:99:28:7C:51:BB:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       14F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02234AB090AC11ECB23A57BD5A40D577.roa
Signing time:             Fri 18 Feb 2022 11:14:59 +0000
ROA not before:           Fri 18 Feb 2022 11:14:55 +0000
ROA not after:            Fri 30 Dec 2022 11:14:55 +0000
asID:                     137951
IP address blocks:        154.210.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5362 (0x14f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 18 11:14:55 2022 GMT
            Not After : Dec 30 11:14:55 2022 GMT
        Subject: CN=620f7fb3-4f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:ec:43:24:06:0c:ca:a5:b4:64:89:1d:d5:
                    aa:8f:24:c4:53:fb:03:c5:da:2c:40:54:b8:d9:1a:
                    8a:df:bc:0a:1d:03:ee:b1:90:c8:e9:a7:9d:33:1d:
                    95:ad:e7:47:a5:f1:d6:3c:c4:60:31:e7:22:21:ce:
                    af:e6:d9:a6:18:b7:35:3f:00:1b:5a:a9:48:75:ba:
                    4a:85:d6:bd:8c:08:61:c2:c2:82:8a:4d:87:ac:76:
                    5c:e2:28:77:f4:e0:18:d0:a6:e8:77:51:c5:b6:65:
                    34:e5:bc:8b:19:fc:2d:2d:33:2d:2f:82:c4:45:82:
                    19:42:06:f3:65:48:49:7b:c4:89:09:da:f3:53:a2:
                    3d:84:04:af:61:4f:ce:63:37:ce:b3:65:bd:e8:a0:
                    40:c1:29:1d:c9:7d:58:40:86:05:f6:b4:d4:68:1d:
                    c0:b8:61:27:80:d0:71:4d:7c:0f:c0:70:70:6c:59:
                    50:e5:60:17:f9:67:8c:7f:35:91:45:f4:c9:8f:b8:
                    b4:d7:ac:73:ae:dc:a8:d3:ee:4d:6c:66:27:46:c0:
                    7b:68:b7:b6:38:f3:aa:61:0a:89:dd:8c:32:d7:7e:
                    7c:6f:61:ac:a9:dc:ab:bf:23:9e:a5:0c:c1:3e:ba:
                    02:6e:48:d4:fd:0d:8b:5e:96:17:27:2f:55:5f:b7:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:8D:0D:B3:5C:B1:26:03:83:56:EB:75:4A:99:28:7C:51:BB:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02234AB090AC11ECB23A57BD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:85:74:08:8f:c9:91:7d:c9:38:88:bf:cc:03:89:56:66:
         19:1f:8b:17:e7:29:57:7c:10:00:97:ab:b9:47:08:49:48:1a:
         16:5c:8a:bd:5d:6a:40:ce:db:5e:c0:e7:6f:99:08:6a:6f:91:
         0a:19:18:76:14:2b:f4:8a:55:a4:11:be:02:6d:17:d9:79:c7:
         31:9d:53:ec:25:1d:51:70:26:24:b5:a0:09:2e:47:22:e2:8f:
         4e:28:6a:2c:b8:3c:cd:96:ef:88:eb:64:a8:d5:d4:97:a5:bf:
         f1:18:30:85:db:76:6f:5e:37:69:96:2b:6b:f0:d4:a6:5b:13:
         cf:a6:92:c7:f1:bc:ae:ec:19:b9:2e:b6:6f:3c:01:80:9e:c1:
         b1:43:ae:4d:13:03:e3:a2:8a:54:70:0a:f6:95:72:ee:9b:6d:
         11:ca:e5:14:13:90:e0:c9:ad:3b:50:3d:da:2b:96:b2:f2:70:
         98:1a:d4:e9:7a:9c:50:7b:be:20:f5:8b:7c:b5:77:d6:83:ad:
         a5:ca:d0:43:54:4a:f1:08:99:5e:fa:76:a6:14:e3:f6:b7:a1:
         06:bf:37:96:ad:83:1c:e3:73:1b:82:27:60:16:77:a9:91:f9:
         8b:6b:ea:51:01:56:21:84:88:13:5a:ea:ed:53:5e:0e:bc:95:
         62:4b:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org