Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03B0284001B711ED812D9699F1222468.roa
File:                     03B0284001B711ED812D9699F1222468.roa (raw, json)
Hash identifier:          R4yi9BKooQL6F+xd9qK68r6RxiQupVUyMo5wx1RCmxw=
Subject key identifier:   9E:EA:9F:9C:5E:57:1F:75:0F:07:8B:9F:45:97:50:1E:1A:F0:11:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1758
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03B0284001B711ED812D9699F1222468.roa
Signing time:             Tue 12 Jul 2022 07:48:27 +0000
ROA not before:           Tue 12 Jul 2022 07:48:24 +0000
ROA not after:            Tue 11 Jul 2023 07:48:24 +0000
asID:                     138630
IP address blocks:        154.212.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5976 (0x1758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 12 07:48:24 2022 GMT
            Not After : Jul 11 07:48:24 2023 GMT
        Subject: CN=62cd274b-5d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:d4:bf:2b:5b:30:a4:f7:01:45:fe:b7:04:
                    42:74:41:d1:58:7c:92:2e:d2:c5:bd:ea:a5:3a:c5:
                    8a:df:ae:06:a4:a3:96:4c:1f:8e:7c:6b:aa:fa:87:
                    29:62:ec:60:67:cf:b5:3b:4b:c4:66:15:11:54:f5:
                    01:1b:e9:20:d6:af:1f:7e:28:cd:86:4c:34:52:67:
                    10:26:ba:8d:cb:fc:7c:16:16:c8:7a:92:44:6f:57:
                    29:26:87:5d:6a:08:f1:d7:11:77:b7:15:82:b9:dd:
                    92:ac:ea:85:8b:89:4e:a5:85:0d:18:a0:cd:b9:68:
                    3d:63:f0:7f:3c:df:48:2a:03:2a:c0:07:15:5b:ee:
                    53:3d:70:0f:b3:b7:ac:f2:15:65:8c:72:b6:d0:15:
                    81:e7:8f:b0:61:15:42:00:03:9c:eb:df:83:27:73:
                    78:a4:16:13:d0:88:87:3a:c7:fb:a4:bd:20:6f:07:
                    62:c0:d3:1b:d5:89:9d:6e:42:43:64:f7:34:19:15:
                    bb:37:71:75:2e:69:bf:b3:0a:50:17:21:51:6e:3c:
                    ae:3b:c3:a5:db:51:3a:29:54:9d:ad:19:8f:4c:2e:
                    b3:0e:fc:47:44:68:8a:0c:14:e9:c8:83:6a:d3:b5:
                    2b:f3:f0:0d:3c:19:1e:3d:4d:c6:f5:fc:b7:f1:a7:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:9F:9C:5E:57:1F:75:0F:07:8B:9F:45:97:50:1E:1A:F0:11:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03B0284001B711ED812D9699F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:78:1c:ef:88:b4:84:df:e4:1f:2a:a9:a5:40:61:63:cf:06:
         4f:b8:d3:17:00:55:c6:37:18:83:b6:c3:d4:d1:81:d4:2f:8a:
         37:b8:b0:0e:59:74:b7:5c:91:55:12:c0:6f:f7:41:85:31:35:
         08:bf:4b:dc:92:d1:3e:05:2f:f9:89:af:af:d8:ff:d8:12:45:
         e7:f0:68:cf:c2:0e:fd:11:6f:75:b7:1b:b0:75:bc:26:3f:68:
         bb:84:92:63:33:45:b5:28:2e:e4:9b:c2:fb:cf:dd:2c:32:99:
         71:3c:a5:59:6e:77:72:e9:d6:e9:78:6c:6c:08:4a:27:68:7e:
         b4:52:4a:c1:c7:2a:ef:fd:66:45:57:13:6c:de:b1:6b:2e:db:
         96:29:1e:fa:64:36:ba:50:65:2c:44:ac:85:a6:25:d3:d9:48:
         6e:93:5f:50:2b:59:b0:e5:da:a0:80:cc:f1:20:01:59:35:c3:
         c3:ef:0d:69:c1:34:f8:88:be:7d:0c:81:2d:6f:cb:8d:97:7c:
         09:c6:a1:cb:e1:51:61:c9:83:79:ba:d8:ea:99:dd:d7:d8:7a:
         b0:a6:d4:46:46:94:55:28:46:ae:52:7b:e6:ce:e9:0a:8b:aa:
         e3:f7:92:cc:46:76:07:7a:46:16:66:34:c0:0a:be:9c:d2:ad:
         56:2e:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-fra.rpki-client.org