Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075827CE598611ECBD33CBC65A40D577.roa
File:                     075827CE598611ECBD33CBC65A40D577.roa (raw, json)
Hash identifier:          uUGMnIWu8v0sOSHf8SICLsBdlnfrIN84Nq2DT4WSgKk=
Subject key identifier:   0C:43:81:57:EE:C0:34:FC:9B:17:69:74:6B:11:55:18:F6:AD:EB:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       137C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075827CE598611ECBD33CBC65A40D577.roa
Signing time:             Fri 10 Dec 2021 06:54:33 +0000
ROA not before:           Fri 10 Dec 2021 06:54:28 +0000
ROA not after:            Fri 30 Dec 2022 06:54:28 +0000
asID:                     133201
IP address blocks:        154.204.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4988 (0x137c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 06:54:28 2021 GMT
            Not After : Dec 30 06:54:28 2022 GMT
        Subject: CN=61b2f9a8-ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d5:61:02:37:18:30:d5:e6:0d:35:6a:a2:af:
                    8f:dc:49:ee:6c:3f:e6:38:1d:a5:1e:bf:f9:57:6f:
                    0c:62:e7:46:3b:9e:75:09:f0:52:ee:9f:76:6f:11:
                    51:2d:13:67:32:ec:52:fc:d4:fe:b0:c7:e9:00:73:
                    40:99:0a:8a:47:0e:7d:33:80:46:5e:58:4a:71:65:
                    13:b0:6d:7d:1e:36:d4:6b:e2:e3:17:69:ba:30:08:
                    cc:5d:d5:f4:26:de:d7:32:82:59:06:f7:64:b7:6c:
                    65:90:73:12:4c:d3:e2:9e:95:db:27:93:8b:ba:3b:
                    6b:f9:cc:17:9d:31:03:cb:7f:32:87:e1:52:e6:c9:
                    fe:9b:08:cd:7a:71:60:0c:36:95:fe:a8:01:bc:0b:
                    8b:86:78:e1:ea:79:e5:a7:7f:fb:6e:28:5e:01:a4:
                    39:ea:2b:86:c2:b2:7c:c0:c4:ff:b7:09:4c:8a:30:
                    ff:26:3a:f4:d0:e9:90:31:50:b2:b7:52:8e:ce:07:
                    2c:48:ef:b3:c7:5a:47:7d:82:fa:80:e9:4d:c3:7c:
                    46:3e:a3:bb:14:c4:4a:cc:2f:12:10:c0:c9:f1:df:
                    6a:a7:7e:f3:d5:25:08:fd:72:09:41:b9:ed:9c:f3:
                    77:99:d5:68:cf:47:a4:16:0a:da:e2:6f:15:6e:bc:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:81:57:EE:C0:34:FC:9B:17:69:74:6B:11:55:18:F6:AD:EB:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075827CE598611ECBD33CBC65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:c6:55:e7:02:bf:5e:c6:a2:78:8a:b5:00:df:a8:e8:be:
         3c:12:8b:18:32:8e:5d:41:1f:23:e7:00:3f:3f:3a:24:ec:1f:
         53:21:60:63:65:de:52:3c:f7:04:df:4a:a6:05:2d:7d:d3:17:
         b9:73:31:e1:a5:5d:29:bc:c9:32:e9:4e:87:3c:21:fd:3c:1d:
         11:36:eb:c0:51:cc:4e:27:94:7a:d3:d9:f2:3d:3d:a7:42:37:
         f6:c7:49:1b:11:f2:de:48:23:b9:7a:fd:24:5c:45:9f:36:ce:
         9c:e7:4a:bd:f2:3d:4c:0f:c7:7a:e9:9d:01:85:53:0a:a4:09:
         6c:3b:db:49:8f:67:98:8f:40:a8:23:8f:aa:4c:ee:eb:3c:54:
         4b:51:b8:53:87:ed:df:52:03:11:59:91:ac:bb:e2:cc:76:2e:
         93:bc:8d:fa:40:20:b7:76:2e:66:31:0c:54:d4:66:14:fe:5e:
         ae:54:a1:ff:10:31:ec:9d:87:1d:36:a7:85:47:5f:36:f9:0f:
         c1:87:14:dd:4e:61:9c:cc:06:14:6f:a5:64:61:47:10:f8:f3:
         22:13:2a:29:12:3f:be:aa:8b:a6:c4:48:20:8a:8a:64:bc:bf:
         4f:47:c1:65:54:d3:fd:f5:f9:be:7f:5e:a1:49:e9:d1:f6:0c:
         69:83:79:50
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE3wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTAwNjU0MjhaFw0yMjEyMzAwNjU0MjhaMBgxFjAU
BgNVBAMMDTYxYjJmOWE4LWFiMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD71WECNxgw1eYNNWqir4/cSe5sP+Y4HaUev/lXbwxi50Y7nnUJ8FLun3Zv
EVEtE2cy7FL81P6wx+kAc0CZCopHDn0zgEZeWEpxZROwbX0eNtRr4uMXabowCMxd
1fQm3tcyglkG92S3bGWQcxJM0+Keldsnk4u6O2v5zBedMQPLfzKH4VLmyf6bCM16
cWAMNpX+qAG8C4uGeOHqeeWnf/tuKF4BpDnqK4bCsnzAxP+3CUyKMP8mOvTQ6ZAx
ULK3Uo7OByxI77PHWkd9gvqA6U3DfEY+o7sUxErMLxIQwMnx32qnfvPVJQj9cglB
ue2c83eZ1WjPR6QWCtribxVuvElXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDEOB
V+7ANPybF2l0axFVGPat6/owHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzA3NTgyN0NFNTk4NjExRUNCRDMzQ0JDNjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaazEAwDQYJKoZIhvcNAQEL
BQADggEBALHxxlXnAr9exqJ4irUA36jovjwSixgyjl1BHyPnAD8/OiTsH1MhYGNl
3lI89wTfSqYFLX3TF7lzMeGlXSm8yTLpToc8If08HRE268BRzE4nlHrT2fI9PadC
N/bHSRsR8t5II7l6/SRcRZ82zpznSr3yPUwPx3rpnQGFUwqkCWw720mPZ5iPQKgj
j6pM7us8VEtRuFOH7d9SAxFZkay74sx2LpO8jfpAILd2LmYxDFTUZhT+Xq5Uof8Q
Meydhx02p4VHXzb5D8GHFN1OYZzMBhRvpWRhRxD48yITKikSP76qi6bESCCKimS8
v09HwWVU0/31+b5/XqFJ6dH2DGmDeVA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org