Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104180D857D811ECBB1E6ECD5A40D577.roa
File:                     104180D857D811ECBB1E6ECD5A40D577.roa (raw, json)
Hash identifier:          iEn6JKiObVxf80ibLgx8TJyI9b35P8vWR3qsp6QMcuU=
Subject key identifier:   89:EB:5B:D0:BB:F5:05:A0:06:B2:DF:B3:59:22:CE:5A:85:B5:E1:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1361
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104180D857D811ECBB1E6ECD5A40D577.roa
Signing time:             Wed 08 Dec 2021 03:36:44 +0000
ROA not before:           Wed 08 Dec 2021 03:36:40 +0000
ROA not after:            Fri 30 Dec 2022 03:36:40 +0000
asID:                     54600
IP address blocks:        154.208.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4961 (0x1361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  8 03:36:40 2021 GMT
            Not After : Dec 30 03:36:40 2022 GMT
        Subject: CN=61b0284c-eddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:38:b4:b8:39:be:65:da:11:96:df:57:d0:
                    bc:62:c1:12:f0:52:94:e5:03:42:b1:62:e2:bb:3d:
                    90:f4:3f:69:03:80:e8:43:9d:e7:94:87:45:d1:4d:
                    ef:8d:c1:db:d4:ec:8d:1e:55:64:46:aa:6c:d7:16:
                    8f:54:53:31:7a:82:9b:5f:7c:75:01:35:fe:7d:c4:
                    37:99:e1:25:5c:9c:6d:f6:4d:51:74:3d:7a:7b:01:
                    3e:cc:0f:a7:8f:ec:44:0c:d4:22:39:b0:51:a7:83:
                    24:0e:4e:b6:56:9e:2f:68:c0:a6:e5:10:6a:7a:c1:
                    b7:fe:4e:89:12:9d:d1:3a:52:f0:d6:00:61:31:2c:
                    b1:1c:b0:c6:65:98:73:d2:38:20:ab:63:97:0e:da:
                    b6:4a:df:cc:05:48:ca:71:02:a0:05:3c:cd:1b:82:
                    f3:ee:a0:fc:cd:da:f6:c8:0e:38:01:29:ec:e7:bc:
                    3f:7b:c0:c2:cf:d1:3e:b4:b1:9c:8c:29:28:cc:fb:
                    de:43:61:d7:98:eb:d8:f4:d9:49:5c:02:73:54:07:
                    bd:49:27:c3:1b:b4:c3:95:11:b9:d8:49:4a:c8:92:
                    6d:4a:74:6f:87:5f:78:05:68:9c:8f:55:71:bf:c0:
                    f0:9a:98:06:72:80:0d:97:8a:ab:ab:08:74:d7:d8:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:5B:D0:BB:F5:05:A0:06:B2:DF:B3:59:22:CE:5A:85:B5:E1:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104180D857D811ECBB1E6ECD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:d2:57:0d:a7:72:2a:a3:9d:c6:c2:70:3e:09:4f:07:9a:
         cc:db:e7:75:96:97:bb:14:2e:b7:9e:7d:99:b2:08:84:61:42:
         41:1a:fa:f9:3f:7e:08:52:af:cd:fe:d1:fb:c1:44:5b:95:bb:
         98:1b:f0:32:67:ef:c2:c3:36:3b:78:7b:12:24:17:51:3f:c1:
         d1:07:d4:9f:66:70:67:24:0f:52:84:5f:82:06:60:bb:cb:2b:
         cc:a4:8f:ee:4e:38:0e:03:07:15:c8:07:78:52:5e:8a:23:c3:
         eb:24:97:bb:f8:44:cf:35:95:6d:a5:8c:13:8f:83:ed:de:97:
         08:89:db:87:f1:6f:0f:29:be:79:5a:96:61:4a:eb:f5:bc:4c:
         af:5e:29:e7:fb:98:e0:17:9e:80:7c:9d:b8:bd:6b:62:ea:73:
         e1:ce:75:e6:1f:8b:1b:ca:dd:9a:a0:88:57:2b:fa:e9:ef:0f:
         07:58:d9:16:33:a7:eb:55:ab:ad:2a:62:4d:bd:f6:d4:8c:50:
         15:d5:11:81:7b:e5:cd:ef:74:72:20:92:38:a7:68:90:58:06:
         b2:c3:78:26:30:f4:07:01:88:c3:77:89:a1:57:25:ab:2b:83:
         9b:40:2f:be:b8:70:b9:93:c1:20:22:26:2f:a5:f7:27:e4:8c:
         0b:aa:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org