Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10811E0C488611EC9DEE0636D8A014CE.roa
File:                     10811E0C488611EC9DEE0636D8A014CE.roa (raw, json)
Hash identifier:          4Woa9ImgSn73Bg3NERgtgbDc+ram6tShdqUgo96ltCo=
Subject key identifier:   AB:E0:8B:F8:E5:BF:6D:49:77:80:CC:7E:16:AE:F1:DA:8E:32:50:A1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10811E0C488611EC9DEE0636D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:41:58 +0000
ROA not before:           Fri 19 Nov 2021 15:41:55 +0000
ROA not after:            Sat 19 Nov 2022 15:41:55 +0000
asID:                     139879
IP address blocks:        154.80.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 15:41:55 2021 GMT
            Not After : Nov 19 15:41:55 2022 GMT
        Subject: CN=61967446-298c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:63:ba:4e:7f:cb:40:89:e5:64:85:36:39:
                    36:49:fd:f4:ee:04:96:8a:8f:a9:2a:b8:dd:b2:ab:
                    c7:23:81:31:ea:2d:86:6b:59:fa:a8:2c:ce:6c:68:
                    65:d8:cf:f8:cf:45:df:33:db:4d:de:1b:df:f4:c6:
                    4f:c9:af:74:75:ed:b1:1f:12:3e:ef:62:a1:4c:c9:
                    42:77:07:2f:cb:e0:54:09:bb:db:1e:87:64:06:ef:
                    a2:8f:47:25:42:9b:1b:a5:80:d5:4b:19:76:1c:4a:
                    a7:10:11:af:a0:2c:14:7b:59:df:9e:a3:48:ba:e9:
                    3d:26:c5:62:cc:3e:d9:dd:70:01:e1:fd:29:14:39:
                    bb:ea:3f:e3:cc:d4:7e:a2:af:d6:b1:1e:e4:8f:8a:
                    a3:77:9b:89:9d:23:c4:e9:96:af:47:29:7c:0f:cf:
                    5c:9b:56:1c:cc:59:ad:64:84:bd:af:10:98:f0:39:
                    f1:43:de:a0:b4:46:2c:60:1d:0b:34:01:19:60:7d:
                    b6:6a:45:6b:c5:53:17:8a:23:f9:e7:b6:fd:20:c0:
                    f4:1f:6b:37:66:e0:93:eb:c3:fb:b1:30:c8:5f:ff:
                    44:79:19:ef:44:fa:99:e3:2d:2b:3d:f3:ab:2e:db:
                    b4:22:61:20:f0:bf:27:16:34:1f:2b:09:39:fc:0a:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E0:8B:F8:E5:BF:6D:49:77:80:CC:7E:16:AE:F1:DA:8E:32:50:A1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10811E0C488611EC9DEE0636D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:1e:fa:4d:41:bf:00:f5:c2:c0:30:07:52:17:f0:22:51:
         f9:68:58:df:63:78:d0:85:01:3b:95:f3:71:63:82:0a:70:6f:
         3c:0d:ee:0b:5a:3f:98:f0:58:5a:81:fa:18:71:a1:a9:43:b7:
         51:f9:ac:fc:2b:8c:f4:33:d9:a7:14:b6:3e:2f:68:17:78:5d:
         23:82:95:18:8e:aa:fd:7c:c2:54:db:93:f1:ad:72:e5:6a:65:
         ba:05:7b:80:eb:4d:8f:6e:e5:0e:16:4c:93:49:7d:c5:7b:b4:
         8d:23:3c:60:a7:b4:af:6f:61:0b:a8:29:81:0e:93:b0:0d:8a:
         87:dd:61:b4:bd:6a:3f:0c:46:b9:84:5a:f5:e9:06:da:d2:99:
         c7:52:49:f6:c1:30:56:7f:8e:b8:f8:71:71:db:18:b3:84:b6:
         11:d5:19:cb:be:fb:29:b0:6b:bd:50:7f:02:53:1a:65:48:ba:
         51:32:41:a5:a8:9a:1f:98:77:87:06:22:e9:24:c4:3d:5d:d2:
         2c:9b:22:30:d6:a5:00:ec:ce:af:01:a6:42:ad:25:ac:64:41:
         6b:fc:f2:59:63:2a:21:6b:35:05:1b:67:68:fc:63:1a:d4:20:
         96:a1:44:09:e1:ac:27:fa:d5:f1:53:1d:5e:9d:c8:7d:d2:ed:
         80:26:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org