Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B7E71EE58111EBBBB40030F8AEA228.roa
File:                     11B7E71EE58111EBBBB40030F8AEA228.roa (raw, json)
Hash identifier:          N3demaQQ5S/N7beyMvGqPq1zTDGRQuY9rDQ+KN3COWU=
Subject key identifier:   E7:7C:48:28:6C:FC:F5:E5:87:AB:29:2D:73:E1:06:F3:79:1B:5B:71
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0814
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B7E71EE58111EBBBB40030F8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:26:47 +0000
ROA not before:           Thu 15 Jul 2021 15:26:43 +0000
ROA not after:            Sat 09 Jul 2022 15:26:43 +0000
asID:                     397630
IP address blocks:        154.83.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:26:43 2021 GMT
            Not After : Jul  9 15:26:43 2022 GMT
        Subject: CN=60f053b7-2549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:b9:65:ba:9e:87:49:ee:2f:74:bd:2a:09:
                    57:6a:ad:1a:e2:87:a7:7e:a5:00:47:56:ca:94:60:
                    08:b1:42:51:40:e5:ef:a7:dc:35:0f:7c:69:5b:c0:
                    c9:60:8b:00:ff:46:88:88:d5:c0:a6:83:80:3f:e7:
                    f2:91:8d:a8:a6:ab:a3:49:1f:63:d4:03:dd:b2:16:
                    6d:ad:cd:be:67:26:bd:6a:af:37:bb:cf:34:c8:fe:
                    6a:5a:15:c8:d2:3e:e1:2a:a2:56:8c:32:ea:9f:f5:
                    51:02:4b:ef:1d:b0:17:bf:6b:0e:27:31:cc:e9:20:
                    49:99:da:57:59:4f:89:3b:da:26:e6:78:71:00:c2:
                    2c:76:63:f4:c1:95:62:d0:db:d3:e4:af:b9:46:0e:
                    81:57:8c:2d:e8:96:84:46:4f:4c:f3:23:31:e0:60:
                    56:1e:05:5c:a2:44:df:94:40:70:34:e9:7a:b2:de:
                    1f:d9:c9:68:64:4f:4a:45:e9:4f:0f:8d:9e:4d:75:
                    95:13:c2:99:d7:9a:b9:6b:4d:32:fb:98:9d:cb:60:
                    9d:11:f2:a1:3e:f1:0d:0e:ae:28:c0:19:d5:18:29:
                    6f:ea:27:41:29:91:a5:5b:2f:af:14:57:79:7d:b2:
                    cb:17:8a:36:c2:ed:a8:90:f3:92:22:24:89:23:a0:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7C:48:28:6C:FC:F5:E5:87:AB:29:2D:73:E1:06:F3:79:1B:5B:71
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B7E71EE58111EBBBB40030F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:72:14:09:f6:fe:30:f4:77:a1:78:f9:fe:75:63:90:55:
         4e:9f:8d:86:87:e0:fb:9f:fb:5a:29:09:fd:57:eb:18:2a:59:
         ba:5a:96:ed:69:eb:dd:3f:4a:e6:84:0e:09:a2:01:6e:5d:0f:
         dc:61:6f:a2:1a:ff:e1:bf:d2:19:f5:be:14:13:1f:7b:26:2a:
         23:4a:92:a2:f2:b0:ea:fe:b2:28:88:ba:01:20:f9:9f:f9:bd:
         64:7d:20:0e:ef:db:ed:c1:7a:4d:ec:cf:45:e2:5f:f2:5c:e8:
         c5:36:02:50:bc:57:d9:b2:b4:c8:f6:40:45:a6:ab:e6:1a:ce:
         3d:20:0b:fd:3e:e3:18:23:12:19:85:95:c8:b1:d0:49:6f:66:
         b9:34:63:6b:46:e6:cc:3c:40:ad:9b:c1:be:0e:13:fb:c7:f4:
         55:6d:7f:f2:45:66:3d:dd:2d:48:42:e6:99:80:56:30:e8:e0:
         f0:6e:13:e0:fc:b4:1f:34:be:01:44:f3:c6:0e:7c:46:0e:84:
         11:33:b8:47:e1:1b:63:20:ca:5f:85:69:5b:9b:60:fd:21:97:
         fa:bb:d7:23:74:29:f9:5a:88:b5:e6:cf:8b:a1:87:04:7a:8f:
         19:ce:55:e3:f3:bc:7f:cd:b3:79:04:b6:7a:1c:c1:3e:94:dd:
         fb:10:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org