Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0A8B1C488A11EC874CEF3ED8A014CE.roa
File:                     1A0A8B1C488A11EC874CEF3ED8A014CE.roa (raw, json)
Hash identifier:          A14R3hmFXN16yJgDlbN2dSg1IRbQ3h7pSp3oNAYMoRM=
Subject key identifier:   DF:F2:60:77:9D:63:72:32:52:F1:68:EB:87:48:B1:8D:D2:F3:B9:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0A8B1C488A11EC874CEF3ED8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:10:52 +0000
ROA not before:           Fri 19 Nov 2021 16:10:48 +0000
ROA not after:            Sat 19 Nov 2022 16:10:48 +0000
asID:                     139879
IP address blocks:        154.80.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3474 (0xd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:10:48 2021 GMT
            Not After : Nov 19 16:10:48 2022 GMT
        Subject: CN=61967b0c-94eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:fc:26:3a:2b:eb:5e:9d:16:23:ef:03:a6:
                    b1:26:95:e2:c8:43:ac:16:61:66:ae:72:93:a0:05:
                    33:08:75:ca:08:64:dd:0d:3e:35:40:49:7b:f9:94:
                    ff:d3:87:61:04:ce:1a:aa:5a:e8:77:88:3e:f8:10:
                    03:80:aa:6a:db:cf:47:34:b6:6a:ea:19:19:db:02:
                    bc:ed:42:65:2e:c7:9f:f8:01:05:ef:69:29:ce:07:
                    33:60:e7:ea:b4:82:a3:0f:58:90:d3:f7:c8:4a:29:
                    69:8c:b5:07:58:41:95:54:25:32:db:86:1e:64:c1:
                    88:bb:fa:fa:e8:ff:a9:b8:fe:7d:a8:a7:59:fe:f0:
                    9f:15:55:92:68:91:4e:49:8c:f7:6e:8c:9b:d3:ed:
                    39:19:3d:e2:7d:54:0f:46:4e:69:5e:35:e9:bd:b5:
                    3d:98:92:28:98:b2:80:65:dc:d1:45:79:f7:c0:d3:
                    65:25:1d:9a:4d:d2:e7:d6:59:d6:2e:f1:fc:70:fe:
                    93:50:15:8c:d7:4e:01:98:7d:21:cc:d4:79:99:b4:
                    a6:97:a3:07:7c:a1:94:8f:c7:89:73:98:7c:88:aa:
                    04:69:0c:dd:b0:59:d9:7a:3c:a5:55:22:a2:64:c0:
                    ff:6e:1a:a6:c9:75:6b:81:33:45:c7:81:4d:e3:ed:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:60:77:9D:63:72:32:52:F1:68:EB:87:48:B1:8D:D2:F3:B9:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0A8B1C488A11EC874CEF3ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:15:e0:ab:0c:c1:02:8b:a8:2b:65:02:f8:6a:2a:7c:13:
         5c:54:2f:3a:71:b1:71:fe:70:47:36:1f:28:fe:29:99:b6:6b:
         9b:f8:8e:f7:4f:19:a4:6e:66:2f:15:08:d9:fe:31:d8:a0:ba:
         86:75:ea:d9:2a:fd:81:42:c0:b1:0d:f7:13:74:2b:15:66:4b:
         b5:2b:46:89:16:d2:86:86:40:e1:aa:73:9b:9e:1c:c2:e9:c5:
         38:68:85:07:dc:24:a6:0e:bc:ad:4a:47:7d:28:dc:46:0e:d8:
         bf:46:4a:90:83:5f:6a:a2:ab:b1:1b:7b:01:33:d7:a4:91:b3:
         c2:61:fd:54:ea:9d:f5:8e:34:3b:f8:61:9e:ad:3e:12:21:3c:
         3d:7e:ed:ec:3a:de:0d:e9:28:a1:b5:c5:65:6b:66:6a:62:24:
         dd:84:47:8a:bf:d5:1f:b8:f9:ce:be:87:fa:76:23:da:38:f3:
         54:b0:5b:23:2f:f6:79:5e:28:d3:f2:58:79:1c:94:92:32:f8:
         e7:c5:ed:a8:dd:fa:da:94:24:e6:12:64:d0:81:7d:ee:72:65:
         66:58:9e:27:e0:ec:06:1c:06:ce:5e:65:2a:0c:36:b2:c3:f2:
         4f:0d:8f:00:1b:d1:ca:ef:6b:50:fc:cc:94:94:a3:00:e3:92:
         bf:5b:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org