Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231B30488911ECAE1EC13CD8A014CE.roa
File:                     1D231B30488911ECAE1EC13CD8A014CE.roa (raw, json)
Hash identifier:          vNcBh/IFvGz6xzHqqW40VIfpBZdUaY8RtC7vWJ2eZqM=
Subject key identifier:   CF:C5:1F:9F:4D:D1:19:09:81:68:51:6B:88:54:1B:13:4B:49:48:4C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231B30488911ECAE1EC13CD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:03:48 +0000
ROA not before:           Fri 19 Nov 2021 16:03:45 +0000
ROA not after:            Sat 19 Nov 2022 16:03:45 +0000
asID:                     139879
IP address blocks:        154.80.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:03:45 2021 GMT
            Not After : Nov 19 16:03:45 2022 GMT
        Subject: CN=61967964-8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:2d:0f:ef:2b:a3:40:a0:9a:26:60:59:d1:
                    ed:a7:3d:59:1c:56:a7:6b:64:b1:f7:d5:9a:20:13:
                    14:87:2e:8a:90:d2:9b:76:37:31:25:b4:48:eb:d2:
                    92:cc:49:a9:d0:ec:37:25:3c:76:69:df:4b:de:e6:
                    4d:c6:6d:3f:3c:07:51:05:eb:e4:f8:be:ff:7c:c3:
                    cd:6b:18:c7:0f:c4:99:c8:c2:2a:e0:cb:37:b6:c7:
                    59:f6:f2:5b:78:6c:75:ea:bc:66:1e:dd:19:10:03:
                    38:1e:e7:67:7e:da:9d:66:5a:0b:21:56:ac:b8:54:
                    99:d4:10:e0:ea:38:83:ea:e7:67:f8:2c:69:b0:9d:
                    13:43:32:16:cf:79:1d:cb:15:18:35:af:02:b5:5f:
                    51:fe:a2:79:a1:20:c7:e2:6f:b9:8a:6c:86:2b:62:
                    15:18:5a:37:00:dd:99:f8:a5:05:41:32:bc:5e:cf:
                    28:c4:11:b7:54:2f:3b:f1:ca:c7:c0:f7:a3:dd:7d:
                    f9:ad:75:d3:67:c6:b0:6a:b2:b3:ee:56:0c:ba:da:
                    9f:d6:f2:c8:c6:ac:db:82:0c:9e:02:78:56:cb:21:
                    a7:a7:42:9f:da:eb:0f:21:6a:b5:6f:b0:be:0d:54:
                    dc:8a:5c:fd:67:88:5d:87:32:9b:a8:d1:dc:5f:c8:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C5:1F:9F:4D:D1:19:09:81:68:51:6B:88:54:1B:13:4B:49:48:4C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231B30488911ECAE1EC13CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:a7:96:81:03:55:5f:7b:34:7a:e4:51:3e:cc:23:45:95:
         51:09:f9:fb:26:03:9e:30:fa:a7:e1:43:ad:34:fa:59:6d:6e:
         cf:6c:9c:ee:9d:09:ad:64:be:04:21:95:2f:5d:33:c6:43:8b:
         4a:f8:0e:06:08:cb:f2:5e:73:51:15:7a:1f:68:8c:56:8f:a0:
         8e:79:13:71:8e:c2:e5:a4:4e:a7:16:a3:d6:7b:ad:81:47:3b:
         9b:8b:c8:fd:2c:9e:06:88:8c:4b:d5:19:f2:0c:c1:69:8b:46:
         77:4c:03:d1:12:46:f9:bf:7e:58:2c:18:29:27:3e:c5:58:ed:
         cc:0c:a3:1d:9f:38:32:05:af:5e:70:1f:20:d8:81:c4:5d:d6:
         96:9e:3a:da:03:c5:db:1c:83:63:9b:c7:e0:ca:0e:a5:c7:4c:
         40:cb:50:b7:8c:fb:f0:3f:ce:29:92:b1:07:aa:ca:d6:db:f8:
         12:ce:0d:10:86:aa:3b:73:fe:3a:c4:c9:b1:ff:0d:25:a5:38:
         c1:4a:a5:ed:ec:2d:7d:f5:9f:cc:3d:e2:ea:f6:c9:5e:92:b2:
         10:0b:fa:f6:07:12:9a:07:a6:65:75:c5:95:99:f5:79:36:d7:
         aa:31:d4:ba:51:ef:b7:23:d2:42:ad:e9:09:39:dc:64:c3:b4:
         1e:73:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org