Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2359329657CF11EC831C26B35A40D577.roa
File:                     2359329657CF11EC831C26B35A40D577.roa (raw, json)
Hash identifier:          WVDegUtCwl2duaRVhf130UQCz8/z3+S1wfpWz/H19Zc=
Subject key identifier:   9F:1C:57:2A:FA:0E:29:00:51:C9:36:47:A7:61:8F:94:9C:71:B5:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       131F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2359329657CF11EC831C26B35A40D577.roa
Signing time:             Wed 08 Dec 2021 02:32:50 +0000
ROA not before:           Wed 08 Dec 2021 02:32:47 +0000
ROA not after:            Fri 30 Dec 2022 02:32:47 +0000
asID:                     9009
IP address blocks:        154.92.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4895 (0x131f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  8 02:32:47 2021 GMT
            Not After : Dec 30 02:32:47 2022 GMT
        Subject: CN=61b01952-1198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:9c:d8:63:0c:b6:7c:4f:ee:5a:93:be:64:
                    98:5c:2d:2e:62:88:8c:8b:f1:06:be:c9:d3:98:00:
                    60:b6:ed:1a:38:1b:81:94:fb:d7:fe:f4:ee:5b:30:
                    4a:da:1b:9e:28:20:75:db:09:37:4f:62:5d:63:7b:
                    6e:1a:b1:7e:39:92:01:b0:fa:80:7f:bd:a5:fe:e6:
                    f7:51:73:cd:e4:3e:37:d8:72:9f:32:96:f5:d3:1b:
                    16:90:72:2b:13:3f:c7:fb:9b:13:0e:3b:f1:38:0c:
                    ee:f2:dd:36:be:8d:3b:5d:df:79:86:7a:ca:0c:2f:
                    04:29:48:a8:b1:f9:e9:71:4d:46:35:94:f8:81:7a:
                    83:d0:a3:c6:97:e2:5e:4f:a5:e1:19:2a:64:d5:ad:
                    d8:c7:e5:69:01:c4:61:41:34:13:36:0a:2a:c2:6e:
                    b9:a8:24:b8:17:43:c7:ed:f3:42:7a:af:ea:6c:c7:
                    a8:7c:09:22:bc:43:d0:3c:fc:0d:fd:60:5d:10:85:
                    02:57:0b:0d:f6:7d:95:a1:f9:5b:b5:6d:fa:27:5d:
                    cb:30:24:bd:a0:8c:87:03:8d:21:e3:3c:91:af:06:
                    0b:ba:28:3a:b1:d2:fc:19:44:ff:27:70:a6:af:08:
                    eb:e1:0a:ad:54:b9:c8:05:c8:5c:67:84:a5:4c:e3:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1C:57:2A:FA:0E:29:00:51:C9:36:47:A7:61:8F:94:9C:71:B5:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2359329657CF11EC831C26B35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:7c:de:46:5a:97:cb:a9:09:77:86:f0:33:b3:52:52:eb:
         61:c3:89:a0:ee:88:7d:8c:8b:04:a8:e4:23:f3:7c:65:57:02:
         1c:1b:05:33:b2:50:93:3c:b0:05:84:e9:70:cf:af:04:f7:26:
         5d:3c:92:f0:a4:0a:b7:56:a5:f3:94:41:62:9c:1f:1e:dd:82:
         8f:66:6b:82:df:23:9e:91:40:83:21:4e:3a:ec:3b:96:bc:80:
         c4:25:31:2d:9e:52:19:e2:e7:2b:9d:ba:51:a7:43:7c:34:5c:
         64:3a:27:48:ec:4b:78:40:13:c6:56:ba:cc:89:a9:93:7b:8c:
         73:dd:b2:ce:ad:06:57:5d:a3:b3:aa:f4:62:60:67:57:cc:f3:
         a6:1b:16:57:07:81:f3:d8:d7:d3:88:65:5e:59:e0:5b:09:09:
         fd:43:6e:cf:d4:e4:90:f6:7a:70:c3:6f:58:b9:32:4d:88:6f:
         d6:c3:2a:68:9e:3e:eb:eb:f1:93:ef:6c:85:05:45:d9:44:9e:
         a5:79:06:dc:c6:9c:9b:43:9c:63:cd:6c:a5:27:8c:9c:a9:ba:
         69:ed:73:b8:6a:c5:c6:a5:a7:bc:8a:e9:a2:26:ff:9b:95:f7:
         81:73:f6:5f:3a:a4:04:1f:25:bd:16:82:14:55:92:0d:86:bc:
         9a:65:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org