Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3287AEDA125211ED87BF12DFF1222468.roa
File:                     3287AEDA125211ED87BF12DFF1222468.roa (raw, json)
Hash identifier:          BqZuPN0Zoa2MZbpM0vRI6qBUvMRDMyuCdCKNAuUlC/I=
Subject key identifier:   C9:F1:3D:A6:05:BF:D0:A3:D7:C3:FD:83:DA:67:EA:43:06:F4:16:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       17E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3287AEDA125211ED87BF12DFF1222468.roa
Signing time:             Tue 02 Aug 2022 10:59:36 +0000
ROA not before:           Tue 02 Aug 2022 10:59:33 +0000
ROA not after:            Wed 05 Jul 2023 10:59:33 +0000
asID:                     133861
IP address blocks:        154.197.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6114 (0x17e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  2 10:59:33 2022 GMT
            Not After : Jul  5 10:59:33 2023 GMT
        Subject: CN=62e90398-8dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:64:ca:8d:10:99:7d:3c:d2:12:35:f6:b2:
                    95:6e:ab:fb:a3:66:45:59:bc:75:6b:84:40:01:10:
                    29:c7:e3:7c:96:86:70:19:fe:7b:1f:77:68:d4:1a:
                    dc:2e:05:47:ca:3e:b7:a7:46:6e:a0:d9:5f:e2:11:
                    57:73:0c:c7:5e:aa:9d:e8:0d:67:a3:4e:fb:f3:f8:
                    e7:93:58:28:6e:2b:e6:ae:7c:38:56:bc:0f:f6:f3:
                    79:d3:bb:36:bb:1a:08:26:7e:5c:fb:4f:05:ab:0a:
                    d0:b6:f1:7d:07:d1:3e:89:1c:77:1b:91:1c:9c:b0:
                    eb:c9:54:44:e4:1e:e5:56:fe:59:47:7a:a8:ba:56:
                    72:d9:77:40:4b:e9:a3:8c:76:94:a5:bc:46:6a:bd:
                    92:59:cf:03:ad:08:da:da:04:b6:77:11:c1:f1:3e:
                    45:32:c0:aa:c1:ff:91:80:6b:89:fa:f9:86:d3:63:
                    f3:72:24:9f:b4:b0:0c:5b:b1:da:98:1f:a6:2d:ac:
                    17:ac:63:07:3f:81:b7:50:8f:5c:e1:1f:56:92:da:
                    60:ab:ad:d9:68:ca:e6:94:17:4d:eb:c2:c6:4b:d8:
                    f4:b2:68:89:c0:2d:8e:1b:10:18:c4:6c:f8:6e:f3:
                    cc:27:9a:c1:44:06:70:ba:41:ff:35:e9:57:a2:1d:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:3D:A6:05:BF:D0:A3:D7:C3:FD:83:DA:67:EA:43:06:F4:16:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3287AEDA125211ED87BF12DFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:47:58:fc:24:b9:1d:12:1b:ff:ec:2b:95:d3:2d:2b:2f:
         d1:74:c9:56:fd:69:bf:3a:bf:5d:02:d0:cf:ab:89:05:8a:7e:
         f2:3d:1d:4e:ee:03:3d:81:77:47:dd:c0:db:67:ad:a7:06:85:
         2a:e8:bb:f8:78:ef:bc:65:5e:ce:60:66:91:ec:48:ff:50:55:
         a0:8d:14:d1:48:22:0d:96:92:df:54:b0:8b:6b:af:5b:54:78:
         91:fd:3e:d3:8f:0c:03:6f:d9:0c:6e:cb:90:fe:30:46:00:c0:
         c9:a2:ff:bc:96:f4:9a:ca:d0:fa:7b:fd:f8:ec:86:05:cd:64:
         42:03:4e:03:8b:66:fc:f2:bf:dc:8b:e8:2e:32:a6:6b:47:8c:
         06:e7:14:f7:2e:32:58:1e:9e:6d:2c:19:47:e0:69:bf:d3:7a:
         f1:28:93:8b:2b:c8:e3:24:e0:a5:ab:5f:ef:31:39:5c:92:83:
         0f:a0:ef:ae:54:0d:1b:27:25:1a:b0:d5:57:a0:8a:22:39:ae:
         80:50:0f:a4:00:c4:b2:9e:dd:9b:85:5f:c7:15:dc:eb:3d:3a:
         75:02:0e:ce:88:4c:66:d1:b4:8f:e9:e4:40:4d:22:9d:22:ae:
         d4:df:41:50:bd:c7:3c:34:5f:76:92:45:f4:ae:75:24:ad:f9:
         e3:ac:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org