Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363EBAA257CF11EC963E67B35A40D577.roa
File:                     363EBAA257CF11EC963E67B35A40D577.roa (raw, json)
Hash identifier:          EnDGZRr4+THiciZtCjDuFv3hinxQfCBpn3ZdfB72PPM=
Subject key identifier:   6F:94:8B:E1:1A:B4:D1:8D:FD:8D:1B:AD:8F:5E:DD:E6:C2:80:ED:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1321
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363EBAA257CF11EC963E67B35A40D577.roa
Signing time:             Wed 08 Dec 2021 02:33:22 +0000
ROA not before:           Wed 08 Dec 2021 02:33:19 +0000
ROA not after:            Fri 30 Dec 2022 02:33:19 +0000
asID:                     9009
IP address blocks:        154.194.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4897 (0x1321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  8 02:33:19 2021 GMT
            Not After : Dec 30 02:33:19 2022 GMT
        Subject: CN=61b01972-7468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:9f:2c:d0:2b:32:2a:f0:0f:6f:b6:88:e2:
                    84:20:e7:83:c2:0a:92:47:34:9b:9a:9d:c2:5c:27:
                    ed:96:37:1f:7a:94:50:ca:66:e7:96:64:af:a9:b3:
                    b9:e8:48:1c:dd:03:8e:24:ff:dd:72:71:c9:6b:48:
                    86:9e:cb:af:cf:d0:cb:1b:2c:70:b9:c8:15:49:76:
                    f3:df:5c:0b:e3:88:15:61:ac:c6:83:3e:40:bb:79:
                    85:2b:e1:94:a2:12:ec:14:42:b5:95:9a:2a:4b:1c:
                    9b:eb:04:88:1d:30:20:ba:9f:ad:00:73:d0:74:f6:
                    45:58:7b:73:90:08:6a:fe:cf:30:9a:93:f7:f7:15:
                    73:0f:29:0e:a5:b3:37:fe:ba:f2:39:5b:07:54:b2:
                    f5:f0:b0:63:b8:44:bc:c8:aa:62:be:53:88:94:61:
                    c3:61:8e:7d:5b:dc:57:96:27:b7:09:69:3c:45:36:
                    5f:82:df:df:38:22:24:8e:e9:e9:4d:89:5b:8c:62:
                    d0:d1:88:f8:8c:4a:49:0c:4e:df:34:39:16:04:1e:
                    3c:0a:b0:3d:87:c1:42:53:55:38:21:98:97:ea:38:
                    1b:5f:3f:57:07:ec:e1:71:91:99:8f:15:9c:3a:99:
                    5e:79:3c:36:93:b5:d4:0b:e1:dd:94:82:eb:6b:d8:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:8B:E1:1A:B4:D1:8D:FD:8D:1B:AD:8F:5E:DD:E6:C2:80:ED:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363EBAA257CF11EC963E67B35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:dd:3f:b7:6e:ef:bc:fa:ea:ef:e7:0a:aa:0a:36:dd:13:
         d2:ac:8e:f6:d6:d6:28:92:5f:82:d2:77:36:31:07:58:0b:82:
         00:69:fa:f4:06:32:c2:4f:df:d3:b3:94:02:f5:b1:73:93:4d:
         e3:a5:a7:11:7c:42:45:f8:50:76:8f:15:38:32:cb:29:11:e9:
         44:d1:15:8c:88:bb:b2:5b:85:1f:df:23:36:0a:18:9d:99:6d:
         25:b9:16:9e:e7:1e:f7:8d:d5:a6:81:58:d4:b3:b1:b3:29:17:
         eb:9f:90:90:d2:74:66:40:3c:6b:8d:f1:b3:de:77:7b:00:eb:
         fb:08:f4:6a:16:f1:1f:f2:83:f8:64:aa:3c:b4:86:c2:b4:e1:
         ed:59:32:bf:21:6e:7a:03:02:dc:c1:20:e2:d0:84:5c:34:f2:
         1a:93:19:50:3d:8e:a8:03:ce:05:f2:22:6e:19:f1:b6:90:cb:
         d0:6c:3a:a4:83:15:ae:eb:10:7e:68:28:d4:ea:cc:8f:55:02:
         e4:c4:5e:e0:2f:45:99:b7:ac:5a:c4:47:0c:3b:f2:b1:0f:0e:
         eb:55:31:87:8b:a4:44:92:bc:3b:90:11:3d:11:f3:69:30:a0:
         f0:ad:1c:d4:41:54:b4:c1:46:1c:53:39:ae:a3:1d:0a:e6:bb:
         98:b2:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org