Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/405C8F745BB611EC838271C25A40D577.roa
File:                     405C8F745BB611EC838271C25A40D577.roa (raw, json)
Hash identifier:          oCyjrJS5NO7DaipGY09kBM7X7QlIu5i+8vGa37KD95M=
Subject key identifier:   7A:35:0D:2B:88:9B:CE:0F:B9:6C:4D:E6:23:F3:C8:B9:AF:CB:36:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       13A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/405C8F745BB611EC838271C25A40D577.roa
Signing time:             Mon 13 Dec 2021 01:44:46 +0000
ROA not before:           Mon 13 Dec 2021 01:44:43 +0000
ROA not after:            Fri 30 Dec 2022 01:44:43 +0000
asID:                     133201
IP address blocks:        154.204.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5031 (0x13a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 13 01:44:43 2021 GMT
            Not After : Dec 30 01:44:43 2022 GMT
        Subject: CN=61b6a58e-a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:1a:3f:17:a5:42:4c:95:09:40:16:c2:b7:
                    17:17:87:b4:15:f6:e9:24:ef:a8:a6:3c:6f:fa:a0:
                    af:2f:c7:29:ec:82:7c:cf:3c:e0:7f:4d:81:a8:47:
                    8d:f4:19:75:78:4d:87:5a:d6:d7:1e:90:76:8c:c7:
                    2f:d1:d7:ce:9e:9a:19:e8:e0:65:24:94:2d:f6:88:
                    92:f1:d4:0e:51:70:b6:44:79:66:a7:ea:7e:9f:5a:
                    70:ea:fa:a9:b8:17:43:01:94:fc:26:c5:47:73:41:
                    58:d9:29:13:94:3c:b2:9b:69:0a:ce:03:6b:82:86:
                    e6:49:05:68:6c:16:a5:fc:85:48:15:f4:99:d1:6e:
                    d0:1e:96:d6:84:48:a3:02:94:ee:08:be:05:f6:a6:
                    8f:4c:c5:c8:c7:2c:ff:9a:f2:fc:4e:b7:7a:03:05:
                    12:81:ec:f9:88:44:2e:9c:ed:b9:f0:82:3a:51:03:
                    f7:ba:b7:4b:67:fb:1f:21:08:93:be:53:00:4a:2d:
                    33:56:ef:a7:4e:4e:98:a7:b9:90:ce:d4:80:b9:68:
                    86:12:88:fa:a3:28:87:a9:21:ce:fa:9b:66:38:00:
                    ec:48:18:08:43:89:c0:4d:06:25:24:86:90:38:53:
                    d1:63:a1:09:55:e2:b3:c2:2d:49:e1:cc:54:50:04:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:0D:2B:88:9B:CE:0F:B9:6C:4D:E6:23:F3:C8:B9:AF:CB:36:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/405C8F745BB611EC838271C25A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:ae:1a:98:2c:34:1f:ff:08:d8:53:c4:85:a2:b7:4c:34:f6:
         84:ef:ea:d6:5d:24:64:db:e7:6c:49:52:d3:e9:c8:a8:70:9e:
         68:af:c3:2b:ed:a4:8d:52:b8:be:4e:e1:b5:43:45:03:bd:0a:
         c6:e8:8f:15:25:81:73:15:bf:19:75:9a:ca:ce:28:d5:84:76:
         76:fb:77:dd:90:32:78:7a:5d:fe:9f:9e:64:ab:e9:de:56:f3:
         1b:b0:f8:95:bc:c5:48:c4:65:f5:c3:da:ee:67:39:ae:c2:98:
         a8:31:29:7b:75:d6:b2:4c:5f:ac:5f:fc:bc:60:5c:eb:4a:cf:
         dd:33:61:08:84:a7:b5:9e:04:0a:51:95:fd:2f:5f:61:74:68:
         4e:45:d6:6f:23:e0:86:bd:88:31:37:df:60:de:9a:31:6e:46:
         d9:0e:24:41:1e:dd:68:b5:f9:3d:80:d6:bc:c8:35:d3:4e:8f:
         aa:85:6a:f8:56:91:d1:dd:13:03:7b:59:31:4b:5a:bc:9d:a3:
         9d:b7:94:f4:0e:37:12:ce:59:b9:b2:9c:02:87:10:cf:03:2e:
         fe:0a:4d:02:12:10:b7:2f:41:d8:e9:d0:88:df:8f:7a:1b:df:
         3b:0a:41:5a:3d:5b:32:f1:eb:7e:6d:86:20:91:9c:87:fb:45:
         33:32:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org