Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41907B00488611EC98E48536D8A014CE.roa
File:                     41907B00488611EC98E48536D8A014CE.roa (raw, json)
Hash identifier:          F0w79o/WJQEEmWEPHzZVJrV0bwmYqhnDeOGS3JEVgJs=
Subject key identifier:   39:97:DC:BA:BD:85:16:D5:94:8F:01:AC:9F:98:E6:8A:B9:3F:F4:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41907B00488611EC98E48536D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:43:21 +0000
ROA not before:           Fri 19 Nov 2021 15:43:17 +0000
ROA not after:            Sat 19 Nov 2022 15:43:17 +0000
asID:                     139879
IP address blocks:        154.80.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 15:43:17 2021 GMT
            Not After : Nov 19 15:43:17 2022 GMT
        Subject: CN=61967499-449f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:af:40:82:dd:14:b7:75:44:c8:6a:99:26:
                    4f:b1:3d:3f:20:4a:8c:db:13:2c:00:8b:ae:c5:19:
                    d1:5a:c2:a9:f3:56:50:37:c8:27:83:cb:63:44:60:
                    5e:fe:18:bc:2e:7f:4a:6f:6c:2b:3e:b7:c0:7b:5b:
                    1f:ed:f8:e7:30:ae:e5:4b:54:a9:ea:c0:cb:19:41:
                    b3:db:7e:d1:d8:97:a5:c6:99:0b:59:94:fb:eb:fb:
                    b7:5e:a3:78:39:a7:e1:50:05:11:51:cf:28:10:c2:
                    aa:cb:46:e4:25:2e:04:37:37:2d:bf:6d:77:4e:15:
                    60:23:60:e1:7f:81:83:fd:b8:26:12:c4:1d:f1:15:
                    1d:5d:96:b9:60:66:d8:2c:48:bc:92:0f:b4:05:0b:
                    b4:a0:fa:9d:bd:3f:6c:4b:19:ba:76:fc:28:95:27:
                    c5:ae:20:c1:ed:b1:11:9a:ae:ff:28:84:68:45:51:
                    ad:86:8f:10:59:ef:a5:75:8a:e6:d6:47:b4:7d:91:
                    0a:52:bc:f2:18:b2:1c:66:02:bf:f7:6e:bf:10:13:
                    64:9d:d8:77:d9:5e:93:39:cf:b3:23:b4:97:df:a2:
                    ac:9f:f9:f8:a4:11:48:80:29:8e:a7:ad:1a:9c:cf:
                    f3:87:76:01:78:4c:04:f2:76:dd:ed:bb:63:de:36:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:97:DC:BA:BD:85:16:D5:94:8F:01:AC:9F:98:E6:8A:B9:3F:F4:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41907B00488611EC98E48536D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:24:d2:1d:5b:16:ea:c4:39:ff:96:e4:cf:ed:82:88:d4:
         ea:db:1a:91:fe:77:fc:39:80:a7:3f:be:01:5d:39:d1:1d:dc:
         e7:26:82:b4:03:85:a6:7d:ee:b4:26:82:40:cf:f1:1a:c5:52:
         ae:1f:7e:bb:45:70:fd:e2:43:a5:82:3e:b0:df:53:03:e3:77:
         b4:ee:6e:bc:a4:22:90:29:8d:3e:ea:43:8d:b0:66:46:54:13:
         d8:ab:18:2a:4d:42:58:1a:af:db:a5:6d:7a:5c:43:28:2d:98:
         d2:6f:7b:16:89:7c:e6:e2:f2:b7:db:62:bd:04:47:63:4a:86:
         3b:ed:9e:9c:6e:df:1a:d0:16:6e:a9:bb:74:ae:47:2b:46:a7:
         94:41:d4:66:a9:5d:97:b5:b3:24:50:71:62:c5:28:ab:e7:9c:
         30:15:1f:b1:a4:86:98:d7:5e:fa:e7:c7:f5:bc:f5:80:0b:c3:
         d3:74:da:04:56:26:6b:27:1f:62:be:50:db:aa:98:58:78:a5:
         49:bf:f4:0a:7e:19:f6:3f:a4:70:1c:ac:95:7e:da:66:8a:ff:
         81:a9:e8:0c:a3:e2:a2:44:a4:7e:92:7c:7b:10:20:83:73:24:
         9a:60:79:4e:ca:0c:0f:23:8a:05:bd:ff:84:29:b4:de:0a:9d:
         8e:cb:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org