Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
File:                     4312AA88E58111EBA1F95230F8AEA228.roa (raw, json)
Hash identifier:          pAVyPjgJk2bw7NXP+XsXMvsgGYNOU5IoTwogwVTQbZQ=
Subject key identifier:   A2:29:4D:A0:E6:6A:8B:BE:5E:C3:F2:13:2C:B9:06:24:91:1C:72:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       081A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:28:10 +0000
ROA not before:           Thu 15 Jul 2021 15:28:05 +0000
ROA not after:            Sat 09 Jul 2022 15:28:05 +0000
asID:                     397630
IP address blocks:        154.84.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:28:05 2021 GMT
            Not After : Jul  9 15:28:05 2022 GMT
        Subject: CN=60f0540a-ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:83:ea:23:6b:f2:b0:69:2e:7d:19:1c:95:
                    6e:af:c3:ab:68:5d:d0:70:f7:c8:ae:21:35:c5:2c:
                    fe:42:63:03:fb:7b:5f:5d:ed:df:71:2a:4a:b1:74:
                    be:f6:90:9b:d6:ce:82:c4:9f:e3:19:fb:fb:5f:1d:
                    c3:15:84:14:c2:12:3a:c7:03:3b:fb:a6:15:f1:65:
                    2a:24:aa:a2:d2:06:fa:21:38:1d:46:6d:ce:6b:0f:
                    b3:bd:c6:35:7e:d3:d9:1e:18:d7:1b:18:fe:b6:55:
                    14:68:a8:20:84:7e:9f:72:85:3a:bd:65:ff:54:da:
                    58:c6:c4:1c:7e:2b:04:52:3c:19:a7:cc:c0:fa:7b:
                    ac:01:ca:6d:5d:33:1a:05:9a:40:e8:b3:27:ce:94:
                    3b:b7:d7:17:3a:0c:cc:ef:ba:1e:2e:81:09:b5:d0:
                    9e:e6:22:b1:d9:eb:48:68:1a:e0:16:66:d9:be:70:
                    6e:f6:69:0c:f1:48:44:a0:ad:e2:53:77:2f:9e:96:
                    51:c8:bf:6f:24:59:22:b5:64:c5:33:35:85:b7:df:
                    8a:3f:4f:d2:24:14:28:9f:29:5e:97:e6:96:a1:0b:
                    24:61:e1:ee:eb:dc:48:52:63:f9:10:37:ad:0d:c2:
                    ef:fc:a7:e9:4f:f4:32:eb:14:95:40:f4:8b:89:e3:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:4D:A0:E6:6A:8B:BE:5E:C3:F2:13:2C:B9:06:24:91:1C:72:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:4f:73:dd:f9:9d:ad:c4:24:83:90:49:9c:c8:9b:ea:0a:99:
         7a:d1:05:8e:b8:3e:8d:51:98:ab:15:fe:9f:a1:62:ae:0c:46:
         73:d7:e1:9b:a1:fc:a6:8d:80:40:90:b7:a2:86:12:0f:01:6d:
         e1:46:92:70:ac:8a:a4:26:99:f2:ca:c0:15:19:3a:d0:06:2f:
         1e:08:4f:24:53:7e:3b:e7:b3:06:f0:e9:6c:6c:91:9b:04:15:
         63:5f:ea:c3:ed:87:b3:8b:dd:a3:34:df:32:26:d9:24:e2:55:
         ca:9c:03:bf:77:de:71:22:67:8a:99:3a:72:9e:c4:55:35:fa:
         9f:9b:52:16:59:cb:f5:67:57:c5:b0:b1:2f:6c:22:15:78:3d:
         ec:d2:2e:c3:18:c0:70:d6:91:bd:05:0a:c9:25:7d:8c:dc:08:
         51:4e:40:5d:af:a7:39:2d:85:e8:e5:6e:6e:f5:d7:47:b0:75:
         42:6a:ce:d9:28:36:ac:99:9e:d0:91:1d:79:3e:af:b1:4d:1e:
         4d:a7:1e:2a:aa:0a:a6:da:00:af:f0:53:3d:84:a8:61:45:dd:
         ae:1f:e4:d3:6a:96:3e:cf:65:02:1c:9a:56:16:72:52:14:2b:
         5e:5b:4a:61:8c:9a:aa:7c:a8:73:df:ea:ed:c6:1b:6f:03:8d:
         87:db:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org