Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4422628A0E5011ED89A05AA5F1222468.roa
File:                     4422628A0E5011ED89A05AA5F1222468.roa (raw, json)
Hash identifier:          8LdouRlZZGr0rtQJrHM1jUXx01t5y04u/1MmPGpB8LU=
Subject key identifier:   27:72:25:F2:5C:F9:24:47:E6:0B:02:27:E6:E5:A6:4B:FD:4C:26:66
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       179C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4422628A0E5011ED89A05AA5F1222468.roa
Signing time:             Thu 28 Jul 2022 08:35:42 +0000
ROA not before:           Thu 28 Jul 2022 08:35:38 +0000
ROA not after:            Mon 15 May 2023 08:35:38 +0000
asID:                     397630
IP address blocks:        154.201.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6044 (0x179c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 28 08:35:38 2022 GMT
            Not After : May 15 08:35:38 2023 GMT
        Subject: CN=62e24a5e-f6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:3b:55:69:29:d0:5d:f0:f5:55:38:6a:7a:
                    86:f7:ff:77:9b:fb:19:4e:0e:cc:bd:55:47:30:4e:
                    15:22:c8:8d:db:36:57:40:78:3e:8c:d9:09:e8:b1:
                    ee:97:e9:de:d3:58:1f:54:47:48:b7:30:d2:d1:52:
                    b6:41:19:28:1d:cb:d8:3d:6e:9d:a2:e8:09:32:1a:
                    04:7b:fb:53:a0:4f:1e:f2:7b:5f:85:21:05:33:7d:
                    2f:64:39:81:d4:52:7e:81:97:1f:3c:11:05:67:94:
                    95:3f:7a:6c:86:dd:86:40:72:97:5d:f2:89:1e:f4:
                    d3:b3:d2:6c:36:6f:98:e4:2f:f1:fb:c2:28:be:f4:
                    3b:12:35:7b:f8:72:f1:35:d8:88:e2:3e:a3:7e:41:
                    47:5a:67:ea:85:58:68:cd:73:d0:8e:3d:10:2d:10:
                    b2:f0:f3:ee:3d:61:4b:e4:db:1a:c5:bf:6a:8c:77:
                    a8:fc:0f:98:b7:21:bd:e6:65:cb:4b:a9:88:07:c4:
                    eb:50:f3:d7:42:32:51:67:4a:69:c8:1b:a9:f5:32:
                    47:ce:48:6a:8a:01:1c:0a:e8:93:2d:9a:f7:23:27:
                    da:83:f3:d3:18:cb:78:28:b0:06:89:ba:48:71:6f:
                    76:3c:5c:06:e2:35:b7:e0:1b:01:64:b9:60:fe:72:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:25:F2:5C:F9:24:47:E6:0B:02:27:E6:E5:A6:4B:FD:4C:26:66
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4422628A0E5011ED89A05AA5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:77:86:73:c1:3f:8c:2b:57:e7:44:e1:73:46:db:27:9b:1e:
         9a:dd:2b:4b:3f:e3:14:af:2e:d6:51:56:30:21:77:f6:ad:d7:
         36:31:7c:ec:3a:a0:05:05:e9:6b:61:a6:54:16:95:56:fe:b0:
         a6:24:75:37:2f:0a:0a:41:ac:b2:ac:75:aa:4b:0e:9d:f5:3e:
         ea:5c:ec:03:9d:88:d2:4f:da:18:25:b8:a1:8f:45:47:50:36:
         0d:cc:63:e5:ca:35:c2:73:39:93:85:df:91:5f:bc:d1:2c:e2:
         7f:62:8b:c0:dc:b7:f8:03:b4:5f:25:28:22:18:8f:25:1c:f4:
         bd:99:2f:38:0a:aa:4b:54:66:34:40:3a:fa:70:0a:5a:56:0b:
         a2:c5:d8:01:f2:e7:6e:ba:89:15:bd:69:24:8f:22:bd:1f:28:
         a5:0a:d8:8d:16:93:7c:83:12:98:aa:ac:4a:7f:03:72:d4:ff:
         2d:b5:07:31:46:ab:4e:de:cd:d0:eb:86:3c:b7:e7:44:3f:7f:
         1f:e0:00:df:ba:5d:b4:0a:4a:00:cf:d7:1c:a1:de:80:82:e2:
         a6:e7:c6:3b:42:0c:a9:ae:28:44:83:30:e2:da:b5:a7:e0:81:
         fe:6f:d4:18:44:8c:9b:99:ca:0c:33:70:8d:03:fe:4e:06:1d:
         23:56:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org