Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4561241C3B0811EDB6F7C498F1222468.roa
File:                     4561241C3B0811EDB6F7C498F1222468.roa (raw, json)
Hash identifier:          lR8ivflTNexYN2Uzl87NT++NECNbdt0vqBYRimqcEJo=
Subject key identifier:   5C:66:75:57:40:35:A3:0B:2B:09:A2:81:FB:F4:31:84:7E:7A:15:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       18FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4561241C3B0811EDB6F7C498F1222468.roa
Signing time:             Fri 23 Sep 2022 06:23:43 +0000
ROA not before:           Fri 23 Sep 2022 06:23:39 +0000
ROA not after:            Fri 30 Dec 2022 06:23:39 +0000
asID:                     328608
IP address blocks:        154.219.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6398 (0x18fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 23 06:23:39 2022 GMT
            Not After : Dec 30 06:23:39 2022 GMT
        Subject: CN=632d50ef-19ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:bb:65:c3:b5:fa:db:1d:00:86:b1:04:63:
                    ba:18:40:b9:9e:0e:82:b8:5b:b9:89:e2:32:09:34:
                    3a:75:98:78:93:fb:40:20:c4:ce:4c:ed:d2:36:56:
                    d7:d6:99:ed:55:b4:c4:03:d8:18:62:4f:0a:9f:e9:
                    47:86:99:3d:b8:5f:03:e5:b8:81:00:d3:46:a5:b7:
                    93:05:60:53:ea:03:24:fe:14:8c:fc:0a:fe:7c:eb:
                    6c:3d:a6:01:63:ff:87:47:c9:45:55:0b:f5:2e:13:
                    59:14:ab:8c:eb:2e:d6:45:fd:ba:a9:e9:f3:43:e2:
                    66:0d:9b:d0:a8:e1:d7:b4:af:19:ea:82:aa:a2:ae:
                    7f:6e:51:4b:0a:b7:f8:3d:0c:89:2e:82:87:76:b2:
                    70:65:3f:a3:bb:33:12:05:63:71:62:c7:0c:e7:5f:
                    aa:39:a3:58:d3:12:7f:a4:29:0c:ad:12:27:b9:61:
                    8f:4c:16:45:8b:4e:c0:a8:bf:d6:f4:1c:ed:5c:f4:
                    d7:fb:a0:53:cc:d8:b0:e3:4a:f5:99:b1:93:a5:a2:
                    68:c3:ef:9b:a3:12:cb:d2:02:04:f0:0c:0c:5d:f5:
                    30:a5:0d:80:ed:83:4b:ad:17:ff:48:a2:61:dd:c9:
                    2c:a2:7b:21:8b:62:4a:ec:53:6c:b7:06:c6:38:80:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:75:57:40:35:A3:0B:2B:09:A2:81:FB:F4:31:84:7E:7A:15:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4561241C3B0811EDB6F7C498F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:00:22:f0:a6:1e:b3:16:60:29:f2:31:c9:c1:cc:3d:6f:d1:
         76:2c:2e:27:2a:73:50:fc:b6:09:2d:e0:d5:0a:1d:62:7b:b4:
         12:91:36:a5:24:33:a8:a7:7e:c0:76:eb:46:81:bd:eb:57:6f:
         c6:97:7f:8b:e3:a8:4c:d6:76:d3:97:10:ea:48:d8:1d:70:49:
         19:bf:76:3c:32:ae:92:bd:29:92:52:56:47:36:c4:03:fe:0a:
         08:f2:24:ad:c2:47:4c:f3:2a:b4:b8:54:d3:1e:d9:1f:ad:cf:
         6f:45:76:8a:f6:b3:70:ba:f6:cc:35:e7:fe:43:0e:45:12:04:
         ae:7d:14:d0:26:8c:48:5b:7c:c0:cb:48:b7:40:80:99:7c:8d:
         1d:1a:ab:45:cb:6c:cc:0b:ea:d1:cb:f2:97:59:eb:ed:06:cc:
         ee:a5:e0:2d:90:7e:b9:a1:42:0f:c0:11:30:50:08:a5:41:b3:
         de:ff:0f:50:71:bd:d7:88:7f:b0:cb:67:b2:f9:76:e0:c9:5d:
         bb:29:fe:f1:b3:51:15:7a:7f:09:7c:ee:15:b5:35:71:f6:8f:
         ce:29:97:a5:89:a6:8d:3e:8b:e0:e3:63:0a:bb:b9:9a:3c:5b:
         92:23:5a:ca:6c:9f:8a:cc:8d:66:5c:69:3b:b6:66:03:14:38:
         1b:dd:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org