Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C2F67666BB11ECA85515B75A40D577.roa
File:                     51C2F67666BB11ECA85515B75A40D577.roa (raw, json)
Hash identifier:          iYtfpUqkn2W09EhXxnmtSb7DA8qbORNkBccfS2zLP9I=
Subject key identifier:   0C:94:D7:99:E2:7A:FC:B5:F1:12:52:A4:EF:4C:C2:17:90:F0:AA:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       141C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C2F67666BB11ECA85515B75A40D577.roa
Signing time:             Mon 27 Dec 2021 02:18:46 +0000
ROA not before:           Mon 27 Dec 2021 02:18:41 +0000
ROA not after:            Fri 30 Dec 2022 02:18:41 +0000
asID:                     135391
IP address blocks:        154.208.142.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5148 (0x141c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 27 02:18:41 2021 GMT
            Not After : Dec 30 02:18:41 2022 GMT
        Subject: CN=61c92286-8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:9c:cd:a6:0a:5a:37:00:dc:89:b6:5a:1b:
                    f6:4c:ac:47:2a:33:b7:11:7d:e6:f8:cd:f7:4d:c3:
                    3a:5f:4f:88:83:bf:e1:08:ec:33:96:bb:b5:57:e5:
                    95:26:fa:dd:bb:99:ac:ab:67:2e:b3:a9:0c:b7:53:
                    d5:dd:77:4e:6c:71:8e:ab:91:4e:6c:69:3f:7a:e5:
                    e1:1d:2e:cc:d7:42:fb:2b:50:8a:55:b8:8b:6a:23:
                    ff:55:f6:d5:36:f7:a9:42:40:cd:3e:3e:04:e7:1a:
                    df:44:43:65:9c:dd:82:09:d8:fd:a6:6d:a0:c6:97:
                    1c:e3:3c:97:80:48:9d:52:44:38:9d:d6:b6:9d:44:
                    eb:ed:38:4b:8c:51:f3:ff:59:e1:63:78:2c:77:9e:
                    b6:2b:75:74:d6:9b:f4:61:12:33:f6:7d:b1:74:b2:
                    56:5d:ad:00:6d:d9:59:fa:5b:3d:29:67:69:f9:3d:
                    b6:0e:21:f1:0a:39:2e:af:b1:fa:6b:63:2c:30:90:
                    c6:a7:25:73:84:2d:b4:8d:4c:db:04:f3:ae:d2:b6:
                    f7:6b:4a:fb:e2:a9:79:c8:4e:e1:e9:1c:05:f8:92:
                    73:9e:e8:df:8f:f3:21:dc:8f:08:d4:23:74:56:d7:
                    d8:c0:d7:0d:3e:fc:f4:7c:bf:05:97:d9:bf:36:91:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:D7:99:E2:7A:FC:B5:F1:12:52:A4:EF:4C:C2:17:90:F0:AA:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51C2F67666BB11ECA85515B75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:6b:02:79:bf:e6:5b:e4:c5:47:e2:3f:a9:d7:fb:25:01:
         b2:cf:69:25:03:46:f7:18:fb:f9:3c:18:f1:4b:60:e6:e6:a2:
         e5:09:ca:75:3c:f1:63:18:ef:26:d9:90:16:07:a6:f2:1c:eb:
         ab:ed:c3:ad:b8:0b:b3:15:67:5a:d1:35:4b:3c:88:34:7b:50:
         9d:d0:f4:36:cc:7d:13:87:a9:11:4b:8f:02:c0:4d:0e:e3:ca:
         17:c9:80:f6:62:28:01:9c:db:23:8f:4f:29:cf:0b:cd:cc:e8:
         a1:9d:30:03:67:2e:57:6a:25:20:71:33:05:f4:57:57:0b:eb:
         82:52:b7:2d:e2:e3:78:4c:5f:c3:51:ac:35:2f:0c:3c:fc:b6:
         bd:e7:3c:57:d3:f7:b5:f2:57:9f:b7:e0:77:c6:0c:bd:3b:c9:
         54:0f:8f:5d:02:35:5a:7e:9e:8d:99:1c:15:fc:11:17:3b:da:
         0f:48:1d:1f:19:9c:ef:44:ad:c2:08:85:76:26:32:b4:4e:0e:
         50:5d:1d:60:9e:d8:cf:56:48:6b:dd:55:30:ab:b1:b1:b5:49:
         87:b7:d7:9b:b3:33:04:cc:d2:0f:6c:d8:ad:5a:12:8f:e3:6b:
         b1:4f:58:51:6e:49:b0:a8:9a:43:a6:db:dd:2d:41:69:17:41:
         42:b7:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org