Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745A750488A11ECB932623FD8A014CE.roa
File:                     5745A750488A11ECB932623FD8A014CE.roa (raw, json)
Hash identifier:          NEXFhVQlBeujBtqZseRw9A59VpRAExLONggW3MJGUDM=
Subject key identifier:   7B:30:26:16:9D:E1:5D:CB:9E:52:82:D8:17:BD:3E:6E:C9:B3:A0:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745A750488A11ECB932623FD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:12:35 +0000
ROA not before:           Fri 19 Nov 2021 16:12:32 +0000
ROA not after:            Sat 19 Nov 2022 16:12:32 +0000
asID:                     139879
IP address blocks:        154.80.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3478 (0xd96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:12:32 2021 GMT
            Not After : Nov 19 16:12:32 2022 GMT
        Subject: CN=61967b73-8afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:59:b0:13:02:84:e1:50:f7:38:59:a4:d2:
                    95:7e:1b:d2:44:c5:90:00:e5:f2:97:9a:c1:68:10:
                    f2:23:db:ed:9c:30:df:4e:a8:af:fe:5e:9e:40:cc:
                    04:76:da:be:98:ea:d1:72:a6:20:6f:ae:36:4f:e3:
                    23:db:0e:c6:a0:9b:72:8d:0d:7e:70:c3:89:b8:4a:
                    32:5e:f2:e8:08:5a:44:50:f3:55:a6:da:4e:b9:95:
                    e1:18:9e:6b:b0:38:d8:ba:0c:63:99:4e:8b:74:03:
                    cd:03:51:5e:8e:f7:cd:d3:fd:a4:43:e9:6d:db:a6:
                    a3:2a:aa:6c:64:59:e1:b2:d0:32:95:67:d3:23:02:
                    2f:a1:fd:56:cc:af:00:21:9a:44:4b:56:eb:b6:fa:
                    1d:0a:7b:35:d5:e5:33:5c:91:1b:4a:d2:20:8f:ba:
                    ca:ea:be:b3:d1:44:57:33:3a:0f:5f:54:35:31:7b:
                    d9:12:8b:8e:e3:37:d0:4f:a4:f6:eb:7b:2e:13:7e:
                    8c:a8:80:f3:ca:b0:dc:b0:15:79:68:1c:9f:ba:2d:
                    fa:d2:ba:f4:03:46:58:75:23:bc:79:0f:cf:08:a3:
                    e1:a1:a3:03:49:7d:dc:46:af:72:45:08:ed:34:ea:
                    a7:af:1d:d3:75:1b:87:b0:b7:3e:cc:d8:6d:69:3e:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:26:16:9D:E1:5D:CB:9E:52:82:D8:17:BD:3E:6E:C9:B3:A0:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745A750488A11ECB932623FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:12:9a:10:97:41:aa:c0:4a:77:92:0d:2f:c2:d6:70:23:db:
         83:dc:5f:32:89:af:ca:41:1e:0e:e3:45:db:cc:24:07:20:17:
         a3:1a:fc:9f:5d:55:fc:d9:5e:c8:84:c9:da:b2:e5:1e:46:b5:
         eb:a6:ff:60:8f:b9:de:dd:3f:4d:36:48:82:c8:2c:b5:cd:fe:
         61:ce:88:da:52:fb:c6:94:3b:9d:c1:d4:d3:f4:e2:0b:7a:f3:
         18:c3:d5:9c:fb:f0:af:15:45:22:be:f4:65:49:69:e4:30:bf:
         a4:67:cd:07:25:29:0d:a5:57:d1:5b:e8:9e:bc:d0:fe:c2:0e:
         7c:69:b6:52:3f:e4:0e:f1:8f:73:be:31:9d:ff:02:b0:31:5c:
         06:20:ce:39:c4:61:39:7b:52:6e:9c:34:cd:9e:0a:28:13:8f:
         47:1a:28:67:72:83:3a:07:33:b2:ed:37:b9:79:4d:22:a8:c3:
         e9:af:23:85:83:e0:94:be:2d:5f:fe:e7:b5:a9:46:4e:48:fc:
         0a:07:ba:8b:f0:6c:4b:0f:c8:28:64:fe:41:25:4a:94:62:e2:
         80:84:f2:ca:68:f8:9e:06:7d:44:92:8b:00:d2:ce:3f:c9:ce:
         28:49:99:58:00:84:ab:32:0b:01:7e:99:f9:46:e6:13:5b:3e:
         d1:ab:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org