Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
File:                     57C3CBF6F20011ECBA934CADF1222468.roa (raw, json)
Hash identifier:          gcPFteVPrKxWFuqCAAH7oJDvlUC3yeqaFoUg88ntXis=
Subject key identifier:   40:CD:6B:F4:0B:0F:1D:E0:83:26:DF:90:1B:E9:B4:F5:A5:D6:88:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       16F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
Signing time:             Wed 22 Jun 2022 07:53:03 +0000
ROA not before:           Wed 22 Jun 2022 07:52:59 +0000
ROA not after:            Sat 03 Jun 2023 07:52:59 +0000
asID:                     137901
IP address blocks:        154.201.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5872 (0x16f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 07:52:59 2022 GMT
            Not After : Jun  3 07:52:59 2023 GMT
        Subject: CN=62b2ca5f-2d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:7e:27:c4:e8:0b:5d:8e:0f:9f:d8:70:10:
                    43:e9:c3:fd:42:d9:96:5b:74:f6:eb:1e:a6:70:82:
                    6b:3a:c2:00:54:87:49:b3:2b:75:b2:d7:b3:41:1f:
                    8a:c0:f8:8f:72:ec:c5:f3:bb:0e:2c:f1:ea:b3:a6:
                    f0:21:29:47:06:9a:ed:a0:46:ab:d8:48:5a:6f:74:
                    05:25:86:d1:2d:eb:4e:d7:41:57:92:05:1e:d0:87:
                    08:7f:9f:52:93:f0:be:4e:67:19:9a:96:7f:1c:e0:
                    f8:21:1a:a6:7b:40:98:4b:a9:cb:a2:b1:07:0d:58:
                    73:83:16:5e:a0:16:8c:2a:99:d5:91:1d:4e:61:e6:
                    1a:6e:1e:ff:56:ea:31:57:47:91:65:99:38:2e:b0:
                    20:f6:54:6d:51:3f:e2:60:8e:2a:bd:9c:15:b8:0a:
                    9c:2a:e6:aa:d4:e2:81:4d:6f:e2:a2:c5:85:6c:b7:
                    3c:3f:b0:cf:e7:5c:6b:18:29:e3:25:8a:0f:ec:30:
                    9c:f7:75:b7:a6:86:ab:25:8f:9b:72:a2:0b:bb:7b:
                    d9:57:f5:2a:c4:b4:3d:d3:92:fa:f1:7f:58:09:3b:
                    9a:bf:24:0e:c6:d0:84:ea:4b:08:71:a9:84:f4:5b:
                    c2:9b:05:44:30:3a:6d:76:87:f0:ae:12:8e:cc:96:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:6B:F4:0B:0F:1D:E0:83:26:DF:90:1B:E9:B4:F5:A5:D6:88:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:73:ba:e3:a7:f8:8f:eb:86:7f:18:53:ce:a8:02:c5:cc:
         77:49:5f:98:c8:bc:48:cc:2b:3f:92:e6:82:4b:2b:28:72:5d:
         5b:57:bc:99:e3:c6:22:58:ab:2d:26:d8:69:8e:85:da:da:80:
         1b:67:15:63:9a:38:95:1a:8b:de:9d:52:a2:18:15:4a:9e:e2:
         cb:1d:32:ce:06:db:68:19:88:da:e4:69:c2:ab:3f:34:00:0a:
         22:c4:0c:8b:c9:5e:2a:74:c8:78:84:f6:b8:8f:21:33:69:06:
         50:c0:22:4c:11:07:38:cb:ce:61:81:9b:e8:81:95:5f:50:3c:
         81:2f:27:7b:aa:ac:19:a0:ad:42:b5:84:e7:2b:a7:6f:eb:ae:
         91:b2:95:da:d8:b9:2d:11:12:ce:74:7f:15:e9:a1:f7:48:b1:
         f6:91:7d:95:b6:0a:78:f2:60:b1:4e:c4:76:06:96:1f:cb:b5:
         b7:97:c5:b3:89:40:ac:24:52:4d:d7:eb:bd:ee:02:f9:40:e7:
         ed:10:0a:e4:95:11:fd:68:3d:d9:77:66:1e:4d:09:3c:c8:7b:
         e8:27:c2:e9:16:1a:5b:8c:24:a7:c0:a5:2a:13:05:2f:45:24:
         ca:0e:3d:e0:e9:2f:bf:bb:a0:83:43:b3:3d:6b:bf:b2:6a:77:
         1e:33:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org