Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59744418488611EC97A4BB36D8A014CE.roa
File:                     59744418488611EC97A4BB36D8A014CE.roa (raw, json)
Hash identifier:          jhzTsRVgg6RQoKJiNCtqgebRU0sWwd+oQU0dxsGJDW4=
Subject key identifier:   C5:A2:A6:92:83:9B:BF:11:46:77:17:FA:5F:20:05:1A:D6:F3:09:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59744418488611EC97A4BB36D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:44:01 +0000
ROA not before:           Fri 19 Nov 2021 15:43:57 +0000
ROA not after:            Sat 19 Nov 2022 15:43:57 +0000
asID:                     139879
IP address blocks:        154.80.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 15:43:57 2021 GMT
            Not After : Nov 19 15:43:57 2022 GMT
        Subject: CN=619674c1-89ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:10:5e:eb:c3:bb:1b:84:54:35:5a:91:0b:
                    ce:30:7a:95:28:d8:d7:56:84:bb:38:44:33:e9:fe:
                    a8:81:ab:f5:86:6c:39:24:aa:0a:e4:e3:a7:d6:2f:
                    5e:02:3f:12:a8:b0:b2:c6:f3:6a:bb:4b:9e:e4:4c:
                    69:67:7f:ac:7f:b7:d5:b2:af:b3:5f:ce:a0:ad:fa:
                    fc:07:7b:bd:eb:2c:38:14:a8:22:ad:3b:f4:ef:26:
                    13:21:d2:cf:81:aa:7f:40:12:fb:53:34:34:e9:b0:
                    8e:43:16:72:9a:76:b0:10:9a:e4:76:ff:7e:09:da:
                    66:47:c3:c3:8b:f0:bd:9d:14:fd:2b:3d:50:60:78:
                    72:1b:bd:9f:49:ee:a9:13:8c:11:da:be:98:f5:bf:
                    0d:95:a9:7b:20:35:05:7a:90:11:c4:18:81:af:22:
                    a6:85:21:ca:36:f6:b1:30:72:5d:5c:2b:14:45:71:
                    0e:64:12:4f:1a:16:5e:fe:da:5e:4c:4c:e5:9f:af:
                    60:5d:22:62:3e:00:92:23:dd:29:c0:65:31:bc:8b:
                    31:c4:35:fc:a9:55:a5:08:c5:d2:d2:74:e2:7d:67:
                    08:c4:44:49:0f:4b:2b:d2:d2:b7:ca:5c:16:ac:28:
                    81:a6:cc:27:d9:88:9c:74:82:60:e3:a4:78:37:79:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:A6:92:83:9B:BF:11:46:77:17:FA:5F:20:05:1A:D6:F3:09:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59744418488611EC97A4BB36D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:2f:35:5f:8d:c1:9d:30:a9:82:6d:31:e4:3c:7d:8c:dd:
         30:83:3d:a1:33:61:29:23:5e:c8:8e:a9:fb:33:7a:e7:9b:e0:
         d9:5a:38:cf:7b:a6:17:5f:05:9d:6b:88:50:8c:f1:35:e9:0a:
         94:2e:e1:80:7b:2f:08:17:f1:f1:c5:b5:64:e2:57:8f:b0:2a:
         32:5d:16:57:48:8c:ab:5d:d6:18:5e:2f:e5:2b:c3:16:ae:42:
         3c:e4:ab:22:77:b7:2c:a4:02:41:41:e5:9d:08:00:f6:98:cb:
         bf:b0:e2:91:5f:07:46:d8:6e:a0:69:e7:c2:8d:c1:74:f0:b7:
         34:23:b6:53:46:44:ca:70:45:73:9c:84:e8:91:d2:76:d9:9d:
         cc:0f:ef:de:6d:4c:6b:0c:29:3d:44:c4:76:e8:f0:fb:3c:b2:
         7e:0a:4f:f2:bc:35:82:4b:55:74:b5:89:ae:79:31:26:c3:64:
         b3:7f:e2:77:35:dd:b8:3c:a7:14:3f:ee:85:8f:e4:0f:b4:44:
         b0:96:a7:98:04:4d:0b:a1:e8:45:d4:17:72:9e:d0:1a:78:4d:
         c0:3f:5c:a1:41:11:c6:9f:3d:f1:9c:76:80:ba:52:fe:34:e2:
         ee:99:64:8b:d2:c4:b6:f1:3f:f0:9b:3b:4d:39:85:3c:38:3c:
         69:3f:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org