Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE22C804C3E11EC84E91320D8A014CE.roa
File:                     5CE22C804C3E11EC84E91320D8A014CE.roa (raw, json)
Hash identifier:          HvU6p4mUjyazOU2mQwwXuOjQlEpq+6gIW9OG4MCOQ6w=
Subject key identifier:   3D:E7:5A:50:18:C2:91:03:2D:01:74:22:88:4C:40:CB:04:19:35:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1264
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE22C804C3E11EC84E91320D8A014CE.roa
Signing time:             Tue 23 Nov 2021 09:18:47 +0000
ROA not before:           Tue 23 Nov 2021 09:18:44 +0000
ROA not after:            Wed 23 Nov 2022 09:18:44 +0000
asID:                     54600
IP address blocks:        154.210.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4708 (0x1264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 23 09:18:44 2021 GMT
            Not After : Nov 23 09:18:44 2022 GMT
        Subject: CN=619cb1f7-ada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:75:4a:c1:13:53:75:43:18:f4:c4:8a:00:
                    ad:93:26:d3:0b:4b:8d:97:a5:75:16:e7:f3:37:8d:
                    fa:49:10:d2:f2:72:4f:d1:90:da:49:58:95:ef:1b:
                    6d:9a:f1:2e:3f:29:64:4b:84:e5:22:a8:a7:37:9f:
                    ab:9e:62:fc:e8:46:a9:2a:fc:f2:51:e4:41:cf:cc:
                    6f:c0:a4:fc:5f:6b:dc:2a:ae:ed:48:32:69:ce:28:
                    a1:fa:0d:77:9c:b5:57:d7:fa:93:67:44:29:58:cb:
                    81:a7:a1:fb:2d:23:cb:dc:39:4f:d0:12:23:dd:81:
                    93:3a:85:7b:15:d1:4b:f6:90:2d:e8:e4:5f:40:23:
                    14:eb:41:4b:19:57:36:0b:10:c8:2e:03:c3:be:62:
                    47:54:aa:ee:32:34:db:21:33:ca:46:5d:fa:72:74:
                    e6:f5:73:bf:bf:79:c4:ac:71:77:5a:10:53:e9:1f:
                    25:2f:23:15:99:d8:64:32:57:3c:09:b3:e4:de:f5:
                    10:ee:c8:e2:44:03:64:ac:45:3e:e4:7f:e4:46:d9:
                    14:26:4a:87:10:20:c8:42:40:2d:fc:7f:a9:a6:d2:
                    32:64:ad:48:7b:b1:a6:ba:c4:47:d9:a6:fc:2a:f5:
                    94:13:ef:dc:de:59:38:33:43:95:b9:08:7d:f1:de:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:5A:50:18:C2:91:03:2D:01:74:22:88:4C:40:CB:04:19:35:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE22C804C3E11EC84E91320D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:69:c5:42:da:5c:89:13:f2:08:ad:c0:97:14:f1:ac:2f:ed:
         bb:56:16:51:ac:df:c9:77:b4:41:51:3a:2b:75:54:8d:7d:0e:
         4f:8a:2b:09:66:bd:c2:2b:8c:a4:2e:c3:98:8d:b5:48:78:09:
         cb:fc:fa:f5:20:46:85:cb:be:9b:b7:4f:d7:1f:31:1f:f2:07:
         1e:c0:3b:ab:ff:4b:2f:ee:37:55:06:78:03:dd:cf:9b:63:e9:
         1a:8e:07:22:82:ba:78:91:2c:08:f8:d3:fd:8e:10:9b:30:cd:
         4c:cb:8d:31:b8:7e:4e:ad:9e:95:82:21:25:05:7d:a8:cf:92:
         05:8b:a7:9a:ba:c3:f1:74:dc:e0:48:71:84:b2:f0:22:eb:14:
         65:68:10:58:33:7d:22:55:e6:3d:21:02:3e:a0:28:90:cb:31:
         e7:36:e4:75:24:53:09:91:e6:e0:97:72:8f:41:07:7b:be:be:
         be:91:f9:13:e6:94:b6:e3:f2:48:ef:98:93:e9:bf:f1:f9:91:
         67:64:17:a6:98:2c:1c:e0:17:3a:4f:56:ae:58:a8:20:01:93:
         d4:94:5b:8c:aa:65:65:69:5f:2f:c3:d0:5a:d6:2e:2b:3c:83:
         27:d8:14:26:6f:bf:3a:9d:23:d9:96:64:8d:16:6e:dc:6f:a4:
         ee:11:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org