Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
File:                     678D12FE488711ECAE07EE38D8A014CE.roa (raw, json)
Hash identifier:          ivCLOXMBubsFSTbEoRpC4QAy3VnUHiVHMF674anEWv0=
Subject key identifier:   23:8A:23:AB:00:AA:B2:41:25:37:C9:A5:C4:60:46:AC:D1:0A:95:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:51:34 +0000
ROA not before:           Fri 19 Nov 2021 15:51:30 +0000
ROA not after:            Sat 19 Nov 2022 15:51:30 +0000
asID:                     139879
IP address blocks:        154.80.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 15:51:30 2021 GMT
            Not After : Nov 19 15:51:30 2022 GMT
        Subject: CN=61967686-364a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:f6:b8:72:7d:01:d3:2e:48:45:34:ce:7e:
                    1b:b7:1a:82:11:39:b6:06:03:ad:f8:d1:69:72:95:
                    26:6d:e0:68:b2:11:e1:97:3a:03:87:a8:c2:54:7b:
                    1a:bf:5f:39:f7:2c:fa:e2:8f:f1:9d:16:bb:49:e4:
                    26:3f:5e:df:6d:4d:6e:ca:38:81:d4:87:47:86:6c:
                    68:a7:0f:25:a7:a7:7e:72:76:f4:73:62:b6:6f:5c:
                    70:ca:4e:e6:e4:d3:3c:39:62:32:28:9f:89:5b:9f:
                    5e:eb:b4:a4:d8:eb:21:44:77:c4:bb:04:c2:81:a3:
                    a1:2f:af:31:48:aa:a0:ff:28:64:e9:4c:32:56:7d:
                    a9:36:83:f1:21:75:33:9a:a9:59:f3:90:95:dc:09:
                    cc:9d:e2:93:6a:a9:29:df:74:e8:4c:d9:6b:0a:5c:
                    b1:1b:40:d7:66:96:57:4e:06:57:67:bc:87:e5:0d:
                    cc:15:e7:87:2e:e7:eb:fa:f7:99:d6:5e:cc:d5:02:
                    31:52:fd:76:4d:01:89:17:27:bd:52:69:98:03:2d:
                    25:f1:20:4d:ab:ed:96:a1:48:72:c9:6a:b8:68:d3:
                    54:12:07:4b:7f:a4:51:f7:e8:6a:00:6a:7d:1e:3d:
                    a6:24:9d:4e:dd:ab:e4:cc:c5:58:98:26:55:34:8a:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8A:23:AB:00:AA:B2:41:25:37:C9:A5:C4:60:46:AC:D1:0A:95:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:d7:e5:29:b3:53:71:3e:f0:bb:2e:8b:82:46:8a:7e:11:
         a0:2a:6a:4a:bb:ec:11:d4:0d:27:6f:da:23:39:3f:7d:87:58:
         2c:28:a9:d2:6d:31:40:21:3f:eb:48:7f:fc:66:83:6a:11:19:
         97:d5:89:80:22:c8:a2:e9:c4:5e:3f:9a:54:f5:87:21:95:ab:
         6a:5c:3c:be:6a:79:12:42:f8:d1:95:4f:34:be:24:f4:28:05:
         46:bf:6e:61:3a:0c:04:c1:3e:ef:67:02:9c:77:a4:ef:9b:ce:
         78:ed:66:77:8e:50:60:16:6b:57:ee:e0:49:23:57:00:d9:90:
         05:43:5a:b9:27:95:4b:a8:c3:4d:6e:f9:19:87:a3:c0:bc:0b:
         a8:7d:38:8f:1f:12:96:75:10:09:e3:cd:35:fc:2b:7a:0c:98:
         01:01:8d:b8:84:d4:2d:a0:b3:13:e7:77:b1:f0:a4:69:7f:f4:
         91:3f:09:8e:c5:66:7c:3b:74:03:2a:f8:b8:c6:b2:d8:9e:b3:
         59:b2:c0:8c:13:8e:20:61:e6:e6:b4:fc:fe:1f:ba:02:7f:3a:
         34:9d:a3:74:b1:5f:f4:ef:c4:e5:0e:47:30:36:24:13:dc:e3:
         c9:5e:52:2d:69:d3:cf:ac:09:c6:02:05:8c:36:cc:46:70:78:
         79:d4:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org