Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75550DDEE58011EBB189ED2EF8AEA228.roa
File:                     75550DDEE58011EBB189ED2EF8AEA228.roa (raw, json)
Hash identifier:          1FCqFpuazkXLDDeLo8w6NB7nY/DM8KzTY42kQzlQ/N4=
Subject key identifier:   F7:C4:0B:F0:5D:17:2E:51:DF:E5:64:50:22:78:58:89:68:45:0B:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0802
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75550DDEE58011EBB189ED2EF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:22:25 +0000
ROA not before:           Thu 15 Jul 2021 15:22:21 +0000
ROA not after:            Sat 09 Jul 2022 15:22:21 +0000
asID:                     397630
IP address blocks:        154.202.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:22:21 2021 GMT
            Not After : Jul  9 15:22:21 2022 GMT
        Subject: CN=60f052b1-7a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:3a:0e:3a:5f:b2:c8:85:3e:94:3e:60:34:
                    25:98:a1:e8:e5:b2:97:a6:84:81:ef:36:9b:31:9d:
                    fb:ca:2e:bb:a8:ff:27:0a:37:b0:3b:af:56:88:38:
                    99:ff:d5:8f:2b:8c:ba:46:ea:cd:26:b0:15:16:11:
                    c1:48:11:dc:b3:39:3a:fe:c5:05:29:af:17:ab:81:
                    18:0d:23:97:76:24:eb:e7:47:5c:bf:ea:60:68:d0:
                    12:47:b2:da:f0:a8:69:99:3f:08:fd:64:c8:78:fe:
                    e7:25:76:a3:45:31:c5:63:73:0c:59:9e:38:6f:01:
                    ab:3f:8b:a7:2d:74:ba:cf:2e:80:3e:85:50:78:9c:
                    df:60:80:52:f0:e0:04:1d:f4:af:87:92:44:8b:f5:
                    5d:db:03:87:2b:c0:1b:1b:a2:76:ea:f7:d6:a9:49:
                    ee:b5:09:60:b0:71:e9:ba:9e:7b:78:df:55:01:64:
                    34:11:02:e5:b2:20:9e:17:ff:de:09:c3:66:0c:cd:
                    ca:10:b4:12:9a:1c:7e:81:17:db:19:8b:d3:cf:de:
                    c8:bf:33:79:e0:71:85:85:b0:be:bf:e4:d4:fb:72:
                    7f:1d:81:b9:fc:43:b3:23:60:c4:bf:66:4b:2a:56:
                    0b:bb:3d:85:b9:d1:62:27:8d:b1:19:3b:a3:d1:d9:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:0B:F0:5D:17:2E:51:DF:E5:64:50:22:78:58:89:68:45:0B:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75550DDEE58011EBB189ED2EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:49:48:74:14:4a:a6:df:18:1c:48:c3:60:22:8c:f8:17:
         54:30:c1:c0:d0:07:31:a9:51:ae:96:cb:a4:b6:10:8d:c1:27:
         37:9d:67:2f:d4:b6:58:86:7f:fa:f4:7e:3f:ee:dd:bf:d4:ea:
         7f:20:b0:a2:59:44:2c:36:44:58:76:72:3d:d4:e4:ca:62:3c:
         d9:02:a6:b4:16:e2:30:98:20:cc:b5:38:6b:93:60:f7:4a:7f:
         a1:73:ee:37:e8:7b:6d:02:ea:21:4c:d9:0b:bf:fb:62:ef:4e:
         fe:58:46:12:56:0c:54:4b:9c:1f:4b:51:d8:83:d0:d8:34:a3:
         ed:6d:d0:eb:aa:7a:83:08:dd:41:07:0b:d4:4c:1d:b9:06:f8:
         ef:77:62:2b:54:ed:61:73:6e:0e:95:e9:64:07:19:ee:49:15:
         c5:5b:19:4b:14:cf:e6:44:8d:72:08:e0:24:6d:6b:b9:f9:09:
         f9:d9:82:b2:7d:99:ad:57:99:7c:d8:75:8e:9f:e7:64:c9:8c:
         c4:8f:e3:65:28:66:42:0f:8c:88:13:51:be:47:9e:62:ad:b7:
         77:30:5a:6b:c4:1c:d3:61:19:f0:41:ff:1e:43:65:1d:4b:ef:
         d1:30:3f:c8:32:26:72:12:0d:bc:76:f2:66:be:b9:3a:4c:17:
         67:d9:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org