Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799719A8C47A11ECBED92381F1222468.roa
File:                     799719A8C47A11ECBED92381F1222468.roa (raw, json)
Hash identifier:          c6YMU/56DMskc8Fa6X4bLBanKjzSo5w17ovmQm0bCdE=
Subject key identifier:   FE:1D:24:45:4F:7E:89:B8:5A:48:48:C4:7B:C2:D8:FB:51:6F:BF:66
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       15FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799719A8C47A11ECBED92381F1222468.roa
Signing time:             Mon 25 Apr 2022 09:31:25 +0000
ROA not before:           Mon 25 Apr 2022 09:31:21 +0000
ROA not after:            Sun 30 Apr 2023 09:31:21 +0000
asID:                     135097
IP address blocks:        154.205.44.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5628 (0x15fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 25 09:31:21 2022 GMT
            Not After : Apr 30 09:31:21 2023 GMT
        Subject: CN=62666a6d-714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:1c:38:e4:07:39:8e:de:c9:12:00:f8:74:
                    80:17:22:ab:50:cb:fd:2d:d1:5e:d7:39:02:04:c6:
                    10:61:86:3f:9a:7d:d5:e4:fe:67:b4:6b:e4:6b:ae:
                    39:04:13:f2:c4:94:3c:49:b8:ac:aa:11:ed:7e:31:
                    63:85:69:0a:46:bc:7b:5f:06:ad:c2:a7:bc:d1:69:
                    87:dc:24:a4:10:50:0c:85:f3:28:22:a2:d8:90:e3:
                    15:f9:96:5c:e5:28:89:a0:f3:06:98:15:ec:5e:03:
                    73:7e:b4:05:48:08:41:d4:53:a3:88:c5:81:68:aa:
                    13:ee:12:ac:be:77:f9:88:1a:2d:c9:34:d0:0a:7f:
                    5d:c0:42:fd:0e:5c:51:f4:15:7d:fd:f1:ea:cf:4a:
                    d3:72:8c:2f:0c:25:f9:97:0d:0c:33:db:89:5a:99:
                    cb:c5:73:2f:64:fc:42:86:40:a9:8a:b6:f3:cb:f3:
                    ef:32:4d:a7:23:db:e9:30:7a:de:be:55:be:54:42:
                    14:9f:6a:50:59:b6:e9:ec:fc:8f:9b:37:5d:be:ec:
                    ed:27:c6:00:4a:c3:ca:8f:01:ac:47:9a:aa:45:67:
                    b0:9c:ea:6f:1e:71:b5:63:7c:ff:5a:5f:57:83:1f:
                    31:62:7f:b4:2b:0f:a4:4f:b0:b2:f0:c7:3d:9b:1d:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1D:24:45:4F:7E:89:B8:5A:48:48:C4:7B:C2:D8:FB:51:6F:BF:66
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799719A8C47A11ECBED92381F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:20:73:4e:f1:c2:20:2c:e1:1c:c5:69:2d:ed:7f:c4:c0:48:
         73:0d:9d:84:be:b6:3d:0c:3a:0f:62:f9:b6:35:a6:47:77:a5:
         22:75:aa:35:83:75:9c:38:95:ea:03:f4:32:65:90:0f:da:40:
         bb:58:d0:00:84:05:bf:e7:cf:08:0e:fe:dd:d6:ea:88:b6:24:
         91:c9:f3:73:f1:d5:42:15:91:ea:d7:cf:a5:26:ad:86:5a:cb:
         84:bf:a1:29:7c:94:7b:58:7d:c1:5f:b9:d9:0d:4c:ec:bf:d1:
         49:3e:ee:71:5c:79:2b:7c:90:aa:d4:8d:c2:70:ba:17:bc:f9:
         d8:d2:f6:a2:93:c5:af:9d:39:1a:c1:43:af:a0:f5:98:e5:30:
         eb:e4:66:b5:fe:53:c8:cc:35:f1:23:df:ca:33:9b:84:0d:9b:
         d3:2c:e1:68:56:d7:03:3a:34:4b:e6:6b:21:28:3f:c4:22:92:
         60:2c:1d:34:53:c5:27:26:cd:d6:8e:d8:82:30:8d:4d:90:60:
         78:43:9a:ec:81:af:3c:cd:83:a0:7d:6a:79:9f:46:54:b9:af:
         4a:a4:9f:06:ce:44:7e:df:f1:63:ad:1b:b2:e0:56:3d:46:2b:
         de:e6:59:fa:0b:fd:ba:e1:67:14:bf:b7:57:45:58:95:08:91:
         20:23:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org