Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D906D90630711EC843363D75A40D577.roa
File:                     7D906D90630711EC843363D75A40D577.roa (raw, json)
Hash identifier:          tCyWDCaaNN6w3vEqS8uxrfHNo84w4dhgOPlwhd9cyd4=
Subject key identifier:   34:74:3C:64:9C:CB:29:F5:CB:58:3B:28:B0:06:92:BF:A5:08:D9:09
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1413
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D906D90630711EC843363D75A40D577.roa
Signing time:             Wed 22 Dec 2021 09:13:57 +0000
ROA not before:           Wed 22 Dec 2021 09:13:52 +0000
ROA not after:            Fri 30 Dec 2022 09:13:52 +0000
asID:                     46071
IP address blocks:        154.84.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5139 (0x1413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 09:13:52 2021 GMT
            Not After : Dec 30 09:13:52 2022 GMT
        Subject: CN=61c2ec54-9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:77:51:f6:b8:6f:19:a8:0c:41:75:ae:c0:
                    63:95:fa:89:9f:eb:b4:07:44:a8:a2:a1:5a:16:cf:
                    15:63:86:6f:9a:89:a8:36:d4:58:ca:07:72:e2:3d:
                    54:51:c4:f6:18:5b:a6:fd:c1:0a:43:09:68:bd:a0:
                    27:97:de:14:1a:fd:56:e9:2a:8a:4d:ae:4e:7a:65:
                    80:49:68:e4:12:1f:c9:c4:cc:69:6a:ab:88:c9:48:
                    55:ca:5a:65:eb:03:5f:09:93:08:f0:a9:7f:4e:c1:
                    6c:62:de:0c:2a:20:68:5b:37:d2:25:56:20:e5:f3:
                    1c:3f:34:cf:e3:13:83:42:27:42:74:6e:a9:58:12:
                    0b:8f:cc:66:69:3f:d0:cf:c5:80:19:31:25:11:a0:
                    25:e9:bb:ed:a1:ec:1b:14:43:7c:11:af:5a:cc:7c:
                    5e:15:6b:8e:ee:34:05:73:21:e5:7d:b1:a9:12:d7:
                    ca:b0:82:db:90:eb:39:52:f8:01:e1:31:c5:aa:51:
                    07:cd:95:35:00:ca:37:1a:03:c0:c8:84:a6:8d:de:
                    c9:d2:c3:96:ee:92:b3:f0:cb:e7:82:ec:cf:38:6a:
                    ff:ee:f1:c1:65:28:ca:39:b1:e7:a8:81:e0:dc:11:
                    8e:fb:8b:a8:45:e8:61:d7:51:cd:36:b1:26:9d:58:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:3C:64:9C:CB:29:F5:CB:58:3B:28:B0:06:92:BF:A5:08:D9:09
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D906D90630711EC843363D75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:b6:0b:a4:3e:1e:ce:13:4b:18:a3:5e:4b:e3:67:59:70:
         18:75:47:45:bc:da:f7:10:60:a1:85:2e:e5:01:5d:de:7a:3b:
         5a:d7:7d:3a:1c:3a:7c:de:31:6c:5b:1f:da:bb:98:91:df:cc:
         19:97:e6:19:86:d9:4d:6b:20:0c:0d:06:81:09:b1:4a:a9:35:
         23:7b:88:ea:e0:b6:d6:01:40:8b:51:be:41:79:b9:61:f4:12:
         57:fe:86:b0:88:e4:12:51:62:66:4e:01:57:9b:34:63:74:84:
         f1:46:0d:61:98:0b:15:ad:d6:47:5b:9b:9e:b2:48:69:48:c7:
         a1:33:1c:5b:83:94:02:26:c1:2d:2e:3e:29:c0:dd:08:14:0a:
         a0:5e:69:6d:c4:64:25:60:bc:a6:65:31:45:d2:21:c6:ba:ea:
         6f:f7:b1:0f:20:5a:1c:1c:d3:f5:8d:c3:ca:3b:4d:c0:45:f3:
         a0:b6:a7:88:1c:5e:2e:96:c2:94:05:c5:f9:89:65:eb:67:1b:
         72:b4:2f:43:de:2c:b1:42:8c:8d:eb:95:20:db:a9:cc:18:c9:
         21:b4:08:ff:e5:8e:70:21:06:e6:db:2c:e3:38:0c:d8:8b:6a:
         e9:28:c8:e6:16:97:cb:6a:86:48:16:5e:c0:57:04:79:b7:67:
         14:cb:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org