Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E049832CFA411EC85B8EC9FF1222468.roa
File:                     7E049832CFA411EC85B8EC9FF1222468.roa (raw, json)
Hash identifier:          y/5pIl6vKLNR6OISh6t6kxFWuDOSsumemUek/jvfjyY=
Subject key identifier:   40:5C:BA:EC:7C:C3:72:5F:C0:03:16:CC:95:CD:F6:D4:0A:85:A3:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1625
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E049832CFA411EC85B8EC9FF1222468.roa
Signing time:             Mon 09 May 2022 14:29:54 +0000
ROA not before:           Mon 09 May 2022 14:29:50 +0000
ROA not after:            Wed 31 May 2023 14:29:50 +0000
asID:                     136970
IP address blocks:        154.213.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5669 (0x1625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  9 14:29:50 2022 GMT
            Not After : May 31 14:29:50 2023 GMT
        Subject: CN=62792562-c95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:de:d4:81:cd:da:77:fa:c2:c5:d8:f0:76:
                    b4:de:d8:7a:82:b5:31:67:1e:d9:32:c4:c1:a5:d0:
                    2d:7d:61:df:61:a8:d7:17:2e:eb:32:33:af:b1:cf:
                    ba:63:19:d8:2d:44:69:8d:f9:20:ee:4c:1a:96:e7:
                    04:95:16:cd:a3:34:db:92:fa:71:8f:15:ab:9a:97:
                    6a:24:34:7d:ce:be:77:3c:93:53:ee:05:dd:66:79:
                    2c:1f:b3:b3:e3:11:02:cc:c0:e6:18:b5:6f:b5:26:
                    db:38:01:99:7e:a8:20:75:79:58:af:f6:87:eb:c0:
                    69:d5:70:26:fe:60:19:33:b0:6e:12:8b:af:10:be:
                    c9:b2:0c:4a:0a:dd:a9:41:03:2e:b3:43:53:4a:b1:
                    83:b3:34:c8:ab:c5:23:df:b5:67:fe:03:6d:49:39:
                    97:a7:79:01:8b:14:46:89:50:ad:55:2c:e7:3b:24:
                    2f:23:45:aa:f4:95:06:50:1b:dd:9b:f4:7a:38:ce:
                    91:e2:8e:c3:72:93:0c:80:c3:0e:b6:d7:6e:36:78:
                    4b:ee:9d:28:b0:b1:e2:83:94:c2:03:a8:a8:d6:c6:
                    af:5e:05:fe:fa:9c:c4:7b:87:ff:80:98:38:df:f2:
                    35:18:1e:4b:24:12:3d:6b:7b:bb:ff:3b:05:dd:4d:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:BA:EC:7C:C3:72:5F:C0:03:16:CC:95:CD:F6:D4:0A:85:A3:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E049832CFA411EC85B8EC9FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:91:92:d9:76:d2:e2:87:f4:53:95:ee:6b:2b:01:9c:46:70:
         a9:a3:3d:65:56:94:7b:9f:5b:50:d1:39:ee:e1:b7:0e:c2:04:
         2e:8d:30:10:b5:ea:f2:3c:83:17:08:5c:a9:56:67:ae:eb:76:
         00:a1:40:d8:d4:b6:1d:2e:9d:3a:9f:0b:31:f4:f4:f4:48:92:
         39:a6:82:37:d7:1a:59:c5:15:18:c1:37:eb:80:84:54:5a:53:
         78:42:32:22:8b:56:a9:b6:54:09:aa:da:15:ce:31:f4:8b:ce:
         3d:aa:42:19:0d:cf:61:7d:c6:95:83:7f:44:c4:a8:15:77:bf:
         a4:03:54:11:72:37:59:8b:89:e6:50:d4:fa:a0:34:b8:3b:91:
         79:1b:6f:00:15:3f:d6:6e:db:a4:6f:4a:0c:f2:a0:ad:e5:a5:
         29:54:64:7a:84:68:23:e0:75:61:d6:c2:1b:4b:d4:ee:34:4f:
         42:f4:e3:05:a4:e0:12:87:b5:17:7e:53:48:88:d1:08:23:f0:
         a3:e1:df:c5:3d:70:b7:3e:7f:e7:43:4e:e4:73:68:7a:7a:b3:
         3d:8d:37:85:a0:fb:48:d2:4e:ba:40:32:ec:1c:07:6c:30:f6:
         ad:fc:c2:c3:a1:6a:ae:4f:ac:99:6f:e9:a9:78:3d:1e:72:97:
         d9:f8:c1:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA1MDkxNDI5NTBaFw0yMzA1MzExNDI5NTBaMBgxFjAU
BgNVBAMMDTYyNzkyNTYyLWM5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4jd7Ugc3ad/rCxdjwdrTe2HqCtTFnHtkyxMGl0C19Yd9hqNcXLusyM6+x
z7pjGdgtRGmN+SDuTBqW5wSVFs2jNNuS+nGPFaual2okNH3Ovnc8k1PuBd1meSwf
s7PjEQLMwOYYtW+1Jts4AZl+qCB1eViv9ofrwGnVcCb+YBkzsG4Si68QvsmyDEoK
3alBAy6zQ1NKsYOzNMirxSPftWf+A21JOZeneQGLFEaJUK1VLOc7JC8jRar0lQZQ
G92b9Ho4zpHijsNykwyAww621242eEvunSiwseKDlMIDqKjWxq9eBf76nMR7h/+A
mDjf8jUYHkskEj1re7v/OwXdTc2jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQFy6
7HzDcl/AAxbMlc321AqFo5AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzdFMDQ5ODMyQ0ZBNDExRUM4NUI4RUM5RkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa1R0wDQYJKoZIhvcNAQEL
BQADggEBAAGRktl20uKH9FOV7msrAZxGcKmjPWVWlHufW1DROe7htw7CBC6NMBC1
6vI8gxcIXKlWZ67rdgChQNjUth0unTqfCzH09PRIkjmmgjfXGlnFFRjBN+uAhFRa
U3hCMiKLVqm2VAmq2hXOMfSLzj2qQhkNz2F9xpWDf0TEqBV3v6QDVBFyN1mLieZQ
1PqgNLg7kXkbbwAVP9Zu26RvSgzyoK3lpSlUZHqEaCPgdWHWwhtL1O40T0L04wWk
4BKHtRd+U0iI0Qgj8KPh38U9cLc+f+dDTuRzaHp6sz2NN4Wg+0jSTrpAMuwcB2ww
9q38wsOhaq5PrJlv6al4PR5yl9n4wUM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org