Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E99912EC47A11EC9E143981F1222468.roa
File:                     7E99912EC47A11EC9E143981F1222468.roa (raw, json)
Hash identifier:          iRub4/N8cVa6/Ba/iUZAxIPgnfIRdO0zeWSPPrzkkxM=
Subject key identifier:   A9:A5:80:01:8B:9E:BF:C6:27:9A:70:F2:BE:15:5E:C2:6F:DA:90:24
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       15FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E99912EC47A11EC9E143981F1222468.roa
Signing time:             Mon 25 Apr 2022 09:31:33 +0000
ROA not before:           Mon 25 Apr 2022 09:31:30 +0000
ROA not after:            Sun 30 Apr 2023 09:31:30 +0000
asID:                     133201
IP address blocks:        154.205.44.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5630 (0x15fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 25 09:31:30 2022 GMT
            Not After : Apr 30 09:31:30 2023 GMT
        Subject: CN=62666a75-9ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:d2:6b:92:ec:41:85:ba:66:e4:fe:29:41:
                    63:da:a5:f8:e6:09:36:98:df:34:2d:8a:92:b1:65:
                    f6:77:07:d2:df:0c:94:d7:fc:a1:9c:c6:cd:a6:43:
                    4c:9c:97:80:8e:fa:94:db:e5:41:dd:c5:d3:af:65:
                    bf:a4:16:93:3f:73:a1:7b:40:64:dc:bf:12:08:78:
                    4d:8a:a1:52:5a:54:3f:9b:38:d3:2e:26:e2:61:03:
                    5f:7f:35:8d:f2:15:f8:e3:63:ae:05:ed:3a:15:64:
                    54:d6:5b:33:91:22:15:f6:10:d2:dd:e0:cf:7e:f2:
                    b6:0d:d4:53:42:38:62:16:53:29:ae:de:aa:39:d0:
                    bc:33:78:bf:58:d1:0c:8f:1d:63:33:4f:9f:42:30:
                    4f:48:a3:e7:b3:98:86:f7:04:bb:c1:5f:59:d4:b8:
                    30:ed:14:8e:a3:ee:e6:28:de:83:d6:b1:f1:62:7d:
                    d7:85:2b:a4:31:61:f8:5b:71:d5:b7:c6:5a:d6:b3:
                    18:5a:5e:18:be:3d:a0:d4:3a:ca:06:a9:da:f0:13:
                    e9:f3:5e:24:71:39:b5:65:86:87:7b:5f:3e:fe:97:
                    79:25:75:21:0d:a0:18:c7:0e:b4:e5:f8:0b:9a:f9:
                    43:df:d8:35:99:19:3c:ac:df:48:66:96:d9:6f:d2:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A5:80:01:8B:9E:BF:C6:27:9A:70:F2:BE:15:5E:C2:6F:DA:90:24
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E99912EC47A11EC9E143981F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:0f:bf:b9:5d:2c:55:d5:9d:91:7f:99:38:d4:0c:21:65:
         f5:4d:e7:a3:7e:3c:10:e8:6e:d6:32:45:dd:5c:98:0a:80:51:
         85:6e:3e:8c:7d:3f:38:a9:55:a8:c0:b6:b9:92:85:ef:49:a6:
         77:03:df:fb:b9:96:3b:6c:96:be:c7:b7:55:ef:92:6c:1f:e2:
         a7:3d:a2:b2:db:c8:71:6a:22:0c:f9:cf:81:7b:71:07:4d:a9:
         8f:36:35:6b:cc:85:56:8e:09:f0:97:26:4e:36:9e:c5:9b:9e:
         fc:a5:c9:74:55:5c:76:78:29:58:31:82:d5:1c:36:6d:8c:4e:
         c3:e9:44:51:6b:e6:0c:48:13:af:80:26:66:8d:09:cb:01:5d:
         48:f3:db:2c:7f:c7:dc:3a:30:b8:e4:af:32:ce:5e:f5:ee:46:
         5c:d9:12:c4:36:16:11:14:d9:cd:14:8c:96:e1:34:82:17:86:
         1e:35:d8:61:b5:74:94:13:79:a8:6e:25:a2:cc:87:88:e4:d6:
         e0:a7:c8:10:1e:dc:8b:12:b3:8c:c3:39:73:59:37:eb:60:ed:
         c9:a0:98:68:3d:9d:6d:97:4c:26:27:e1:3a:e6:04:70:38:c8:
         3a:99:99:7a:58:b1:10:42:4c:1a:77:31:a0:16:38:f1:d9:28:
         73:67:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org