Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8347F8E4930711EDB59EC9EAF1222468.roa
File:                     8347F8E4930711EDB59EC9EAF1222468.roa (raw, json)
Hash identifier:          fd4gfSPPdra3NamGwBSutXTPfNJ6K0ISsNUa+nmRvaM=
Subject key identifier:   0A:72:E1:03:19:38:C6:29:55:55:40:A3:05:F2:5A:CC:D1:60:8A:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1BDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8347F8E4930711EDB59EC9EAF1222468.roa
Signing time:             Fri 13 Jan 2023 06:00:00 +0000
ROA not before:           Fri 13 Jan 2023 05:59:56 +0000
ROA not after:            Wed 15 Feb 2023 05:59:56 +0000
asID:                     1239
IP address blocks:        154.81.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7134 (0x1bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 05:59:56 2023 GMT
            Not After : Feb 15 05:59:56 2023 GMT
        Subject: CN=63c0f35f-09cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:e9:91:ed:0d:c5:f7:97:64:4a:c6:6b:ee:
                    98:85:e4:9b:c8:47:11:c3:bc:26:fa:7f:23:1b:cc:
                    d3:dc:eb:93:b2:20:98:09:9b:89:9e:46:9f:19:8e:
                    20:a4:bf:10:8b:7b:88:25:f0:b1:0a:3b:99:6e:b0:
                    14:b3:67:8b:e9:9c:57:da:74:a1:bc:b9:ba:7c:94:
                    0f:42:d0:c5:a6:5a:a4:a8:1e:6d:ff:2b:86:f6:63:
                    e6:78:91:90:9c:8c:9f:21:26:11:f7:dc:19:a6:4d:
                    a8:7e:76:97:41:31:20:a5:22:9a:67:20:99:34:d4:
                    1e:69:7c:f1:c2:a1:c3:21:37:a6:fd:ea:1c:93:28:
                    04:16:e0:b4:18:dc:bc:5a:fe:4c:c5:fc:04:7f:6d:
                    63:5b:09:fb:43:ae:a9:60:8e:d1:9f:77:50:50:59:
                    44:e9:6a:2d:64:ec:de:01:6f:58:af:57:6f:6f:94:
                    be:ef:73:76:33:6a:a3:76:9a:58:f1:81:68:a4:ee:
                    73:e4:cc:0f:c6:f2:26:77:9e:93:f2:14:ac:00:4d:
                    ab:cf:80:d9:31:1c:30:12:5e:0a:c6:99:74:af:fa:
                    17:5a:f5:49:d6:1b:36:d3:bd:0d:72:1c:30:12:bc:
                    4d:4e:a4:04:bb:90:92:38:ff:36:3f:4b:ca:d6:67:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:E1:03:19:38:C6:29:55:55:40:A3:05:F2:5A:CC:D1:60:8A:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8347F8E4930711EDB59EC9EAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:56:b1:0d:6c:f5:f1:86:b2:1c:2e:83:86:1b:a1:42:a3:e3:
         5f:5d:d8:87:07:6e:ee:17:84:99:2b:8e:3b:d2:13:5d:c7:66:
         fb:a3:c0:7a:be:67:50:eb:fe:b0:06:08:71:83:dc:1f:0d:14:
         22:51:ad:2a:50:7d:68:0f:a7:3a:e3:bc:3e:f8:95:03:91:44:
         94:e2:12:b1:ee:9f:3c:61:cf:23:8f:1c:6b:2a:78:b5:91:a3:
         3c:66:fc:3e:61:f2:79:f0:4d:f5:ee:9b:f3:75:62:7a:f2:23:
         1f:ae:30:df:e7:e3:20:be:b8:24:58:96:2e:6b:e9:c9:66:14:
         7e:8a:a2:43:d3:8e:56:4e:98:e8:58:32:c3:83:25:57:94:1f:
         7a:08:d3:df:90:31:12:a9:9a:85:5b:c0:a7:24:14:0a:28:c8:
         6d:24:b0:0e:0b:bb:e6:41:0a:62:1e:42:41:cd:f6:4e:ab:45:
         5d:6c:77:f4:be:34:df:8d:5d:36:36:62:2a:77:5a:fb:32:ea:
         e1:67:d2:93:41:09:a3:a5:37:1a:ed:53:e4:9c:6d:f3:db:d0:
         ce:87:92:42:ba:b7:d4:7f:6b:84:f5:d0:6c:30:3d:e2:13:c7:
         a4:ab:eb:f2:e5:e2:94:2e:a8:5e:b7:17:2d:42:3a:2e:e4:1c:
         13:f0:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org