Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
File:                     853E23F890AB11ECBF99E5BB5A40D577.roa (raw, json)
Hash identifier:          ZasRu5T15l5B+Fj39bCiMk3SvdVJ5Ezb9kYkiUc6Wjg=
Subject key identifier:   FE:88:09:90:8F:38:49:A0:78:65:30:16:5C:E1:B1:7B:0A:72:86:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       14E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
Signing time:             Fri 18 Feb 2022 11:11:29 +0000
ROA not before:           Fri 18 Feb 2022 11:11:25 +0000
ROA not after:            Fri 30 Dec 2022 11:11:25 +0000
asID:                     137951
IP address blocks:        154.210.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5350 (0x14e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 18 11:11:25 2022 GMT
            Not After : Dec 30 11:11:25 2022 GMT
        Subject: CN=620f7ee1-1065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:49:39:92:5b:08:86:47:5d:be:eb:62:69:7d:
                    19:62:c8:9c:9c:67:e4:54:fe:0f:8c:fd:b2:97:5a:
                    6d:c1:c1:c2:5d:ef:bd:f1:4f:82:16:11:a9:ab:29:
                    4a:db:e8:75:90:bc:76:14:ca:b6:8a:11:fc:34:10:
                    b7:31:17:79:bd:40:93:29:71:cc:a3:95:21:a1:6f:
                    e1:70:a2:60:1b:29:7e:85:e5:48:33:95:39:5b:66:
                    7d:b1:41:63:3a:2e:56:17:a3:eb:ca:50:fe:80:c6:
                    b4:fb:e2:12:bb:3a:59:3c:cf:45:9e:92:6a:0f:3d:
                    55:e1:b1:8c:4f:10:ab:7e:7c:19:18:02:56:a9:2f:
                    42:56:76:49:dc:ca:c5:d5:07:e6:c0:9a:fe:57:51:
                    96:f7:ad:2e:63:c3:7a:85:33:08:34:01:7e:b6:2c:
                    75:34:8c:18:c0:43:e6:f5:82:42:62:29:96:c5:1f:
                    dc:10:bd:1f:fa:4c:cd:8e:6b:db:92:a3:a6:f3:fe:
                    fd:08:b0:50:d3:da:7e:24:e8:07:22:e6:4d:15:3a:
                    fd:5d:62:98:7e:d8:f2:ad:64:ea:e4:9e:bd:f0:1e:
                    71:80:81:4a:99:f9:aa:67:67:87:68:49:ee:a9:58:
                    af:61:b4:64:7f:5e:2c:c3:82:b2:cb:e8:72:d8:21:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:88:09:90:8F:38:49:A0:78:65:30:16:5C:E1:B1:7B:0A:72:86:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:64:41:df:94:0f:1d:18:0c:7b:53:ab:cc:8f:5e:2c:8b:
         7c:e3:72:94:ba:f1:ed:b2:fb:31:20:27:d5:fa:ed:43:cc:a7:
         b5:c4:5c:07:59:52:4d:c8:1b:6f:e3:56:36:21:86:d9:33:00:
         72:24:d8:f5:7b:b8:f6:76:32:5c:71:2a:f0:27:96:26:3a:57:
         01:81:f2:54:e8:99:0f:7c:52:0d:33:90:f3:36:3d:49:d4:15:
         b8:f6:46:c6:6b:68:1a:b4:5d:1e:6a:31:34:91:77:ea:db:bb:
         15:12:bc:17:4f:0a:d4:58:45:33:68:5c:03:2d:58:8f:71:e9:
         81:34:eb:e8:f6:ef:7c:90:bc:f8:e1:ae:72:ea:59:74:5c:de:
         7b:22:d6:28:39:72:7f:19:59:25:2b:43:a4:1e:73:c4:5e:ce:
         ce:7e:1c:8b:67:00:56:a3:d9:80:2c:18:28:5d:67:ec:51:92:
         cb:f6:d7:27:be:32:4b:d7:64:73:d0:9f:9c:0c:ea:a8:84:c7:
         fd:88:9d:dd:b8:b1:5e:58:ac:55:a4:88:8e:8d:4e:43:a2:f1:
         8b:03:46:7c:72:0a:85:64:4d:a5:d7:c2:35:ec:85:3e:0f:94:
         b4:c4:1f:e2:2c:20:eb:ad:65:cc:0b:71:25:7b:a7:7c:34:b8:
         4d:7a:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org