Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE773A0E5111EDAC5796A9F1222468.roa
File:                     88FE773A0E5111EDAC5796A9F1222468.roa (raw, json)
Hash identifier:          wj/G1OMP8yu7Kxm7GzH59J6QFl588FdF7Br16IdczLk=
Subject key identifier:   65:D7:3B:97:6F:15:B5:46:A8:3E:82:83:20:08:C4:BE:37:03:31:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       17C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE773A0E5111EDAC5796A9F1222468.roa
Signing time:             Thu 28 Jul 2022 08:44:47 +0000
ROA not before:           Thu 28 Jul 2022 08:44:43 +0000
ROA not after:            Mon 15 May 2023 08:44:43 +0000
asID:                     397630
IP address blocks:        154.201.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6080 (0x17c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 28 08:44:43 2022 GMT
            Not After : May 15 08:44:43 2023 GMT
        Subject: CN=62e24c7f-7250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:3a:77:03:09:6a:b4:b6:3d:f7:f8:34:36:
                    17:7f:a9:4f:9b:65:4e:62:0b:28:99:1a:44:1b:5e:
                    79:f7:4d:10:47:f0:0d:4c:f7:e1:d3:09:cb:d8:46:
                    0a:79:d3:a3:2f:a4:83:9f:60:1a:77:30:1f:48:8e:
                    cb:a6:b9:81:6f:0e:b3:ad:f6:ca:41:07:3c:d8:d0:
                    b9:a1:1b:76:9c:ef:20:76:d5:e5:d2:87:9b:e0:8b:
                    a1:17:62:21:fe:74:98:13:41:75:c6:80:29:2d:f5:
                    81:4b:9c:97:ca:b2:a1:c4:b1:da:b6:19:b3:f9:bc:
                    33:5e:d2:c0:48:d8:21:90:a4:33:75:41:63:74:53:
                    3f:8d:b9:3e:22:d1:a7:da:71:6c:fb:b2:83:14:10:
                    59:3b:e2:5d:5c:33:9f:94:bd:16:04:61:70:13:25:
                    97:15:45:94:54:1b:d0:f7:47:b6:8b:86:65:5d:82:
                    6b:f0:87:05:20:88:67:f6:0c:f8:56:78:db:81:ed:
                    e9:c8:30:c0:d2:c6:03:e9:91:68:e0:f3:2b:61:d7:
                    c4:8e:de:1f:6a:f2:c9:cb:38:89:59:6b:2c:b5:e2:
                    00:da:b8:ec:7b:da:8a:5b:f4:4a:0b:c5:dd:49:67:
                    be:94:39:09:ca:98:63:70:7e:ea:62:15:f4:92:99:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D7:3B:97:6F:15:B5:46:A8:3E:82:83:20:08:C4:BE:37:03:31:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88FE773A0E5111EDAC5796A9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:58:d1:45:27:d7:9b:22:70:bc:25:c0:23:18:b6:5f:ab:
         53:73:80:d3:63:b1:53:93:1e:cb:6f:41:b2:4c:8d:41:d5:48:
         2f:d4:16:9a:49:02:1d:27:76:d4:60:eb:4b:5d:9f:53:fc:e1:
         b2:e1:dc:15:e8:14:24:08:cb:91:6d:51:58:91:74:3e:1c:30:
         60:bf:23:e8:91:b5:49:56:ec:23:c9:7a:9a:24:d5:cf:90:1e:
         cb:a2:d8:2a:b6:de:37:a0:50:c1:ef:f4:46:3a:12:44:e2:82:
         2f:14:b7:46:da:cf:56:78:99:88:de:8c:83:d0:c1:11:3d:e9:
         de:af:70:8a:e0:ff:9d:75:d3:91:90:d8:d0:61:4f:92:46:b2:
         08:d3:26:92:e7:39:5e:f8:df:57:85:42:ad:14:b7:73:d4:f7:
         fc:49:8b:49:65:e9:a8:eb:2a:a9:ea:dc:2e:dd:dc:2b:6c:28:
         43:9d:e4:71:10:16:9b:ae:27:ac:d3:4c:be:0a:ef:26:c1:bc:
         77:9d:07:bc:e4:b3:94:e8:45:95:dd:ce:6b:af:cd:18:2b:7b:
         1e:19:d3:27:34:7f:d3:ab:08:57:7b:7a:0e:86:5e:7d:3e:f6:
         fc:7e:22:e0:72:df:53:94:3e:f4:ae:a3:b5:89:70:2f:63:36:
         75:d7:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org