Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8A244E72C711EC87F0948D5A40D577.roa
File:                     8F8A244E72C711EC87F0948D5A40D577.roa (raw, json)
Hash identifier:          rl44awO5azquZcaoGsWmlqXih8D+Vd3X1fKO2GHjxjQ=
Subject key identifier:   B9:7A:46:7C:0F:32:A2:06:CE:C3:96:FE:19:39:68:8B:D2:70:14:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       147F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8A244E72C711EC87F0948D5A40D577.roa
Signing time:             Tue 11 Jan 2022 10:16:38 +0000
ROA not before:           Tue 11 Jan 2022 10:16:34 +0000
ROA not after:            Tue 28 Feb 2023 10:16:34 +0000
asID:                     147186
IP address blocks:        154.91.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5247 (0x147f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 11 10:16:34 2022 GMT
            Not After : Feb 28 10:16:34 2023 GMT
        Subject: CN=61dd5906-1b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:25:71:e4:72:d7:66:41:bc:63:a3:21:c1:
                    bb:61:fe:1e:a6:4d:1c:d8:12:ab:95:ea:bc:6d:72:
                    1c:11:5c:47:46:18:a5:3d:f9:10:d7:e9:35:92:c0:
                    8a:08:d5:5b:12:d4:3a:34:ec:fd:d6:0d:ed:46:9e:
                    7f:b8:f3:d7:5b:41:9b:4d:7c:85:22:60:37:b3:57:
                    56:68:fe:6f:47:a4:e9:5f:39:1a:15:c3:e9:6a:1b:
                    49:52:45:5f:5c:20:c4:4f:d4:2b:ef:78:46:57:7d:
                    78:b0:40:33:7f:be:5f:a6:19:2a:22:f8:89:bd:96:
                    66:c0:8f:c2:35:31:b8:25:cf:51:d0:02:07:0b:69:
                    7b:e5:c0:8a:19:91:4d:a9:7f:ea:3c:cb:70:84:f6:
                    56:16:24:cc:ed:7e:f7:b9:3c:39:e3:cf:3d:77:9a:
                    a8:88:e5:ff:3d:06:f7:02:c1:98:31:48:ad:2a:33:
                    bb:20:0e:3f:85:03:22:ef:e8:74:28:28:17:76:13:
                    2d:f3:92:b4:de:40:59:1a:d8:d3:3f:ca:7a:25:ab:
                    0a:90:da:04:d7:09:e1:0b:16:04:50:29:90:23:12:
                    a1:2d:4e:c8:73:a5:08:d2:a7:cc:7e:54:aa:0e:bf:
                    42:62:67:5f:b6:95:ee:d7:d7:56:c9:6e:38:bf:d8:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:46:7C:0F:32:A2:06:CE:C3:96:FE:19:39:68:8B:D2:70:14:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8A244E72C711EC87F0948D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:02:8a:ef:1c:7a:0b:89:4c:7b:40:62:a1:d7:e9:94:c2:24:
         4f:aa:2b:87:1b:e8:f2:7a:8a:84:c0:16:df:98:f9:4c:a0:59:
         53:74:84:47:b7:7a:2e:d9:cc:0b:31:26:fd:0d:d8:da:b6:9c:
         78:09:41:1c:b2:d5:8f:3a:50:c8:fe:8e:5d:9a:5b:99:3f:1d:
         ac:48:00:ca:eb:ae:d8:c2:30:c1:99:83:0e:a8:4b:9b:a4:e3:
         b9:30:56:5e:c4:48:82:45:1b:49:96:cc:c9:ee:95:47:b6:b4:
         3f:84:cc:44:8c:23:cb:0a:ab:01:07:48:9e:33:f4:d1:91:66:
         e2:1d:c7:e8:47:2b:33:3b:60:e6:34:94:56:fa:cd:5f:cb:3e:
         3b:92:a8:01:f1:f9:34:55:80:05:f7:6f:17:bb:c0:bb:44:82:
         82:e0:db:29:e1:43:9f:fa:c5:2b:06:20:5c:12:4c:83:13:35:
         22:f4:de:ed:04:ac:ee:50:1e:68:fc:29:3e:87:84:94:5b:13:
         e5:50:37:29:a8:a3:22:95:a5:3b:0d:2b:f7:3f:65:a4:19:9f:
         28:72:74:e3:85:6e:99:68:de:bf:c0:aa:66:b2:8f:5b:58:52:
         ab:a9:7a:52:79:62:cf:33:f0:cf:7f:63:28:c2:9d:80:74:b1:
         40:91:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org