Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA70E7C8C5B11EB99529443F8AEA228.roa
File:                     8FA70E7C8C5B11EB99529443F8AEA228.roa (raw, json)
Hash identifier:          EgwE0xBY5wfrzK6nUzxelsFN5Mh2kiO1c8G9Ind2wX8=
Subject key identifier:   1D:23:70:91:D8:C3:CE:9E:E7:7A:81:9F:E4:B7:97:A8:05:12:9A:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA70E7C8C5B11EB99529443F8AEA228.roa
Signing time:             Wed 24 Mar 2021 04:44:04 +0000
ROA not before:           Wed 24 Mar 2021 04:43:59 +0000
ROA not after:            Mon 26 Sep 2022 04:43:59 +0000
asID:                     133199
IP address blocks:        154.197.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 24 04:43:59 2021 GMT
            Not After : Sep 26 04:43:59 2022 GMT
        Subject: CN=605ac394-6266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:60:07:15:2d:7c:35:35:b3:37:6b:57:66:
                    76:8c:4b:35:d8:41:9f:c2:5c:21:21:47:1d:e0:14:
                    ea:33:65:a8:c9:bb:69:09:8c:4a:d6:31:f9:91:b0:
                    4b:b0:90:e2:b2:37:96:38:aa:34:02:87:dc:d5:28:
                    a7:e9:16:14:db:60:c5:c2:5c:93:10:21:f7:7b:57:
                    93:78:90:fd:5a:80:d5:89:5e:d6:49:3f:dd:3b:2c:
                    71:91:ec:53:d8:5a:7e:02:fe:9b:2a:73:2f:d9:26:
                    e0:f4:e2:ce:dd:56:81:d1:8e:b7:dc:f0:1e:2e:75:
                    fd:fc:8c:97:5e:19:04:69:2d:fa:ba:70:44:26:f7:
                    82:cb:99:87:c0:39:62:25:42:84:c5:c6:55:5a:5e:
                    8e:1b:13:41:a9:bc:be:29:71:7e:28:4f:45:00:93:
                    8f:1a:5c:0f:f0:70:36:b8:b0:af:25:46:97:ab:71:
                    ca:9e:a7:d5:e8:70:36:ab:00:5f:28:9d:fe:bb:15:
                    9a:37:55:e3:a0:4e:55:62:82:11:e9:46:93:fe:38:
                    54:af:a7:1b:cb:20:23:89:d6:a2:22:5e:f3:8e:5d:
                    ed:6e:cc:0a:83:a5:72:18:78:3f:77:24:83:a0:4e:
                    6c:07:67:81:bc:6c:aa:f8:81:84:84:b1:56:28:e2:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:70:91:D8:C3:CE:9E:E7:7A:81:9F:E4:B7:97:A8:05:12:9A:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA70E7C8C5B11EB99529443F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:c5:3c:88:ea:80:2b:c1:8b:3b:93:6e:13:08:14:84:0f:
         cf:09:f0:8d:cf:23:9a:2b:29:6b:2e:d5:fe:ae:0f:7a:f1:b9:
         03:46:a1:ed:69:0a:c4:e1:93:76:20:67:5f:5a:43:83:0b:cc:
         19:37:81:0c:b8:a1:77:7a:45:45:29:20:fa:f4:a4:a9:03:e3:
         1a:0e:ed:84:59:c8:0f:a5:e5:01:13:6f:ac:36:48:02:1a:6c:
         19:13:0a:c2:ae:c1:13:10:9b:06:20:1f:37:c4:de:d2:7e:c9:
         c1:3b:d8:69:74:49:bf:35:4c:ab:3c:8d:a3:b3:9b:89:8d:7f:
         87:d6:d7:0f:ab:3b:aa:65:fd:b3:4d:2b:5d:6c:9d:db:b5:c1:
         6c:7d:04:61:07:5a:4c:ad:b1:61:3b:7a:a6:99:22:63:ba:ed:
         f9:07:ff:ef:0a:0c:1d:46:ca:94:07:b3:4f:92:b0:f8:d1:e3:
         da:be:24:34:15:f0:3a:be:65:a2:99:fe:71:21:e4:fc:10:12:
         6b:6a:44:16:fe:f9:f5:03:71:42:63:d0:82:40:8a:91:3f:62:
         e8:c2:2e:4c:f2:58:d6:e6:b0:ee:9c:1e:29:ce:0f:4b:87:da:
         29:a1:75:ce:bb:59:8c:27:ca:46:3a:13:ee:73:16:0b:2f:5e:
         29:6a:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org