Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90749300291311EDBEB7E0B9F1222468.roa
File:                     90749300291311EDBEB7E0B9F1222468.roa (raw, json)
Hash identifier:          SqlpdXdlDx3YUmmASP+8Z+cNSHzIAPa+82lQlj7ynX0=
Subject key identifier:   D2:A7:B4:E3:C0:F1:70:27:1D:78:8A:18:FE:AE:6E:66:73:87:08:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       187A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90749300291311EDBEB7E0B9F1222468.roa
Signing time:             Wed 31 Aug 2022 09:59:12 +0000
ROA not before:           Wed 31 Aug 2022 09:59:09 +0000
ROA not after:            Sun 15 Jan 2023 09:59:09 +0000
asID:                     212338
IP address blocks:        154.91.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6266 (0x187a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 09:59:09 2022 GMT
            Not After : Jan 15 09:59:09 2023 GMT
        Subject: CN=630f30f0-8c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:5d:2e:cc:b7:58:96:dd:02:ce:cf:cb:49:
                    ef:d3:b0:da:c2:e9:58:e4:97:ed:a0:04:75:c1:37:
                    9f:ca:b4:e9:2a:c1:bb:ae:97:12:94:d8:e1:9f:63:
                    b3:00:3c:1f:24:78:2b:50:69:91:ff:24:7e:4c:a7:
                    29:0e:c0:bd:f9:2e:50:5c:55:fb:a0:41:9b:1b:10:
                    57:7e:e7:27:21:96:3b:02:54:20:3f:3f:9a:e1:a0:
                    e5:c5:8a:c8:04:e0:25:3b:41:fb:7f:d6:f6:c3:5b:
                    cf:24:c2:7e:c3:55:99:86:40:c4:81:4a:d1:cc:d5:
                    5b:82:50:a1:4b:64:ab:a7:4d:c2:85:26:9a:1b:43:
                    e0:5a:d4:a6:c4:c8:78:9b:f9:71:3d:fa:0a:5d:88:
                    cb:7f:71:43:5c:f0:b4:99:ce:ee:67:0d:27:d0:d1:
                    96:c2:6d:ad:d3:3f:72:7a:83:d7:db:d2:dc:c3:60:
                    75:f5:73:e9:9e:0f:eb:89:dd:1e:58:c2:00:ef:80:
                    0d:ee:f6:6d:50:1a:a9:f2:7c:b4:d3:7a:ba:41:b4:
                    9a:9f:17:22:93:ca:76:b2:0e:6f:a8:5b:27:68:3f:
                    98:c9:43:ed:23:3d:20:a5:c2:2a:93:05:a5:03:d0:
                    0f:3a:9d:5d:13:c8:46:1d:54:eb:b8:a6:bf:97:38:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A7:B4:E3:C0:F1:70:27:1D:78:8A:18:FE:AE:6E:66:73:87:08:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90749300291311EDBEB7E0B9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:67:d9:54:db:57:e3:65:78:fe:26:50:74:0d:6a:e6:5f:
         f5:29:15:70:08:18:cb:ee:fe:49:62:7a:6d:ac:8f:b7:2e:3e:
         83:ba:8d:98:54:f6:59:3c:aa:91:34:32:ba:2f:8d:a6:80:86:
         92:7f:93:17:4b:de:61:b4:de:b1:4d:fc:f8:c1:2c:59:2a:e1:
         41:86:62:28:93:86:31:8c:7c:14:00:9e:07:68:52:27:d3:d9:
         6a:9b:87:ce:c4:1e:f5:b5:57:9b:a3:a8:6c:24:50:84:c3:0e:
         25:fa:57:68:2c:b1:8e:5c:29:20:dc:3a:56:ec:c8:e0:1b:a5:
         08:46:5d:99:ae:09:ac:7f:0a:07:2e:9b:68:d0:88:25:6e:2d:
         ac:da:30:33:dd:3b:3d:3e:8e:f1:d9:20:7f:95:0f:8f:6d:a8:
         f6:29:88:6d:04:84:0f:cb:6f:f1:66:43:c6:c9:c5:dc:5f:95:
         3e:4a:76:96:4c:91:e1:a4:31:ad:3c:94:ef:29:09:ea:f3:fa:
         91:2c:d6:ab:72:67:5f:aa:7d:6c:ce:c5:b7:93:06:b2:bf:1d:
         83:69:6d:12:55:8f:26:29:c4:ca:24:75:be:17:12:3e:d5:39:
         9a:12:d7:f9:29:a5:d8:b7:8c:b2:20:58:c3:ac:40:a1:d2:34:
         df:3c:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org