Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EFE3C08D711ED90187BBFF1222468.roa
File:                     9A7EFE3C08D711ED90187BBFF1222468.roa (raw, json)
Hash identifier:          RrDgUR4dskJtRgK2sdlhDLWOnNoYdwXolLXnNOQ81ho=
Subject key identifier:   E3:A1:B3:62:00:63:36:E5:F4:99:A2:C5:A4:49:02:9B:B2:76:D6:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1782
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EFE3C08D711ED90187BBFF1222468.roa
Signing time:             Thu 21 Jul 2022 09:29:22 +0000
ROA not before:           Thu 21 Jul 2022 09:29:18 +0000
ROA not after:            Fri 30 Dec 2022 09:29:18 +0000
asID:                     35916
IP address blocks:        154.212.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6018 (0x1782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 21 09:29:18 2022 GMT
            Not After : Dec 30 09:29:18 2022 GMT
        Subject: CN=62d91c72-4e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:bf:5b:14:3a:c2:1c:f9:bd:bf:ff:42:b2:
                    72:10:a8:41:9f:8e:c6:e7:1e:d8:77:fb:fd:30:9f:
                    f1:8b:b7:04:27:c3:8b:f3:63:76:37:0a:81:5f:df:
                    31:d4:c3:e7:2a:8b:1d:75:1f:32:b1:7a:a8:8f:b1:
                    0f:d4:22:9f:09:b0:61:c2:15:b9:e7:a5:08:cd:4a:
                    e9:36:ea:63:bb:8e:2f:90:84:52:07:ca:16:06:40:
                    3b:b1:de:75:2d:16:4a:32:c1:b4:8a:81:be:3a:dd:
                    97:1c:a3:aa:ba:fe:8e:70:96:f4:35:cd:67:66:83:
                    29:76:cd:f8:e4:e8:5c:7d:f5:d1:f9:00:17:ac:88:
                    be:80:51:66:99:ce:91:75:b3:88:9c:6c:cf:fd:07:
                    15:99:c1:0f:38:ed:34:ef:48:f5:7c:64:73:5d:f8:
                    6d:ec:20:c1:11:be:1b:ef:45:b7:2c:02:22:96:71:
                    73:68:62:be:82:02:20:77:dd:2f:aa:1c:06:4e:8d:
                    eb:0f:52:73:80:bf:d4:e5:87:c1:72:64:40:8e:47:
                    9a:69:f2:4e:2c:dd:17:40:3e:08:87:7e:91:7c:3e:
                    fb:73:cb:18:21:35:f6:b9:91:b4:d3:e9:fa:81:67:
                    67:f0:14:b8:d1:09:f4:fa:eb:d0:27:25:1a:bb:99:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:B3:62:00:63:36:E5:F4:99:A2:C5:A4:49:02:9B:B2:76:D6:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EFE3C08D711ED90187BBFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:fa:71:84:6d:2a:f7:c2:5c:ba:c3:7f:db:36:9f:fa:39:
         a0:59:2f:0e:f1:27:86:b5:0b:ee:ac:bf:df:6d:b1:92:41:c2:
         50:01:29:82:55:fa:f1:a6:27:95:e2:0f:39:b9:8c:d6:50:5d:
         7a:f2:ba:ea:20:f4:26:9c:af:ef:7a:f8:6b:ea:b3:6e:50:c4:
         89:41:1e:0f:ec:12:81:8a:95:e2:5b:ee:5b:62:e2:c6:61:cd:
         26:d2:b9:8e:30:3d:11:ca:2b:6a:d1:af:bc:c1:60:49:35:22:
         d9:4f:e3:a0:b1:4e:64:a6:40:18:86:2a:21:ab:01:a0:22:36:
         ab:5d:68:70:63:0d:b1:bc:b6:f8:8f:50:40:16:93:fb:9b:e2:
         a8:19:d6:f9:aa:e7:3a:e4:c1:36:8d:dd:96:c6:04:13:2e:8c:
         93:68:19:d2:b5:1b:d5:34:bf:41:5a:08:86:e8:4a:ae:c0:c4:
         5c:3b:e4:fa:6f:bd:30:48:a1:28:ee:f6:fb:8d:14:f6:4b:01:
         8b:d8:79:c4:2c:19:12:2a:84:10:3a:04:ab:53:27:cb:ac:ee:
         a9:36:f9:50:8a:fa:a7:b0:90:70:70:d1:ba:5d:96:df:f8:3c:
         02:0e:10:f0:a1:77:2e:b6:c0:ed:1e:a8:22:66:a4:bd:63:01:
         26:98:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org