Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57444C488711ECB5FA4B39D8A014CE.roa
File:                     9B57444C488711ECB5FA4B39D8A014CE.roa (raw, json)
Hash identifier:          go3wbT7givOXqCRyTfEmFDp87o37ebDhSLOfHzRNoDY=
Subject key identifier:   5A:56:00:17:7C:02:E1:02:DE:93:10:C7:C6:36:C8:E9:CA:CE:C0:F8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57444C488711ECB5FA4B39D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:53:01 +0000
ROA not before:           Fri 19 Nov 2021 15:52:57 +0000
ROA not after:            Sat 19 Nov 2022 15:52:57 +0000
asID:                     139879
IP address blocks:        154.80.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 15:52:57 2021 GMT
            Not After : Nov 19 15:52:57 2022 GMT
        Subject: CN=619676dd-15f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:45:d3:07:1e:d0:4a:cd:97:de:4b:3d:dc:
                    3b:18:cd:cc:c3:d8:43:7a:7c:6c:9c:e6:1d:ac:fb:
                    b5:20:6b:fa:7d:c5:2b:41:3e:df:49:63:ec:93:36:
                    a9:aa:3c:60:97:0e:75:9a:82:0b:b8:54:8b:8a:44:
                    47:cb:e1:1a:dc:4f:be:76:6a:0d:a0:68:5a:23:b6:
                    32:72:25:09:5c:8d:5b:cf:17:b9:89:13:d5:81:73:
                    08:c6:68:d2:66:4a:f4:ce:53:aa:f0:15:b8:29:e4:
                    bc:2e:60:32:13:d7:89:3e:d0:a4:af:db:30:98:a9:
                    b7:cb:10:08:0f:63:a7:18:1d:00:31:ff:81:ee:18:
                    fa:91:4e:e0:18:f3:0d:8a:57:96:8d:80:fb:0c:c4:
                    ff:01:df:f8:4a:40:ed:e5:a2:fc:7e:ad:71:7a:15:
                    06:63:71:5c:0c:ee:4c:08:63:70:07:5a:de:97:6c:
                    5c:9f:75:5c:0c:2b:33:04:99:0c:79:b9:bd:68:e4:
                    16:de:ca:9d:fb:de:96:3e:2d:e5:da:70:91:73:02:
                    2e:ee:7f:e5:16:75:d3:16:e3:d1:9a:ea:4a:e9:2b:
                    72:4b:26:25:3e:fc:52:31:62:3d:c3:05:96:33:ea:
                    7a:33:60:b6:63:a2:a4:a3:6c:6b:0b:01:b6:21:9a:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:00:17:7C:02:E1:02:DE:93:10:C7:C6:36:C8:E9:CA:CE:C0:F8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57444C488711ECB5FA4B39D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:43:4c:e7:26:61:85:4f:88:2a:6c:11:58:a6:ad:fe:be:
         15:13:13:c8:b0:6b:64:4a:17:fd:42:ac:06:0a:d1:b7:bb:bf:
         92:73:50:c8:aa:22:dc:a5:e6:10:d8:0d:ab:fe:1b:3c:86:83:
         90:06:71:80:58:a4:8d:eb:47:91:1e:5a:c5:ed:4d:9d:39:d8:
         e7:19:a9:30:8b:15:27:f3:cf:48:64:91:ed:e2:cd:56:2f:2f:
         63:a9:1d:64:49:b2:7d:66:c0:8b:42:d2:80:bd:18:7a:e1:29:
         07:7e:2d:1d:92:87:32:72:a0:84:f6:df:d4:18:35:69:f0:ce:
         49:db:1a:8e:e1:43:db:51:5f:3b:10:8d:9b:51:67:77:de:71:
         05:6d:e4:6f:b7:b7:ac:9d:41:56:62:14:5b:09:77:e9:f8:e7:
         cf:b7:a4:3b:8f:fd:5c:d9:13:59:58:e0:42:eb:9d:fd:36:84:
         fc:bf:f4:21:56:ae:9a:4f:02:d5:ed:3d:2b:e5:ae:28:49:2d:
         83:d9:a2:c5:23:9f:9e:ac:95:9d:7f:9d:07:f5:27:03:b8:82:
         a1:4c:bf:0e:2d:0a:e6:07:8c:5f:f1:04:10:00:99:c3:24:d7:
         17:15:b5:b1:a8:6c:c6:79:a2:07:2f:d0:10:3f:d0:8c:b7:d4:
         82:5d:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org