Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB9E62001B611EDB8393E98F1222468.roa
File:                     9DB9E62001B611EDB8393E98F1222468.roa (raw, json)
Hash identifier:          6dgsTQZcYWveXhNouas//7y+bb+3MmjetV0Of5IoZjE=
Subject key identifier:   67:3E:ED:3E:90:07:4B:49:47:F1:6D:78:64:6F:CC:5B:C0:76:F1:0D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       174E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB9E62001B611EDB8393E98F1222468.roa
Signing time:             Tue 12 Jul 2022 07:45:36 +0000
ROA not before:           Tue 12 Jul 2022 07:45:32 +0000
ROA not after:            Tue 11 Jul 2023 07:45:32 +0000
asID:                     132325
IP address blocks:        154.212.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5966 (0x174e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 12 07:45:32 2022 GMT
            Not After : Jul 11 07:45:32 2023 GMT
        Subject: CN=62cd26a0-4051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:07:9a:8f:ef:fb:38:3c:b1:2c:a8:c6:35:
                    fa:30:16:b7:78:91:70:9f:44:bb:fe:f3:92:5e:31:
                    a9:78:03:60:88:4b:d4:b8:f5:fd:78:2c:55:ab:47:
                    53:73:57:23:96:a5:4a:8c:d8:dd:d7:4c:3e:1a:58:
                    a8:2e:3f:59:3f:77:d4:a1:ce:8b:70:74:0a:8b:1d:
                    1a:a4:e0:58:55:3a:ff:26:98:82:0c:32:d5:76:ad:
                    18:96:04:ec:4f:4a:fc:1e:94:dd:87:84:30:b4:a9:
                    89:27:da:d2:17:6b:84:a9:47:50:3f:02:04:14:70:
                    36:49:b6:59:99:09:ef:69:c9:74:91:03:fe:f4:ff:
                    71:2b:c9:ed:ca:01:7a:28:be:5d:9c:1b:55:d0:55:
                    93:2e:a1:dc:91:bf:9a:ee:76:be:da:d2:12:3b:e9:
                    59:2b:ae:5f:23:e5:60:e2:5c:74:86:ec:04:80:ef:
                    02:03:2e:e4:53:96:73:22:82:12:6c:54:a1:a0:84:
                    0a:9c:73:91:64:ee:9d:3f:81:28:94:2c:61:69:1b:
                    9c:68:d4:17:28:5f:67:cf:92:88:93:62:4f:c7:d3:
                    63:53:8f:2c:2c:b1:4b:ef:8c:94:ea:04:5d:83:c7:
                    a9:76:b6:82:1f:85:d1:0c:b7:5d:a9:98:7c:08:fd:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3E:ED:3E:90:07:4B:49:47:F1:6D:78:64:6F:CC:5B:C0:76:F1:0D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB9E62001B611EDB8393E98F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a2:6c:d7:5b:0b:4c:9e:4d:97:62:34:72:a1:ce:0f:f8:37:
         b4:78:49:c0:46:7d:6c:bd:f1:27:ec:25:a5:0a:f8:3f:fd:1e:
         4c:bb:28:80:dc:c9:7f:60:35:08:32:45:c3:4a:19:dc:c8:12:
         f3:95:d7:6e:1c:1e:ec:4a:d5:11:ef:f8:32:15:e0:ff:8d:a5:
         69:2b:c3:64:59:a2:29:7d:ad:01:6b:b2:41:7c:09:06:cb:8d:
         83:b1:f0:d1:fb:86:28:63:af:09:51:4f:bb:5e:18:7c:c1:5a:
         c1:1a:35:fe:a1:ee:f7:5e:6e:e0:33:09:81:15:41:e1:6c:b6:
         e3:b3:cc:6f:0d:75:b2:4f:5c:88:6e:14:f3:15:f4:08:62:7d:
         36:24:53:0a:c2:59:b6:11:73:29:d4:c8:7b:3b:42:3e:48:a4:
         d8:c7:b3:8b:79:a4:44:de:b3:51:64:88:c5:0c:f3:b5:e5:9e:
         9f:24:a5:4e:c7:e8:e9:fa:18:51:c1:a5:1e:d2:f2:85:5c:6d:
         b6:e1:60:9f:3c:bf:77:89:6d:a0:18:4b:d7:b6:62:93:ef:99:
         23:14:c3:bd:d9:ef:06:64:f6:15:51:71:35:ea:8e:97:d3:f2:
         e7:b8:57:3b:a0:0c:8f:88:66:04:39:c5:6c:2e:ee:c9:42:62:
         22:97:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org