Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
File:                     9E7C2C42CFA411ECB1CB4EA0F1222468.roa (raw, json)
Hash identifier:          LqyNth6wMuHe+VIeLdK+Q4JK08YkRcRN9rONKJJ/Zqc=
Subject key identifier:   82:96:F9:6A:83:19:56:DE:99:BD:3F:D9:90:B8:E3:63:A4:18:7D:CD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1627
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
Signing time:             Mon 09 May 2022 14:30:48 +0000
ROA not before:           Mon 09 May 2022 14:30:45 +0000
ROA not after:            Wed 31 May 2023 14:30:45 +0000
asID:                     136970
IP address blocks:        154.213.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5671 (0x1627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  9 14:30:45 2022 GMT
            Not After : May 31 14:30:45 2023 GMT
        Subject: CN=62792598-e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:89:02:b0:d3:f4:4c:26:f3:8d:6c:f3:28:
                    c5:c0:8d:92:b6:3f:d9:5c:4f:93:c3:10:93:41:08:
                    3c:b0:95:d1:dc:2f:5b:f3:22:b7:93:91:9b:d3:a1:
                    a6:e3:dc:28:84:07:8f:2f:53:67:8b:9d:a5:c0:df:
                    c5:fc:7d:4d:ef:2d:a1:fd:15:f5:08:d5:9c:82:14:
                    7b:3b:09:69:66:b2:51:58:cf:41:c7:22:2b:c6:84:
                    6d:df:66:c5:09:3e:cd:f1:4b:76:c4:1f:b8:39:f6:
                    de:fc:ae:66:36:2e:26:48:57:66:b6:74:28:b3:fa:
                    79:c6:90:4e:7c:e0:63:be:7f:74:a1:de:4d:63:42:
                    da:49:59:a8:51:9d:41:f7:7d:67:e0:de:c6:02:cf:
                    d8:f1:78:8f:01:37:1e:62:5b:e6:5e:e1:21:7d:e7:
                    70:5c:05:d8:18:63:6d:93:e3:b7:41:1f:b4:bb:ec:
                    36:a9:ee:41:50:3c:e6:29:19:75:c8:f0:8f:04:7a:
                    16:93:ae:5a:76:ae:0a:d4:7e:4b:9c:ad:4d:64:90:
                    61:87:f4:e3:fd:a3:c1:fc:c9:b5:58:e0:b1:cc:9f:
                    08:ac:66:fd:d3:fe:e7:61:84:b0:2f:c9:93:24:99:
                    56:3a:97:25:f7:34:a9:cb:9c:79:2d:3b:31:03:b2:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:F9:6A:83:19:56:DE:99:BD:3F:D9:90:B8:E3:63:A4:18:7D:CD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:ac:30:11:9e:67:f1:a5:94:87:02:fb:a0:69:6c:07:3b:
         00:ba:bb:4a:44:60:aa:e5:f9:df:4e:4d:2e:33:0c:ee:ce:61:
         8e:b9:10:e2:ca:7a:90:aa:c9:3f:87:f3:b1:54:39:75:91:72:
         d2:3b:2b:8e:af:35:3d:bf:5e:bc:20:9c:f9:07:45:b6:60:99:
         8c:29:4b:77:d0:e0:54:ab:20:81:fd:cc:80:0b:d0:50:95:ec:
         b9:31:56:82:97:79:64:d2:9d:8f:c2:ef:ef:07:55:68:29:b5:
         40:3c:3a:40:b2:07:6f:7e:39:fb:35:61:50:e6:7f:fe:4b:28:
         a5:a8:89:21:24:93:64:b4:17:c2:05:f6:9a:46:29:f1:77:60:
         9b:07:69:ac:2e:60:5e:d9:8b:2e:73:8e:4b:59:55:8c:39:a5:
         2c:c5:11:00:ad:7f:36:c3:aa:23:3d:45:6a:d2:51:af:0f:32:
         07:7c:27:6c:41:21:88:08:65:8e:19:5b:72:4f:05:15:9c:08:
         79:f6:57:f9:d3:a7:a9:2d:1f:5d:d0:44:25:a0:9f:ea:72:67:
         18:a5:ea:7f:fb:52:f5:0e:ec:3f:06:b2:15:ca:cb:b6:0a:d5:
         7a:42:fc:8e:31:77:e0:22:aa:43:c3:b8:4c:85:ec:57:22:7e:
         2f:11:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org