Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
File:                     A0E6D7BCE57F11EBA32B732DF8AEA228.roa (raw, json)
Hash identifier:          WlwclKvVyBLt/iqvzrsAp11wxGyHeEP8vglbWmV9TcA=
Subject key identifier:   04:30:8A:80:3A:15:3B:71:C7:75:DD:C5:5F:57:A9:34:13:0B:EC:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       07E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:16:29 +0000
ROA not before:           Thu 15 Jul 2021 15:16:25 +0000
ROA not after:            Sat 09 Jul 2022 15:16:25 +0000
asID:                     397630
IP address blocks:        154.202.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:16:25 2021 GMT
            Not After : Jul  9 15:16:25 2022 GMT
        Subject: CN=60f0514d-7283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:aa:af:b9:47:21:67:5e:f6:d6:c7:16:4e:
                    ad:2c:e0:d2:53:8f:c6:0c:d4:84:cf:12:73:ce:ac:
                    1e:84:ca:bd:66:12:87:1e:51:32:59:d6:ef:90:7e:
                    9e:c7:1b:00:e4:dd:26:f3:0b:4d:b1:ae:87:8d:2e:
                    bd:80:f4:a3:35:d9:16:0c:6b:80:d9:1c:16:42:38:
                    6f:5d:8c:fe:9b:58:94:97:eb:82:c8:19:f4:c4:03:
                    54:00:ae:e9:b4:7d:56:9b:b5:65:dc:75:21:25:79:
                    db:c4:66:0c:2a:ba:9e:25:f2:cb:3b:2b:e5:dc:7e:
                    3f:ca:ac:47:6d:fd:30:eb:99:1e:be:84:7b:dd:80:
                    b9:3e:f0:62:92:38:ff:02:02:d3:f1:90:7e:e5:7d:
                    ae:6e:5d:fc:78:04:7a:c0:4a:58:63:31:49:72:d5:
                    e3:e9:df:52:e7:3b:c9:7f:d0:00:cc:88:b3:cd:9a:
                    a6:cc:ca:78:9d:43:c9:3e:12:e4:29:67:5d:a0:cb:
                    d5:cf:64:2d:91:98:ea:19:d1:fa:9d:66:08:ec:8a:
                    6d:a7:25:1c:c5:a5:67:77:93:0c:8d:09:ce:29:85:
                    2d:ee:53:0c:ef:c7:38:ed:83:04:78:20:f0:b3:71:
                    81:67:45:cf:6c:f6:25:49:3f:15:fc:60:90:50:3c:
                    08:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:30:8A:80:3A:15:3B:71:C7:75:DD:C5:5F:57:A9:34:13:0B:EC:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:0a:cf:39:be:76:2f:7a:8c:7e:aa:6b:3e:a1:e5:2b:6b:
         80:6f:88:64:92:14:3d:02:72:16:60:1f:83:30:a4:2f:ef:af:
         31:5b:f2:03:4b:53:67:60:f8:f8:21:0c:d0:79:46:b5:e2:15:
         e1:7c:40:94:fd:f7:29:47:67:56:57:24:68:5b:64:6a:c9:89:
         2c:cc:3c:90:49:93:c6:98:13:bb:7e:7f:05:0c:63:9e:07:89:
         a2:a6:f0:3e:d4:7b:62:d0:5f:ac:1e:2a:39:48:ab:ac:07:14:
         26:87:1b:70:45:6d:cc:91:42:93:0a:81:68:95:3c:b9:b8:e9:
         2d:82:50:a7:35:25:0a:4f:b9:f3:ed:af:2e:ba:7d:78:23:b9:
         f1:c5:e7:eb:0f:ba:7c:b2:3a:6f:c8:2f:49:6e:c5:9d:b4:02:
         45:4c:2b:86:b7:e2:48:2e:99:ea:c5:72:48:39:a7:72:01:8f:
         ee:4c:11:6b:78:83:0d:f4:15:e5:f0:b4:d5:bd:61:af:1a:49:
         c7:36:cc:94:75:e2:0d:31:7f:81:6a:68:e8:74:e0:a3:e0:68:
         24:02:79:dc:0f:4c:53:9b:30:64:18:97:4a:3b:1c:2d:c7:19:
         31:7d:6c:2c:dd:7a:a8:97:38:4a:66:49:e1:63:6d:02:22:a6:
         c8:32:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org