Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B03B0280488811ECA5D0CA3BD8A014CE.roa
File:                     B03B0280488811ECA5D0CA3BD8A014CE.roa (raw, json)
Hash identifier:          7VfF91qyZdyUqIF8N7zjZTzJ4pMKts5dykm4GUdqohk=
Subject key identifier:   0C:01:22:2E:A3:77:A5:32:77:3D:92:D6:13:2F:50:79:39:7C:CF:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B03B0280488811ECA5D0CA3BD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:00:45 +0000
ROA not before:           Fri 19 Nov 2021 16:00:42 +0000
ROA not after:            Sat 19 Nov 2022 16:00:42 +0000
asID:                     139879
IP address blocks:        154.80.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3448 (0xd78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:00:42 2021 GMT
            Not After : Nov 19 16:00:42 2022 GMT
        Subject: CN=619678ad-af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:6a:5b:f0:29:7e:9f:3a:5b:2e:cd:a9:34:
                    4b:e3:60:db:12:88:16:8f:15:82:c8:6d:6c:36:53:
                    40:26:67:5c:05:8c:0e:bc:de:84:7a:5f:5d:f1:47:
                    6b:98:e9:ab:ef:37:bd:3b:01:2a:ec:0c:97:1f:6f:
                    84:92:2b:c2:78:db:38:b7:21:5b:ad:d0:79:28:b2:
                    d2:54:70:51:f9:58:da:0e:0a:df:15:b6:bd:41:c9:
                    5e:a4:a6:dd:5e:44:03:d9:10:fe:76:d3:f7:5f:f4:
                    08:d1:be:03:c4:be:24:13:84:5d:37:57:34:9d:18:
                    7d:8b:39:dc:91:e4:a6:f2:59:be:72:70:c3:0c:79:
                    63:24:6e:96:92:8a:87:b3:2d:b5:f6:f4:5f:40:96:
                    bd:26:97:bd:a7:48:c3:36:97:e3:c9:c4:2e:d2:e7:
                    14:c5:b1:f0:fc:c5:bc:8b:f5:b0:e0:d4:c1:60:17:
                    d6:2c:e5:b7:72:da:4f:53:96:75:79:94:8d:e9:34:
                    a8:9b:a8:ef:7c:08:79:19:98:87:95:23:22:0d:41:
                    64:f8:55:29:57:49:4c:02:7e:a9:c4:3e:79:30:a6:
                    44:9d:5e:bd:c7:6e:b2:e9:60:72:39:fa:60:a0:dc:
                    aa:2e:a6:e4:3b:44:6f:16:eb:3f:43:ee:02:41:72:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:22:2E:A3:77:A5:32:77:3D:92:D6:13:2F:50:79:39:7C:CF:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B03B0280488811ECA5D0CA3BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:60:17:8c:02:9b:47:36:bd:34:4f:66:5b:a6:8d:09:36:e1:
         20:0f:e7:e9:d1:96:e9:ae:af:50:3e:01:e8:47:0f:44:67:cd:
         a2:48:64:e6:44:9b:06:b3:96:fe:22:d5:f8:d6:74:5e:45:91:
         94:9c:1f:08:ec:0d:29:4e:c8:6f:a5:0e:d8:56:ce:c2:5a:dc:
         d2:44:94:38:f4:d2:bf:cb:5c:eb:e5:6c:a1:93:d3:65:6c:cd:
         77:f1:e8:5e:de:c0:51:15:bd:85:0b:dd:93:23:90:0a:5e:ce:
         f0:2e:f6:62:74:6e:9d:8c:30:33:e4:dd:d0:57:8e:38:8f:72:
         63:3c:49:38:75:a4:72:a9:29:b1:39:1f:86:c3:a4:e4:87:77:
         fc:56:d4:e6:31:41:fa:2e:b7:2b:62:15:65:45:b7:8a:fd:20:
         90:7c:d8:1f:34:08:dc:70:65:03:cd:d1:c3:cc:a1:3f:3b:b6:
         13:34:c2:f5:02:fe:af:cb:d2:79:ae:f2:20:fe:0e:20:4d:b4:
         8b:3f:c8:11:a2:79:87:0c:78:e6:d5:19:94:f0:c3:ef:ab:b9:
         ca:b9:15:89:4b:b7:28:59:7f:9a:06:80:55:c9:61:f9:17:01:
         eb:42:b3:3d:b9:e3:3d:98:19:e1:f9:0c:80:c1:0b:74:3a:10:
         a9:22:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org