Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB9EA5CCDC111EB800EA364F8AEA228.roa
File:                     BEB9EA5CCDC111EB800EA364F8AEA228.roa (raw, json)
Hash identifier:          fUBJRtmmtiKC3oxkvwcezN9juKRna7YrjjCHNLpyQ68=
Subject key identifier:   D6:75:A6:AD:AE:B8:70:46:43:49:E1:11:EF:8E:8A:10:72:8F:09:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       072B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB9EA5CCDC111EB800EA364F8AEA228.roa
Signing time:             Tue 15 Jun 2021 10:09:18 +0000
ROA not before:           Tue 15 Jun 2021 10:09:14 +0000
ROA not after:            Wed 10 Aug 2022 10:09:14 +0000
asID:                     399746
IP address blocks:        154.202.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 15 10:09:14 2021 GMT
            Not After : Aug 10 10:09:14 2022 GMT
        Subject: CN=60c87c4e-0101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:ba:50:c0:26:c5:f5:22:0d:8b:75:68:95:
                    0e:5c:9a:e9:00:e0:f6:6f:4d:4a:c3:ad:55:63:4b:
                    58:43:a8:5e:72:af:83:41:8d:af:9c:cf:20:b9:97:
                    d5:9a:2f:2c:16:48:2a:c0:e8:c7:47:fe:cd:1a:1c:
                    bc:2a:d3:b6:3b:89:f7:84:9f:97:e1:63:76:28:72:
                    61:46:79:ed:e1:ea:79:11:d9:c6:5c:1b:42:ee:72:
                    c4:2c:9c:50:73:a9:29:43:3e:6e:87:f6:66:b1:86:
                    b9:fd:0b:85:ce:36:02:00:c5:a1:e7:5a:44:47:bb:
                    3c:d9:74:61:37:9f:33:b6:b0:05:db:ef:1d:75:a0:
                    11:6f:69:69:29:a2:93:8a:2b:bc:3e:6f:68:35:4a:
                    cb:75:59:0d:dd:c2:38:fa:6d:3a:eb:2b:c7:06:35:
                    2f:c1:b6:ce:a8:c8:8c:14:1c:77:59:27:f6:43:75:
                    19:6d:f5:91:2c:68:dd:98:c3:21:5c:f0:17:81:c3:
                    ba:20:ea:de:26:2b:61:ea:c3:fc:52:ef:5f:a7:02:
                    5c:55:90:f4:13:4c:4a:2a:6f:29:ba:06:6d:65:0a:
                    ad:5c:18:25:b2:2c:06:9a:ad:f9:29:84:93:60:be:
                    c4:12:eb:43:c4:40:4d:13:dd:cd:2f:ce:1f:2c:fe:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:75:A6:AD:AE:B8:70:46:43:49:E1:11:EF:8E:8A:10:72:8F:09:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEB9EA5CCDC111EB800EA364F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:46:f9:65:27:9f:89:bc:c1:c6:f4:b1:2d:89:a3:49:57:
         bf:29:48:df:14:c3:fb:dd:39:21:3e:a4:3a:33:33:41:f3:ba:
         e2:d8:d8:3e:da:bd:a4:4c:e2:3f:46:b5:39:b1:42:6a:5b:51:
         03:2e:bf:53:8a:f2:1f:2f:b6:31:61:fd:d0:10:4e:b1:6a:f4:
         a8:aa:8f:57:51:d7:2c:98:a5:ef:fd:36:e0:3d:e2:23:dd:f9:
         2b:70:db:70:87:f9:98:b6:15:f1:59:0b:3c:35:b5:5c:b3:be:
         00:2c:81:bf:fd:de:7e:12:cc:33:60:23:d1:ad:ff:f2:7f:e9:
         28:e1:69:50:67:4f:03:93:32:09:60:27:4c:01:cf:31:a8:df:
         46:01:ea:12:ac:c4:32:97:73:b1:32:90:e4:af:2c:ad:03:bb:
         fe:87:fc:8e:ff:70:9a:e2:5a:fd:38:ec:63:1a:a9:7d:1f:9d:
         de:97:39:9f:b6:2f:f6:54:dc:6b:0c:5e:93:c8:70:aa:84:4f:
         7d:fa:c8:2c:fd:50:60:c4:97:f3:f9:5d:d0:54:e9:19:61:4e:
         bf:31:96:41:98:7f:dc:7a:7c:4d:9a:4f:2f:06:8e:a2:82:58:
         62:36:38:c6:d5:28:c4:ae:5b:c8:ec:57:12:98:c6:03:86:95:
         59:28:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org