Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0B1DF3E0E5411ED996F9DB3F1222468.roa
File:                     C0B1DF3E0E5411ED996F9DB3F1222468.roa (raw, json)
Hash identifier:          q5nS1KpWVO0XwV7rAUX4Dx2j9IkU4R/QG8Y70S7HnAU=
Subject key identifier:   D4:C6:67:D5:9E:63:B9:6A:1D:BB:7E:DD:89:A5:47:9B:46:52:E2:38
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       17CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0B1DF3E0E5411ED996F9DB3F1222468.roa
Signing time:             Thu 28 Jul 2022 09:07:49 +0000
ROA not before:           Thu 28 Jul 2022 09:07:46 +0000
ROA not after:            Mon 15 May 2023 09:07:46 +0000
asID:                     397630
IP address blocks:        154.202.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6092 (0x17cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 28 09:07:46 2022 GMT
            Not After : May 15 09:07:46 2023 GMT
        Subject: CN=62e251e5-e165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:06:2a:89:d4:fb:8e:06:2c:18:25:9c:e8:
                    a5:19:dd:c9:32:39:e1:58:75:41:09:9b:b9:04:3d:
                    72:d0:f0:81:1c:d6:a4:0b:75:33:f4:ab:d8:a0:a0:
                    6b:c5:44:f6:39:9a:56:2d:8c:71:22:19:9e:fa:04:
                    e4:bf:d2:8d:97:31:07:24:b5:01:45:15:4c:3a:68:
                    cf:09:81:e1:48:40:e6:8e:4d:6a:0f:9c:cb:3f:03:
                    ce:08:8e:9c:88:e3:db:fa:58:33:c4:f5:44:47:1f:
                    ca:e2:c4:64:92:d9:5b:5c:97:da:1c:c6:56:97:cb:
                    4a:6c:1d:95:4a:f8:07:0a:3d:3c:8f:09:37:ca:25:
                    08:55:eb:f1:5f:4d:8f:dc:a6:5d:03:38:6f:4a:83:
                    8c:71:e4:6d:ef:fd:7e:ca:35:d8:87:63:d4:d9:b8:
                    90:31:23:08:04:20:29:6e:f5:f7:c6:c2:c6:05:94:
                    61:6b:87:b4:bf:c5:31:ba:da:87:1b:1f:86:83:71:
                    9c:c4:fb:e9:e8:fe:1a:7e:a2:1d:0d:4b:80:d9:a5:
                    4a:bd:6a:5d:de:6d:02:89:35:4b:16:ab:e4:eb:76:
                    42:dd:41:fb:93:fb:fe:75:06:f7:39:a4:63:b3:aa:
                    c3:f4:82:e4:27:24:30:98:67:ee:05:b0:df:2c:dd:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:67:D5:9E:63:B9:6A:1D:BB:7E:DD:89:A5:47:9B:46:52:E2:38
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0B1DF3E0E5411ED996F9DB3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:87:59:42:15:19:1f:98:39:43:d9:60:9d:07:28:62:f9:
         9e:8e:31:bb:a0:81:9f:a7:44:26:35:9e:ec:54:41:de:b3:45:
         89:9e:7b:07:92:b9:de:a1:c1:9b:86:aa:23:39:a3:6c:14:b2:
         c4:96:4f:32:a2:a3:3d:7b:5d:ca:6e:e3:c2:12:67:6a:76:7e:
         a4:93:12:55:72:ab:9e:93:4b:31:76:20:94:b4:d8:0b:dc:32:
         0e:f6:f1:29:a1:b8:bd:cb:77:95:41:f3:db:bb:fb:21:85:96:
         f2:8d:dd:ac:ad:c4:72:f9:8d:72:12:52:d4:c6:53:49:6a:64:
         ee:e8:28:a8:00:fc:6d:bc:ce:37:9e:ff:03:0b:f5:9c:ce:eb:
         08:0d:b1:ad:3b:48:a8:e7:dd:8e:0f:96:ec:d1:78:dd:72:aa:
         b9:39:c1:6c:34:ce:2f:02:e9:64:ea:91:3f:28:fb:2f:ed:02:
         0e:71:3d:63:4c:0c:bf:cb:ec:8c:1e:fb:3c:7f:2e:3b:b6:31:
         ad:42:1f:33:aa:b8:cb:35:ba:d5:d5:e7:ce:98:54:16:b4:da:
         ea:e8:a1:69:d0:b0:d7:a4:8d:cb:da:e2:e7:ff:05:21:66:c8:
         99:e8:99:5c:e4:df:76:68:2f:5c:cf:21:3b:d9:d4:7b:d4:75:
         53:58:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org