Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C14807B63AF011ED898310DAF1222468.roa
File:                     C14807B63AF011ED898310DAF1222468.roa (raw, json)
Hash identifier:          BJLAkFMXTEzTTtgp4g2y3d5Ocoz2eg8ozJB7RvcQ6cU=
Subject key identifier:   EB:49:4E:BC:7D:44:10:42:7F:B3:7A:0F:82:B0:90:18:F3:E9:9A:77
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       18FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C14807B63AF011ED898310DAF1222468.roa
Signing time:             Fri 23 Sep 2022 03:35:23 +0000
ROA not before:           Fri 23 Sep 2022 03:35:20 +0000
ROA not after:            Sat 15 Oct 2022 03:35:20 +0000
asID:                     45887
IP address blocks:        154.90.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6396 (0x18fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 23 03:35:20 2022 GMT
            Not After : Oct 15 03:35:20 2022 GMT
        Subject: CN=632d297b-ced0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:77:2b:4f:70:08:a1:0c:20:ac:37:9e:28:
                    e2:30:96:c9:1e:29:8d:21:19:20:cd:fd:eb:10:50:
                    5e:4a:ac:13:3f:b1:f0:51:9e:90:c5:d2:8b:4a:6f:
                    52:36:46:3e:d4:f0:ec:f4:45:10:cb:95:cb:8e:21:
                    63:cd:af:cf:45:be:3d:73:72:89:9b:11:82:93:57:
                    1a:0f:a1:9e:b0:ae:05:b1:1f:f3:46:17:c5:cb:e8:
                    40:0a:b4:ac:a9:fb:5f:24:be:61:ac:52:b9:44:cc:
                    54:2b:de:fa:0a:b5:15:ef:e5:43:a9:9a:e7:ea:ee:
                    b5:01:21:e8:b0:c8:04:ef:56:28:eb:77:cd:b3:b4:
                    0c:3d:9e:67:c0:10:39:64:e3:f6:d7:a0:9d:79:a4:
                    59:2b:06:03:8f:26:ed:81:ed:bd:11:e0:75:e9:fa:
                    14:6c:ca:e8:1a:f3:d3:cd:91:00:51:8f:60:bb:05:
                    c8:93:09:b6:f3:7a:4b:bc:6a:b5:78:36:55:ec:79:
                    dd:02:7d:fe:44:18:51:a0:59:12:2f:b0:f4:e6:ea:
                    5e:1a:af:c6:63:d3:db:1d:cd:0d:d4:94:a4:3a:9e:
                    c6:9f:f1:73:30:e3:81:8c:3d:c6:c0:42:51:a1:28:
                    5a:d6:90:ba:61:64:bc:ea:be:ce:20:d1:58:2e:4e:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:4E:BC:7D:44:10:42:7F:B3:7A:0F:82:B0:90:18:F3:E9:9A:77
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C14807B63AF011ED898310DAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:3f:3d:45:a1:ba:d3:62:16:f9:40:13:73:7b:2a:3a:fd:
         d7:9d:9a:ee:4d:72:87:20:55:5d:74:3a:7c:f1:54:da:ea:eb:
         bf:fc:0a:15:73:63:61:c7:71:ed:eb:98:9e:86:75:f0:cb:01:
         e7:4f:63:90:bd:9d:a5:dd:3a:63:4b:5b:60:9f:80:33:74:5f:
         96:8c:cd:ec:23:8a:c8:7f:58:85:0f:75:2c:21:56:95:f6:45:
         55:c7:d1:a9:e1:19:43:27:e4:ae:a7:7d:b0:8c:cd:3e:a4:56:
         5b:97:fb:99:26:23:4a:5e:b5:52:68:53:5e:13:c1:41:76:4a:
         20:64:de:7d:83:42:d1:16:f6:e8:34:3a:65:99:77:6c:da:56:
         24:4e:d9:15:d0:01:25:1d:99:0a:65:6d:42:14:23:d4:fa:6f:
         f3:5d:53:5a:d4:ff:b9:7b:dd:ac:a1:6d:0f:20:99:09:cc:8d:
         a9:ac:55:36:34:b1:00:1b:09:2f:8c:5d:57:0d:cc:36:ff:3a:
         be:43:5f:e3:80:2f:29:37:d0:f2:65:0c:5e:e6:58:59:1a:0c:
         ad:18:b8:d8:4c:a7:bf:bc:da:9c:09:ed:07:81:d6:60:9d:09:
         ad:61:af:c2:d3:14:1c:fa:4e:40:cd:4e:49:7a:ed:d3:23:c4:
         1f:bb:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org