Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
File:                     C55AB98490AA11EC863AB5B95A40D577.roa (raw, json)
Hash identifier:          R/T/8ApbgP7vA5A7JUPNoAcRTOqqSekr+GTzjNqjuQk=
Subject key identifier:   F6:C6:47:78:34:34:3D:D9:B1:F4:21:8C:9A:B2:1C:8D:09:56:BB:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       14D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
Signing time:             Fri 18 Feb 2022 11:06:07 +0000
ROA not before:           Fri 18 Feb 2022 11:06:04 +0000
ROA not after:            Fri 30 Dec 2022 11:06:04 +0000
asID:                     137951
IP address blocks:        154.209.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5334 (0x14d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 18 11:06:04 2022 GMT
            Not After : Dec 30 11:06:04 2022 GMT
        Subject: CN=620f7d9f-92fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:1f:7f:df:7d:37:a1:ab:3a:76:4e:d3:36:
                    0a:e0:f6:22:b4:55:4c:56:14:cd:26:ab:6c:d9:68:
                    5f:c7:bf:26:b7:e9:4a:6a:64:6b:88:22:cc:8b:7c:
                    56:76:27:8c:f7:39:cd:e5:5a:5a:f2:18:5d:82:9d:
                    92:5b:9a:dc:d3:e8:50:10:93:d3:cb:94:b7:70:74:
                    9a:f5:e9:ef:d0:38:b2:f7:6a:79:ba:99:38:d7:91:
                    da:33:cb:a7:80:5a:69:00:3c:d8:ae:18:ec:1e:17:
                    7a:66:b5:63:36:b6:da:2d:3c:98:e7:73:71:ff:98:
                    ca:e4:ca:dd:46:49:f8:c4:09:d8:48:b5:fc:b5:4c:
                    06:06:41:a8:43:8f:4a:72:3f:38:7a:4e:a3:6c:b1:
                    e9:1f:17:c1:ed:f9:6b:0d:5c:c1:5e:a8:23:b0:ea:
                    b0:4f:af:fe:66:6a:d2:00:a5:eb:9b:98:7c:c6:67:
                    d4:19:ce:a2:6f:b5:89:fc:f2:50:c3:f0:ac:26:02:
                    e6:4d:d1:75:0b:d6:5a:62:79:cb:69:8e:76:41:38:
                    4b:29:44:92:f0:05:f8:6d:51:3a:0c:84:45:2d:14:
                    67:16:6f:7f:6b:f1:cc:1c:fc:07:e2:17:17:13:bd:
                    60:0f:2f:95:f9:87:8c:ab:bc:f8:ea:66:3f:83:08:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C6:47:78:34:34:3D:D9:B1:F4:21:8C:9A:B2:1C:8D:09:56:BB:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:ac:e2:64:38:54:7b:22:be:d4:0b:19:90:a3:f7:65:7c:
         ef:95:00:39:be:91:47:a8:ca:1f:8f:e1:21:2a:65:a6:57:15:
         60:fa:eb:f8:7f:ef:86:0e:c6:a2:06:e9:57:92:cc:2b:63:58:
         83:f9:02:9d:00:ee:04:bc:4b:64:da:6b:63:d5:d4:de:7e:3e:
         90:a2:0d:06:67:3b:59:ea:ca:d3:ae:a1:ec:18:54:ff:10:47:
         0c:c5:e1:d5:b3:7a:c7:66:6e:48:8c:73:36:5a:d7:60:68:9b:
         48:b0:58:88:c7:24:41:fd:00:8c:74:35:30:3e:19:25:a7:1f:
         32:3e:83:e9:46:f2:53:3b:95:7e:76:74:55:9b:44:e8:ed:17:
         91:a8:88:af:4b:e6:92:56:26:fd:1b:58:2a:93:7c:21:f6:98:
         80:75:de:a3:b8:47:16:8e:9d:0a:21:bd:83:f0:63:1f:91:54:
         53:c9:1d:58:86:65:38:5b:ad:d7:8f:1d:c5:0c:e4:4b:50:f3:
         c3:db:34:29:a4:8b:c7:3d:b8:f4:ad:aa:15:3c:4b:ee:c8:03:
         03:2a:7f:a1:8e:8a:f9:f2:04:ca:12:2e:cf:23:6a:24:d3:df:
         92:8f:76:be:0d:7e:94:a8:17:10:77:b8:f8:95:93:4b:04:6c:
         2d:6e:82:8e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFNYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjAyMTgxMTA2MDRaFw0yMjEyMzAxMTA2MDRaMBgxFjAU
BgNVBAMMDTYyMGY3ZDlmLTkyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKFh9/3303oas6dk7TNgrg9iK0VUxWFM0mq2zZaF/Hvya36UpqZGuIIsyL
fFZ2J4z3Oc3lWlryGF2CnZJbmtzT6FAQk9PLlLdwdJr16e/QOLL3anm6mTjXkdoz
y6eAWmkAPNiuGOweF3pmtWM2ttotPJjnc3H/mMrkyt1GSfjECdhItfy1TAYGQahD
j0pyPzh6TqNssekfF8Ht+WsNXMFeqCOw6rBPr/5matIApeubmHzGZ9QZzqJvtYn8
8lDD8KwmAuZN0XUL1lpiectpjnZBOEspRJLwBfhtUToMhEUtFGcWb39r8cwc/Afi
FxcTvWAPL5X5h4yrvPjqZj+DCIUXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9sZH
eDQ0Pdmx9CGMmrIcjQlWu5gwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M1NUFCOTg0OTBBQTExRUM4NjNBQjVCOTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0bowDQYJKoZIhvcNAQEL
BQADggEBAGi5rOJkOFR7Ir7UCxmQo/dlfO+VADm+kUeoyh+P4SEqZaZXFWD66/h/
74YOxqIG6VeSzCtjWIP5Ap0A7gS8S2Taa2PV1N5+PpCiDQZnO1nqytOuoewYVP8Q
RwzF4dWzesdmbkiMczZa12Bom0iwWIjHJEH9AIx0NTA+GSWnHzI+g+lG8lM7lX52
dFWbROjtF5GoiK9L5pJWJv0bWCqTfCH2mIB13qO4RxaOnQohvYPwYx+RVFPJHViG
ZThbrdePHcUM5EtQ88PbNCmki8c9uPStqhU8S+7IAwMqf6GOivnyBMoSLs8jaiTT
35KPdr4NfpSoFxB3uPiVk0sEbC1ugo4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org