Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65D45B2125111EDA278AEDDF1222468.roa
File:                     C65D45B2125111EDA278AEDDF1222468.roa (raw, json)
Hash identifier:          hyvQYuoGunmEOb7O0VS4uJLD/TF612zev4PxmKxcAIw=
Subject key identifier:   A7:3A:51:63:FA:31:FE:A5:56:B8:D9:50:6F:2D:89:F1:BD:E7:8F:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       17DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65D45B2125111EDA278AEDDF1222468.roa
Signing time:             Tue 02 Aug 2022 10:56:35 +0000
ROA not before:           Tue 02 Aug 2022 10:56:31 +0000
ROA not after:            Sun 25 Jun 2023 10:56:31 +0000
asID:                     133861
IP address blocks:        154.197.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6110 (0x17de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  2 10:56:31 2022 GMT
            Not After : Jun 25 10:56:31 2023 GMT
        Subject: CN=62e902e3-b723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:f9:c7:b8:10:ea:d9:1e:30:43:29:d4:03:
                    ac:b4:ee:3a:5a:bb:bc:ea:5c:c7:14:c2:3b:a8:fc:
                    c0:c0:cb:ef:74:14:67:87:26:1b:00:f2:06:37:ad:
                    d7:4b:23:95:d8:a5:c9:eb:c8:6a:18:c8:27:38:c5:
                    68:5e:cf:94:05:de:b4:15:71:17:6d:80:5a:72:f6:
                    bd:2d:80:76:a7:8f:e7:64:51:99:b6:1b:1e:f8:ba:
                    bc:94:8a:c7:fa:f7:af:ef:97:e4:95:de:f9:e7:68:
                    87:d3:3e:fa:59:9e:18:0c:5e:83:b6:6b:08:5e:6b:
                    4d:7e:99:e3:49:f9:31:ab:64:2e:d1:33:6f:2c:7a:
                    a5:dc:a2:dc:2e:ab:d8:04:6f:74:1a:56:b0:9d:62:
                    19:dd:6c:87:11:e7:4b:3d:b5:e5:b9:08:e3:4c:c2:
                    90:95:27:c4:a4:16:0c:35:13:d8:64:97:d0:2b:bf:
                    79:6c:36:5d:75:b0:a6:b2:d4:8f:f5:63:3a:6d:eb:
                    8a:17:a2:58:ad:88:9d:2e:3f:ff:4f:07:92:78:0d:
                    e8:90:9b:7d:d3:49:3d:7d:da:97:89:98:e0:64:55:
                    d6:be:65:16:e3:c9:f4:a6:54:ff:6b:2b:c8:d5:8c:
                    d9:07:a9:a3:de:cc:a8:b4:da:13:0d:09:47:30:aa:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:51:63:FA:31:FE:A5:56:B8:D9:50:6F:2D:89:F1:BD:E7:8F:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65D45B2125111EDA278AEDDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:98:fa:42:03:aa:61:9c:08:e1:d4:b5:9e:5a:96:ca:83:e9:
         16:eb:5e:a4:31:65:43:da:03:47:66:64:27:53:66:30:8f:e0:
         26:6c:1a:0f:52:ed:70:98:19:04:2a:b4:69:a3:9e:e0:c9:cd:
         41:d4:ad:75:0b:61:25:9f:4a:07:41:9b:e9:77:ad:3c:f2:c0:
         0d:94:90:bf:78:e7:47:47:29:e1:5d:d8:19:20:d9:6e:50:7a:
         b7:9c:45:32:09:ec:ff:e3:36:4e:5e:3f:36:6c:dd:31:cb:df:
         ff:16:8c:57:36:c8:8b:84:8c:ab:da:cc:2e:28:c1:9b:74:15:
         41:fd:7c:86:36:d2:ce:ca:99:26:ac:51:fa:29:58:f9:a8:db:
         e4:32:ee:62:78:cb:35:6a:af:a2:0f:e1:73:c7:ea:e1:c6:25:
         b7:0e:ed:cf:dd:6d:c5:37:60:70:b1:ac:1c:68:4e:8d:9d:e7:
         05:60:1a:e1:de:1b:ab:5c:12:3a:b4:e3:e4:53:3a:a5:cc:f5:
         fe:86:23:6c:dd:c4:97:3a:dd:c9:4b:df:de:bb:98:d1:6a:7b:
         35:1c:58:13:f2:bd:1a:ef:af:2e:62:94:ce:b7:7d:9f:3c:19:
         7d:2d:3b:09:8b:3c:93:31:44:89:ae:96:db:ef:ec:33:d5:7a:
         a0:d8:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org