Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
File:                     CF8F2ADAF81E11EC92AB11A2F1222468.roa (raw, json)
Hash identifier:          Eg0NX2VzGV2kFanSVnXUpHa7xLa8pHWyQ5zOsSXFmdk=
Subject key identifier:   12:C9:7B:EF:1C:91:44:A3:D1:97:57:40:4F:B5:83:3F:EB:A3:36:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       170B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
Signing time:             Thu 30 Jun 2022 02:46:16 +0000
ROA not before:           Thu 30 Jun 2022 02:46:12 +0000
ROA not after:            Fri 30 Dec 2022 02:46:12 +0000
asID:                     328608
IP address blocks:        154.205.176.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5899 (0x170b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 30 02:46:12 2022 GMT
            Not After : Dec 30 02:46:12 2022 GMT
        Subject: CN=62bd0e78-d0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:35:ca:de:8e:ef:53:f2:a8:cb:de:03:0d:
                    67:00:0a:b3:31:2a:f6:89:cd:51:ac:8c:22:61:56:
                    4a:6a:d4:b5:05:51:07:7a:e6:59:82:4a:8f:09:a3:
                    e7:4f:70:5d:cd:3b:24:4b:9c:f6:9e:e9:e2:29:ba:
                    02:43:95:dc:03:7a:67:8c:cf:24:c2:59:d3:e2:ad:
                    38:c7:55:a8:85:23:c4:44:27:c4:cd:44:3c:d7:af:
                    9b:19:10:2c:fd:12:8e:47:b4:9c:61:56:bb:6b:89:
                    20:af:0e:5e:11:cd:76:95:e9:67:cd:3a:9b:4a:66:
                    fd:d7:e2:3f:21:6e:e2:08:48:83:9a:c8:cf:27:9c:
                    4f:5f:52:c9:35:cf:9f:fe:d1:d8:1a:bc:a6:42:0e:
                    b2:69:92:1d:5c:3a:0a:aa:98:9c:c5:ab:2d:f6:cb:
                    ab:b9:86:3c:6a:1d:8c:48:e2:91:cf:25:c6:4e:d3:
                    cd:2f:97:d0:3a:89:a8:85:0d:c1:92:b7:8c:97:5d:
                    34:24:93:bb:a5:92:2b:62:27:c8:59:d2:bb:74:ae:
                    56:a4:a3:e3:68:b3:a5:25:bb:28:f4:07:85:24:63:
                    15:91:cd:a3:d9:bf:f8:32:74:11:af:4d:29:78:e2:
                    57:47:72:56:c4:68:32:00:84:08:79:c9:64:fc:5b:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C9:7B:EF:1C:91:44:A3:D1:97:57:40:4F:B5:83:3F:EB:A3:36:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:8c:c9:37:60:f1:0b:1f:08:21:89:3f:09:53:ea:d4:8f:
         86:12:dc:6e:81:4b:e6:a9:e2:07:fa:24:d3:97:c2:03:0f:18:
         43:e0:84:4f:f4:bd:8b:6a:88:8e:32:ae:43:05:2d:f7:96:60:
         ba:7a:66:76:f4:b0:bc:f7:e8:65:d7:a3:0e:79:ec:79:51:60:
         cb:45:5c:f9:8c:10:09:04:d3:18:a4:4d:ce:2b:af:bc:54:86:
         a7:36:ed:ee:d2:82:ad:5b:e1:c1:12:86:b9:cd:fe:d5:05:b0:
         22:97:87:49:3e:3a:c2:fb:b8:c4:55:5a:b3:dc:e5:61:c6:2f:
         d1:8f:27:7f:61:0a:10:4e:df:83:8d:63:33:c6:2d:32:5b:d3:
         76:25:58:d1:b4:17:23:41:f6:dc:f0:72:01:64:bb:d6:af:d8:
         04:77:c9:e2:53:46:51:d1:37:7f:34:4d:ef:59:84:78:f0:b4:
         41:32:45:e9:63:90:8b:01:31:46:1b:23:3b:9f:a7:3c:8e:d7:
         6d:18:fa:3d:c0:41:71:e6:d5:30:1a:64:2c:0d:6d:50:36:dd:
         6c:8e:83:ab:a0:e9:a1:93:04:d9:9b:35:3d:02:09:ce:11:35:
         2e:66:b3:6b:31:aa:38:ad:5c:c4:c8:44:76:52:f3:d9:1a:73:
         ef:45:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org