Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC8FA9D6476A11ECA8ECFD78D8A014CE.roa
File:                     DC8FA9D6476A11ECA8ECFD78D8A014CE.roa (raw, json)
Hash identifier:          kOeUmGy6v0PnAGd2QoDn9V2XSVOBabehxdNQHn0rqsg=
Subject key identifier:   34:B3:FB:A7:B7:1D:41:39:8D:02:B3:27:A7:28:04:C4:E0:F1:97:8E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0CEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC8FA9D6476A11ECA8ECFD78D8A014CE.roa
Signing time:             Wed 17 Nov 2021 05:54:43 +0000
ROA not before:           Wed 17 Nov 2021 05:54:40 +0000
ROA not after:            Sat 17 Dec 2022 05:54:40 +0000
asID:                     134428
IP address blocks:        154.222.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 05:54:40 2021 GMT
            Not After : Dec 17 05:54:40 2022 GMT
        Subject: CN=61949923-3e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:b3:81:f9:dc:84:fd:05:9a:5c:f6:65:f3:
                    59:77:25:5b:03:25:33:17:66:58:f0:28:18:34:a5:
                    f7:99:2e:af:d5:34:af:c2:fb:e1:8b:ef:30:4d:aa:
                    82:fb:0a:21:82:0a:b2:dc:75:17:63:33:b9:57:9e:
                    90:76:d4:b2:fa:6a:2e:4d:84:a3:dc:42:7c:3a:6c:
                    57:0d:7d:52:1d:d8:c2:e6:7f:e7:0a:86:65:37:eb:
                    4a:da:e0:e7:cc:cf:84:1f:fa:1f:2e:6f:ba:bb:1f:
                    a1:7e:9d:06:e4:57:d8:c6:43:01:87:a1:c0:ca:bc:
                    8c:a9:8d:a2:20:93:e2:01:3b:b0:1c:da:25:3b:91:
                    af:2b:08:5f:6e:8a:4e:a2:00:93:d5:ad:76:1f:74:
                    aa:ce:51:86:e3:fb:0a:ba:dd:0a:7d:76:9d:fa:b7:
                    66:cc:e3:b7:b7:ba:05:47:81:96:cb:4d:ae:46:75:
                    f3:ce:c0:25:02:41:6b:e4:6f:36:68:3a:44:f6:a6:
                    95:83:39:8a:46:c7:35:ad:0b:69:c0:14:d7:82:71:
                    54:ef:65:fa:91:68:6c:a2:08:3d:fd:28:b6:d3:1a:
                    3d:2a:17:eb:c4:b4:62:00:75:9b:52:19:16:06:a1:
                    d1:e9:7e:f5:9a:0f:bc:dd:3c:af:56:2c:70:22:b7:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:FB:A7:B7:1D:41:39:8D:02:B3:27:A7:28:04:C4:E0:F1:97:8E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC8FA9D6476A11ECA8ECFD78D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:6e:f2:4b:5d:3c:ff:ce:1b:e1:b9:37:ee:eb:6e:f8:36:
         c7:ec:85:fd:d1:e9:5e:02:45:f5:67:6e:4f:8d:69:9a:c8:ac:
         1b:80:b4:b6:b6:6f:ea:75:54:e4:b5:ed:22:eb:c9:7e:32:f7:
         7a:c5:65:1f:7e:29:8c:0d:84:05:9d:2e:d5:fc:1d:e6:9d:1b:
         fc:86:c2:25:e0:73:06:a1:ed:5e:84:c7:23:25:f2:15:0f:9d:
         44:15:0d:dc:22:d3:0e:ef:6a:d8:a1:5f:64:4b:a4:1d:fc:14:
         69:c7:bc:dd:03:80:bb:b4:07:1a:ad:fc:9e:a1:de:bb:6c:3c:
         f2:8e:a8:98:68:ea:f6:ea:30:71:73:0a:1d:0a:5a:15:97:c0:
         91:00:94:b1:f7:df:56:e4:7a:1b:c1:00:89:23:99:ee:df:91:
         82:45:c1:82:76:35:c0:a5:49:4e:2c:0d:34:0c:e3:e1:7d:06:
         fe:dc:1e:24:e5:ee:84:6e:9c:1a:f0:1f:1a:25:90:93:97:f0:
         22:ee:22:67:fb:41:25:6d:73:89:2d:c0:0e:c6:34:6e:b3:be:
         02:17:ac:94:19:c3:a0:08:d1:91:6c:c6:fd:d7:21:e9:36:b0:
         d6:87:97:2e:84:01:43:85:a6:9e:60:6e:8d:fd:4c:79:7f:86:
         47:3c:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org