Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
File:                     DFD498BC17C711ED8693BABEF1222468.roa (raw, json)
Hash identifier:          WmBNXQfXHczvWlGpRuEDm5PpmLUjRhthjxeXGLsk31I=
Subject key identifier:   60:E1:E9:49:DC:55:DD:F9:F4:51:01:74:61:8C:74:A6:AA:53:77:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       183C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
Signing time:             Tue 09 Aug 2022 09:44:34 +0000
ROA not before:           Sun 14 Aug 2022 09:44:30 +0000
ROA not after:            Sun 25 Jun 2023 09:44:30 +0000
asID:                     3356
IP address blocks:        154.93.28.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6204 (0x183c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 14 09:44:30 2022 GMT
            Not After : Jun 25 09:44:30 2023 GMT
        Subject: CN=62f22c82-715e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:80:d7:af:6a:63:f3:6d:e9:c2:30:ab:ca:
                    e8:83:02:a6:6c:dd:16:a9:f4:54:cf:55:dd:c3:da:
                    af:4c:00:bf:f5:b7:84:62:87:aa:ec:89:4f:01:37:
                    f8:cc:37:a1:5e:d3:97:d9:17:74:01:41:50:dd:11:
                    92:a3:ac:8e:64:15:b8:d8:01:18:ba:f8:14:36:4b:
                    96:3f:62:66:29:cf:f1:9c:63:dc:1a:c2:96:ac:f3:
                    76:88:1d:c7:fb:74:1b:f0:f9:c1:7c:c6:01:eb:17:
                    5c:58:73:57:eb:c3:a9:cc:c7:f2:ec:0c:38:ad:6c:
                    40:97:80:67:f3:f2:3c:a1:10:10:83:53:4f:bd:94:
                    70:83:a6:57:6f:31:10:0f:a7:2b:7c:6e:0c:26:1e:
                    98:e9:28:89:b7:60:b5:c8:fe:85:86:4a:a8:40:e4:
                    02:cb:01:44:c6:aa:39:a4:e2:b8:2d:af:cb:bb:1b:
                    b0:52:73:0d:79:7d:db:2b:f4:fd:a7:85:df:fc:ee:
                    14:c6:59:1b:42:10:b3:11:8c:73:3f:28:33:c8:a9:
                    bc:15:ac:3c:89:34:5a:c4:19:0a:0d:78:fe:ad:b1:
                    80:ca:b9:9f:60:ff:f8:76:65:93:f3:65:df:21:92:
                    44:05:64:68:9b:23:66:ec:46:c9:43:bc:85:10:5c:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:E9:49:DC:55:DD:F9:F4:51:01:74:61:8C:74:A6:AA:53:77:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:7b:3f:33:a9:38:4e:f7:5e:02:ae:fa:10:9b:7c:13:b4:
         25:9a:61:76:09:52:fc:e7:df:8f:2f:26:fe:23:54:c0:a9:91:
         08:00:d2:9f:ea:30:56:d8:28:9b:25:db:75:0d:f3:7d:c4:6d:
         cd:a6:51:03:5a:5d:32:ee:ef:70:f2:38:f2:34:77:08:4b:4a:
         3a:71:4d:cd:b8:34:b5:d8:6d:83:aa:de:03:3d:d3:58:08:fe:
         7c:94:24:23:7f:d6:e2:4a:56:8b:21:25:9e:53:c7:82:91:7a:
         94:59:b7:02:27:5b:51:ed:2a:d9:23:6f:0e:95:b4:70:33:32:
         86:7f:58:91:59:eb:08:e4:0b:a1:09:23:79:b4:08:b9:fe:33:
         28:32:a6:4e:c2:ab:63:b0:ed:cc:6f:8b:ed:be:06:4a:3b:90:
         b6:c5:64:b0:6d:58:9f:38:4c:51:55:a2:07:98:c5:98:e0:2f:
         93:8a:39:aa:cd:cc:9e:1b:14:66:10:20:c5:90:43:a2:66:50:
         7c:1d:6f:1d:db:87:e3:6d:83:11:1e:a6:6e:c0:4a:a8:cd:4a:
         02:b7:13:3b:c4:f3:a6:4d:c7:84:fd:60:6d:22:f9:df:ae:0d:
         20:00:11:3b:59:95:91:aa:ff:dc:2d:64:25:d8:da:73:dc:af:
         ec:c3:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org