Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E98306693D11ECA383E2955A40D577.roa
File:                     E3E98306693D11ECA383E2955A40D577.roa (raw, json)
Hash identifier:          KSoLhyByWjudXyL50QmtHv6qWx+dEYarZY/2qwD69So=
Subject key identifier:   79:05:3D:77:4E:A2:73:88:7A:92:0D:34:CD:83:75:92:4A:17:AA:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1424
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E98306693D11ECA383E2955A40D577.roa
Signing time:             Thu 30 Dec 2021 06:58:28 +0000
ROA not before:           Thu 30 Dec 2021 06:58:23 +0000
ROA not after:            Fri 30 Dec 2022 06:58:23 +0000
asID:                     212552
IP address blocks:        154.91.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5156 (0x1424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 06:58:23 2021 GMT
            Not After : Dec 30 06:58:23 2022 GMT
        Subject: CN=61cd5894-5a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:e5:89:b4:fc:64:ad:4a:96:2f:48:3f:38:
                    48:2a:ce:dc:fb:cc:23:c8:b3:9b:f7:43:b4:65:12:
                    29:89:af:86:fc:5e:7e:53:ee:a6:44:17:08:34:e6:
                    89:4e:7b:f2:d1:50:a8:df:64:ee:db:24:4f:e1:ed:
                    f8:d4:25:73:9f:42:29:dd:63:ab:77:a8:df:f5:93:
                    d8:fa:40:50:ff:bf:b8:85:24:fb:e5:80:a9:d3:be:
                    8e:b3:d7:28:57:f2:0b:39:47:28:d2:36:d2:29:3b:
                    28:47:72:91:10:fc:ea:8e:6e:fd:a2:4f:e9:9f:09:
                    23:e9:ab:65:47:ee:7e:98:b3:8e:e9:c3:7f:f1:ab:
                    5e:e1:fb:33:08:cb:b4:a7:69:60:6d:9c:3b:1c:72:
                    0f:65:59:82:02:f2:dd:35:59:8f:ed:b1:b4:7e:d5:
                    08:5f:64:97:b0:7e:7b:6d:e1:6c:72:04:ca:be:44:
                    2b:c2:6c:05:07:5c:48:6d:77:07:38:1a:07:5a:4b:
                    fb:5a:b5:d2:44:7c:ce:6c:20:1f:ad:db:3e:e2:fb:
                    cc:f2:a7:15:5e:07:5f:32:72:26:58:3c:20:bd:96:
                    74:1b:9e:4d:ca:43:ae:5d:03:d1:19:12:4e:44:ba:
                    c4:83:fc:51:48:c8:6a:c1:6b:ff:99:38:86:bb:fa:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:3D:77:4E:A2:73:88:7A:92:0D:34:CD:83:75:92:4A:17:AA:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E98306693D11ECA383E2955A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:39:0b:7c:c1:86:6e:2c:b7:a5:aa:5b:8b:d8:60:e4:4a:44:
         e4:ed:63:81:6d:94:f6:e7:17:88:d7:0d:aa:3c:24:65:c4:be:
         d1:d1:27:60:04:49:54:36:2f:6d:9b:2c:43:f3:7d:46:cf:ef:
         71:13:83:17:5d:8c:05:fa:12:da:93:3e:e5:0d:0b:70:db:6b:
         b7:3a:e7:6d:6f:cd:12:31:e9:a6:a2:93:32:e1:1d:d7:16:8d:
         b8:f3:96:3c:34:7d:58:d0:40:8f:a4:51:c9:fa:a7:0e:70:a4:
         84:6f:25:5b:00:73:2a:06:48:7c:1f:bf:a5:9c:57:c2:bf:ba:
         43:3f:a1:8f:4f:a6:2a:43:06:1b:f9:c8:3c:ec:ec:63:d9:45:
         ac:23:a6:c6:e9:3e:8d:af:e8:1f:0c:84:37:cd:2f:46:7c:49:
         81:4e:dc:a7:c0:86:5d:01:12:21:3a:41:c5:17:6a:7f:63:a4:
         73:68:df:9e:2a:19:37:48:a9:75:32:f9:b9:42:d0:59:3f:d6:
         4a:4c:b3:30:bf:f3:a4:63:42:6a:d9:c4:65:3d:6d:77:17:64:
         be:89:cc:f9:87:20:7a:3f:9b:7d:e3:5b:d0:b1:4b:69:3e:ac:
         e1:b6:5f:32:da:e9:ab:30:9f:64:c2:83:a9:08:f8:cd:c1:86:
         af:ef:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org