Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
File:                     E60AD458E57D11EB85DE9D2AF8AEA228.roa (raw, json)
Hash identifier:          xXdEOmdttgIMndAnlulu1BC9dfCKJG0XrC0tf6mPQ5M=
Subject key identifier:   8C:17:31:B3:C5:FD:BF:24:76:D9:B4:39:2C:AB:92:F3:85:49:E3:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       07BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:04:06 +0000
ROA not before:           Thu 15 Jul 2021 15:04:01 +0000
ROA not after:            Sat 09 Jul 2022 15:04:01 +0000
asID:                     397630
IP address blocks:        154.201.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:04:01 2021 GMT
            Not After : Jul  9 15:04:01 2022 GMT
        Subject: CN=60f04e66-0ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:a6:a3:8e:c8:4e:61:ce:90:b1:ab:de:05:
                    62:43:54:7b:8d:2b:15:2b:76:e8:d4:92:99:2e:d4:
                    89:df:57:ed:4b:40:b0:2d:e9:85:9d:74:38:c2:7f:
                    0a:39:31:3b:2e:e9:c3:f0:95:4c:17:07:3d:3d:f2:
                    22:1a:e6:5d:2f:c6:68:97:9a:f4:d8:f2:08:8d:b7:
                    4b:e6:c2:8b:10:6e:c2:68:96:70:46:a9:9d:a3:df:
                    63:76:d4:c1:f2:aa:93:c3:52:bd:ad:8b:45:fe:30:
                    3b:21:1b:79:06:f6:29:d5:3d:d2:92:2a:bd:67:66:
                    b2:40:e9:78:5c:ca:5c:49:d5:a0:0d:51:75:35:9f:
                    5b:83:8d:1d:95:c9:fc:89:34:f4:aa:9c:bc:10:14:
                    33:61:7f:2e:62:b0:c5:3c:dd:e6:2c:0e:e3:e5:81:
                    8e:0a:67:dd:aa:08:3b:11:1b:94:d0:bd:d2:36:bd:
                    45:72:e8:9d:5e:3d:e4:32:ca:18:1b:2b:1d:b0:ee:
                    d2:50:58:3d:87:9f:f6:66:10:f8:50:94:37:12:28:
                    4f:f5:b2:d2:e8:d1:9c:d6:b1:80:19:ea:dc:af:b7:
                    73:dd:ed:fe:f0:4a:29:ad:9e:28:06:7a:07:b1:a5:
                    1e:36:5f:a9:99:52:aa:36:d9:14:72:26:ed:e4:c7:
                    43:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:31:B3:C5:FD:BF:24:76:D9:B4:39:2C:AB:92:F3:85:49:E3:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:14:d0:34:6e:85:cd:4d:4e:f6:62:6e:95:ae:ab:91:85:d3:
         2b:a7:12:6b:eb:3a:be:7b:d7:a7:11:5e:3b:c3:ca:ed:27:2d:
         9a:6b:4b:bb:79:a0:30:e1:97:fe:c9:9a:de:ac:26:a7:df:2d:
         07:67:4c:39:56:48:aa:8b:4b:84:80:83:3c:bd:2a:e1:20:5f:
         20:22:7f:d6:a2:e7:81:f6:65:ef:93:c2:c6:34:e7:b1:69:a2:
         84:7d:0b:a7:4f:7d:3c:7d:a5:88:78:0e:b5:3c:59:4d:8c:4d:
         c9:2c:27:46:ea:4a:23:bb:6b:f9:e7:cd:a9:d4:f0:d1:d9:d1:
         cf:52:e8:8e:46:7c:41:3b:be:7f:29:4f:8c:18:01:c9:03:55:
         18:07:a1:64:c7:33:5d:54:f7:c7:c6:1f:26:f2:ea:ee:74:c2:
         a3:40:e4:09:81:e5:13:13:e5:d5:e9:f5:73:e7:dd:3f:71:9f:
         f3:ca:60:44:a3:26:39:8d:44:e2:7b:44:33:9d:59:20:72:18:
         1a:ab:fb:03:7d:54:f2:18:76:55:7f:75:9f:9f:bd:65:a4:fa:
         a7:0e:70:90:90:87:37:90:c3:95:3f:18:70:ae:83:75:40:7b:
         87:e4:1b:50:7f:e1:ef:ef:ac:09:0a:a1:05:e4:51:ce:33:66:
         d0:0a:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org