Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E99F78488811ECA8724F3CD8A014CE.roa
File:                     E9E99F78488811ECA8724F3CD8A014CE.roa (raw, json)
Hash identifier:          yq2V9+RDxoCdygzKkEUwJc6wAWgI1GxqhULWmM3tRcg=
Subject key identifier:   57:68:36:8C:C3:EF:C5:AB:29:25:87:24:50:53:07:18:B8:D8:A0:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E99F78488811ECA8724F3CD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:02:22 +0000
ROA not before:           Fri 19 Nov 2021 16:02:19 +0000
ROA not after:            Sat 19 Nov 2022 16:02:19 +0000
asID:                     139879
IP address blocks:        154.80.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3452 (0xd7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:02:19 2021 GMT
            Not After : Nov 19 16:02:19 2022 GMT
        Subject: CN=6196790e-82f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:95:48:92:63:3d:1b:0b:33:0e:dd:69:a5:
                    49:ed:6c:1b:16:06:e5:ff:2b:c4:16:a0:9b:e7:ed:
                    b4:8c:d1:d4:81:30:c1:eb:07:9f:be:90:c1:05:ff:
                    7b:fc:ae:e3:1f:7b:e5:08:7c:ff:14:14:82:5e:47:
                    6c:d3:76:86:0b:62:45:49:0f:f0:80:af:e6:f8:97:
                    54:3f:28:6f:36:53:c3:5c:b4:91:dc:81:99:b6:99:
                    f7:fd:00:6e:d2:66:d0:84:55:95:eb:f4:81:aa:21:
                    07:58:65:e6:c4:52:74:25:32:b8:41:21:03:72:a9:
                    b5:77:5c:ff:76:fb:ed:9e:c9:da:da:35:76:9c:87:
                    62:3f:34:c7:2b:a4:72:12:3f:31:99:70:5b:cd:3c:
                    58:53:c9:32:3e:d1:6d:db:1f:31:c0:6c:b5:e6:d6:
                    3e:7c:8c:59:fb:a9:b7:81:08:cb:06:a5:42:12:8c:
                    bf:23:23:2d:5e:40:c6:ac:dd:e4:da:01:e9:bc:db:
                    11:bf:c1:bb:a1:98:3d:69:53:07:ff:c6:5b:70:60:
                    33:ca:1b:16:ff:6a:42:47:a6:00:fb:38:fb:48:56:
                    d8:9b:36:32:04:19:cb:4b:93:92:21:1f:e5:bc:f6:
                    12:98:a1:f2:e8:fc:7f:e9:af:00:bd:42:d0:53:11:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:36:8C:C3:EF:C5:AB:29:25:87:24:50:53:07:18:B8:D8:A0:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E99F78488811ECA8724F3CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:4f:bc:41:0e:ac:00:fd:be:17:52:00:cb:f2:eb:14:b4:
         8a:86:cb:25:7c:05:6f:14:c1:4d:45:a1:79:91:77:23:5f:6e:
         d0:a8:46:21:52:20:99:85:65:52:0d:3d:e3:a0:9e:b0:d7:54:
         b7:30:3c:84:f2:6c:4c:38:84:fc:b4:ce:18:92:86:27:c6:52:
         fd:b6:8f:b7:21:bd:d2:29:08:67:c7:a4:b0:49:c4:df:96:d4:
         aa:f7:4a:9e:08:90:8d:4b:9c:02:0a:c7:79:b3:19:a7:af:c3:
         a2:72:16:86:2b:90:c8:31:be:00:14:76:28:e6:9f:5a:99:9c:
         ee:dc:47:b4:60:39:85:46:85:61:d5:31:34:0f:99:ed:df:dc:
         bd:b7:5c:71:06:a0:cc:cb:86:06:e5:56:bd:ac:96:63:74:8c:
         53:57:ee:d7:09:7b:be:ff:52:f7:06:e1:81:ce:ef:a9:d7:d7:
         e1:a5:88:ec:d9:c3:9c:6e:c5:77:e4:6e:ad:ee:b4:18:e0:10:
         2c:a8:68:e0:10:84:e5:3d:1c:07:74:1a:84:c8:2e:f8:4b:a4:
         1f:c7:12:d8:21:43:bc:d9:37:85:f3:4d:f7:13:cf:50:dc:27:
         0b:9b:d6:5d:fd:42:a2:6d:1b:10:b6:a2:ac:6d:aa:85:c8:55:
         9b:3d:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org