Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F391689C028911ED8256FAB7F1222468.roa
File:                     F391689C028911ED8256FAB7F1222468.roa (raw, json)
Hash identifier:          2JF8rfYXmuIHO9Lu/OBKHQrobExkPq5bJ/eZg3Dz/Ww=
Subject key identifier:   B3:D3:61:B7:6E:33:74:A8:9A:CF:0E:AF:EE:8E:15:74:1E:D0:BE:8D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       176B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F391689C028911ED8256FAB7F1222468.roa
Signing time:             Wed 13 Jul 2022 08:58:24 +0000
ROA not before:           Wed 13 Jul 2022 08:58:20 +0000
ROA not after:            Sat 25 Feb 2023 08:58:20 +0000
asID:                     138630
IP address blocks:        154.213.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5995 (0x176b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 13 08:58:20 2022 GMT
            Not After : Feb 25 08:58:20 2023 GMT
        Subject: CN=62ce8930-6f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:38:9c:60:fe:85:99:f6:45:32:e3:de:2d:
                    55:e8:ea:e3:ca:7c:ff:ad:26:37:7a:a6:d9:2f:ee:
                    5f:6d:39:40:38:81:c0:d0:64:57:e1:aa:67:4c:fb:
                    ad:22:82:b4:a8:ad:80:19:80:48:9f:84:8a:94:8f:
                    bd:66:4a:1b:34:2d:ef:85:ec:10:86:5d:48:31:85:
                    72:eb:54:8f:d9:92:c8:d0:a1:4a:d6:44:90:1c:16:
                    bf:50:b4:3b:46:76:d5:23:54:da:60:e9:bf:1e:98:
                    14:fc:56:56:d5:4a:da:bf:c6:00:e0:12:45:09:ae:
                    59:24:3e:5e:3e:c4:6d:4a:d2:e8:43:86:5d:54:9c:
                    32:be:9d:97:17:d1:86:db:1f:00:bb:04:74:6c:6e:
                    a1:b3:52:bc:07:7c:4f:b3:14:52:b5:4e:cf:4d:aa:
                    87:90:0c:15:9a:d5:c4:ec:ec:a5:b8:4a:e5:77:69:
                    b9:f6:21:a9:7c:04:cf:bd:27:b1:18:81:30:7f:00:
                    d4:31:14:d4:28:af:c4:97:df:1a:96:45:73:ae:37:
                    69:5d:e7:d0:b9:88:82:95:35:19:63:3a:ca:32:5c:
                    47:3c:83:c5:16:42:0d:e1:c1:39:1f:6b:68:01:ef:
                    82:83:f3:57:a1:32:28:81:26:59:10:69:f1:bd:37:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:61:B7:6E:33:74:A8:9A:CF:0E:AF:EE:8E:15:74:1E:D0:BE:8D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F391689C028911ED8256FAB7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:d0:14:c4:0e:ec:70:59:bc:29:32:9c:91:8e:6d:16:32:
         3c:00:26:dd:fe:b2:4a:0e:78:4a:e5:32:f7:ea:03:6a:d6:0a:
         a9:cf:75:2f:56:17:73:38:cd:73:3f:13:a1:b1:88:5e:35:a7:
         9e:1e:d4:2b:d7:3c:6c:c2:92:2f:29:e2:50:a5:67:83:8c:88:
         70:23:07:3c:3d:8f:ff:f5:9b:ae:1d:75:33:6f:75:b7:72:93:
         bd:d4:2c:8a:8d:03:59:22:a8:b0:6a:70:0f:e2:bc:00:61:56:
         c7:5a:48:b4:4e:2d:b6:49:13:bc:70:20:6b:e9:41:10:0a:d4:
         6b:02:6d:6e:9f:ea:30:a4:cc:e4:ae:ab:39:5c:c1:c7:6d:4b:
         62:a1:ce:c9:1d:be:12:0a:4b:38:54:d2:3a:46:92:6d:91:94:
         1e:41:15:4c:f2:69:31:94:4f:6f:4e:e6:1f:cc:13:7c:5f:ca:
         37:ef:74:46:06:c1:ff:ef:f7:26:89:99:3a:5c:aa:d9:f2:09:
         8d:6a:84:1c:80:5d:b4:b5:36:9a:74:2b:17:a8:3e:53:5b:9b:
         c7:d9:93:0e:2c:92:d1:81:eb:ec:49:49:74:44:0f:86:b5:b0:
         e0:cc:21:f7:cd:a2:c5:a4:9e:c8:44:c2:72:b4:b8:ac:2e:7c:
         46:8b:9e:51
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF2swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA3MTMwODU4MjBaFw0yMzAyMjUwODU4MjBaMBgxFjAU
BgNVBAMMDTYyY2U4OTMwLTZmNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBDzicYP6FmfZFMuPeLVXo6uPKfP+tJjd6ptkv7l9tOUA4gcDQZFfhqmdM
+60igrSorYAZgEifhIqUj71mShs0Le+F7BCGXUgxhXLrVI/ZksjQoUrWRJAcFr9Q
tDtGdtUjVNpg6b8emBT8VlbVStq/xgDgEkUJrlkkPl4+xG1K0uhDhl1UnDK+nZcX
0YbbHwC7BHRsbqGzUrwHfE+zFFK1Ts9NqoeQDBWa1cTs7KW4SuV3abn2Ial8BM+9
J7EYgTB/ANQxFNQor8SX3xqWRXOuN2ld59C5iIKVNRljOsoyXEc8g8UWQg3hwTkf
a2gB74KD81ehMiiBJlkQafG9N8XhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs9Nh
t24zdKiazw6v7o4VdB7Qvo0wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0YzOTE2ODlDMDI4OTExRUQ4MjU2RkFCN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa1R4wDQYJKoZIhvcNAQEL
BQADggEBAE300BTEDuxwWbwpMpyRjm0WMjwAJt3+skoOeErlMvfqA2rWCqnPdS9W
F3M4zXM/E6GxiF41p54e1CvXPGzCki8p4lClZ4OMiHAjBzw9j//1m64ddTNvdbdy
k73ULIqNA1kiqLBqcA/ivABhVsdaSLROLbZJE7xwIGvpQRAK1GsCbW6f6jCkzOSu
qzlcwcdtS2KhzskdvhIKSzhU0jpGkm2RlB5BFUzyaTGUT29O5h/ME3xfyjfvdEYG
wf/v9yaJmTpcqtnyCY1qhByAXbS1Npp0KxeoPlNbm8fZkw4sktGB6+xJSXRED4a1
sODMIffNosWknshEwnK0uKwufEaLnlE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org