Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02615756488611EC9391F235D8A014CE.roa
File:                     02615756488611EC9391F235D8A014CE.roa (raw, json)
Hash identifier:          nxpRsRXBlkWKK8Aesjc7nelozzSPW7SHbkPAknGKAzs=
Subject key identifier:   F1:94:D0:2A:85:4A:6D:51:54:93:63:C5:52:EE:1B:11:40:14:18:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02615756488611EC9391F235D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:41:34 +0000
ROA not before:           Fri 19 Nov 2021 15:41:31 +0000
ROA not after:            Sat 19 Nov 2022 15:41:31 +0000
asID:                     139879
IP address blocks:        156.231.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:41:31 2021 GMT
            Not After : Nov 19 15:41:31 2022 GMT
        Subject: CN=6196742e-8874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:1d:ed:bd:bc:8c:cd:e6:ba:10:c6:e7:fb:
                    d4:be:bd:d7:33:02:8a:3c:53:9b:56:f5:75:37:4d:
                    3f:5f:5b:89:50:98:a3:ee:8d:2c:0e:73:f1:9b:43:
                    20:c7:3a:7a:a1:06:50:b7:11:01:0d:a6:b4:74:d3:
                    ab:fa:ce:56:8c:2c:79:43:2e:d5:b2:e8:6b:72:8c:
                    dc:d6:ba:32:fb:f8:d1:dc:ca:5b:71:a8:47:da:6e:
                    f4:56:6b:0b:95:ea:63:91:9c:3e:71:a7:11:da:5e:
                    eb:24:71:9c:2f:f9:ba:c6:a3:4f:7b:d2:d4:6d:01:
                    a9:75:fb:da:27:14:70:49:b1:d5:e6:dd:3d:5a:71:
                    00:bd:8d:f3:cc:bd:e7:d2:ba:01:d1:bc:57:57:d0:
                    da:fa:c0:41:d4:4f:48:ef:e4:61:14:93:27:35:0e:
                    55:0b:ae:b7:69:05:24:30:e0:b8:0e:e1:e1:f3:fe:
                    55:cd:c6:5c:0c:9e:9d:00:ea:85:fc:f8:eb:22:55:
                    74:60:4b:0c:cc:81:2d:5e:87:3f:8d:b5:4f:2b:14:
                    c8:e5:eb:30:89:06:c6:6b:7d:04:c7:da:d1:e0:e0:
                    00:03:4b:1c:ab:67:b4:da:ec:62:ee:23:08:55:31:
                    a0:43:4f:ed:a0:d4:91:72:8e:a1:cb:a6:e3:82:10:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:D0:2A:85:4A:6D:51:54:93:63:C5:52:EE:1B:11:40:14:18:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02615756488611EC9391F235D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:3a:cc:bd:4d:68:ad:ff:f1:2e:07:b1:4b:61:25:f9:e0:
         b9:43:c7:df:62:1e:c2:57:20:68:c3:bf:c7:8d:5b:c1:c4:f5:
         e4:86:4d:5c:2d:cc:ad:0d:a8:5b:d7:dd:e9:7d:fd:25:74:d7:
         33:6c:da:5e:63:c0:43:cc:d8:a3:64:01:87:4a:23:fa:c8:8c:
         34:50:8b:3d:00:58:12:16:3f:26:f5:ff:31:d5:86:e0:5b:ad:
         44:1c:04:09:b4:e3:b9:56:57:91:10:03:21:21:d8:50:86:f8:
         df:91:a6:16:a3:3f:05:37:1c:f6:cd:f4:68:f1:50:17:09:c0:
         2a:dc:cf:9d:7e:da:37:51:20:2e:89:87:1e:11:0a:50:34:25:
         46:3f:b7:3b:a1:39:d6:b0:46:b4:7c:ac:10:54:f3:d4:72:5f:
         b6:48:6f:07:a5:7e:ed:38:d4:c8:b4:64:6d:e3:20:b9:2d:4e:
         95:d3:22:fe:0c:52:38:97:e3:ce:e0:dc:84:19:6e:3c:3f:b5:
         00:0e:d0:9f:e0:dd:94:89:56:30:ee:95:ef:16:c0:18:29:6b:
         8d:d3:2f:8c:a3:aa:6f:b7:a2:3b:96:4e:73:d8:b4:4f:1b:fd:
         2e:c5:79:16:93:93:53:43:ca:e1:c9:e3:13:e8:c5:9b:a5:29:
         9d:b3:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org