Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/027D8E0E8F1111EC97599A875A40D577.roa
File:                     027D8E0E8F1111EC97599A875A40D577.roa (raw, json)
Hash identifier:          KJdEjKZ3szBkEwWIUJyfjlgl4bN0VAB5KcJ0vp5jEOs=
Subject key identifier:   42:2E:63:D9:7E:0B:68:AC:F4:00:2D:97:A4:5A:4F:7F:AE:F7:7F:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       11E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/027D8E0E8F1111EC97599A875A40D577.roa
Signing time:             Wed 16 Feb 2022 10:12:56 +0000
ROA not before:           Wed 16 Feb 2022 10:12:52 +0000
ROA not after:            Fri 30 Dec 2022 10:12:52 +0000
asID:                     131471
IP address blocks:        45.206.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4582 (0x11e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 10:12:52 2022 GMT
            Not After : Dec 30 10:12:52 2022 GMT
        Subject: CN=620cce28-b2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:46:78:56:65:bb:9d:7a:d7:b9:51:db:07:
                    7a:53:ee:8e:fd:72:ac:56:2f:1f:21:b1:81:d2:0b:
                    11:cd:c6:ab:15:10:6b:0a:f9:96:fd:14:65:e7:6d:
                    44:7e:66:17:78:43:11:e0:d4:93:f3:3e:71:9d:f2:
                    57:4a:3a:8e:a7:8f:64:72:2a:21:58:93:0a:5a:80:
                    de:e0:91:3f:b5:ce:3f:20:9a:6d:08:66:45:5c:3e:
                    1e:05:aa:3b:f1:82:48:d5:2a:95:56:03:19:46:5c:
                    bb:86:f0:de:64:0e:bb:89:ed:7e:d8:f0:16:4f:56:
                    75:55:0e:9a:12:b8:89:e3:96:02:89:14:8a:03:03:
                    fb:6b:27:3d:f9:0d:31:7a:6c:5d:ca:72:d0:31:e6:
                    38:0d:9d:1d:a3:ec:7c:bc:9d:11:f8:e5:eb:21:8e:
                    87:1c:07:cb:81:43:b9:b1:7a:ee:a3:b0:96:6f:b3:
                    3b:2a:a7:ab:db:96:69:5e:9a:bd:d9:08:07:0f:3d:
                    17:9d:4e:68:2a:01:5c:7f:50:56:18:13:60:a6:c5:
                    59:65:21:60:8b:b9:cb:bb:4b:d1:79:6c:7f:fa:1b:
                    c2:e1:1d:47:17:8e:c1:40:bd:ba:69:3e:87:42:4f:
                    74:fe:2d:d0:a8:71:a4:bc:04:d8:a6:24:53:f4:52:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2E:63:D9:7E:0B:68:AC:F4:00:2D:97:A4:5A:4F:7F:AE:F7:7F:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/027D8E0E8F1111EC97599A875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:22:c9:f0:ba:d1:f0:72:37:60:6a:58:3f:3f:2e:7d:5d:
         fd:31:9a:86:22:c7:62:34:9c:9c:6d:06:dc:ab:00:ff:9d:01:
         03:58:55:b4:7e:90:03:8a:33:af:3b:1a:fb:18:4e:98:21:0a:
         cc:52:92:af:32:d7:9a:a3:2c:df:c5:2a:fb:eb:d5:7a:1f:67:
         1d:2b:b3:83:3c:af:68:a3:f3:a2:a1:3b:87:a8:36:e2:74:96:
         6b:a2:a1:c9:c3:99:9e:49:2e:ed:e1:26:40:f7:37:47:da:ff:
         24:81:72:ea:2d:e2:f8:7f:35:d1:2d:e9:82:4c:62:28:a6:7f:
         65:c9:78:78:bc:8c:e7:43:9e:4a:9a:e6:20:b7:62:a3:32:f6:
         8b:ce:3e:a7:1e:72:24:07:76:53:81:2e:e8:20:5d:2d:17:5b:
         69:22:b2:5a:ea:19:4a:b0:7f:cd:71:d0:7f:e7:da:08:c2:d0:
         53:57:0d:76:59:6c:ee:f5:16:87:cf:4a:da:7b:ea:73:37:01:
         c4:86:37:80:bb:c7:53:f8:df:e4:dd:67:fc:42:b3:b6:9b:17:
         f7:1f:db:6b:59:9f:d8:bf:14:d4:ee:02:2e:3c:70:c2:40:65:
         30:04:69:18:a6:9a:fd:b9:90:d1:f4:f1:25:ac:ce:e4:24:44:
         7f:df:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org