Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17311656406A11EF973D599C762E951A.roa
File:                     17311656406A11EF973D599C762E951A.roa (raw, json)
Hash identifier:          Efal7zNvgE1LWCwGX7CjwUcNe2VjdtfcWi4AUmq2seI=
Subject key identifier:   F6:9C:33:44:B8:F2:62:74:07:CF:FB:40:56:4B:5F:A6:CA:51:94:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9C05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17311656406A11EF973D599C762E951A.roa
Signing time:             Fri 12 Jul 2024 16:16:27 +0000
ROA not before:           Fri 12 Jul 2024 16:16:24 +0000
ROA not after:            Tue 13 Aug 2024 16:16:24 +0000
asID:                     138915
IP address blocks:        156.244.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39941 (0x9c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 12 16:16:24 2024 GMT
            Not After : Aug 13 16:16:24 2024 GMT
        Subject: CN=669156db-4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:a0:be:3c:e3:17:8d:cf:7f:a1:97:66:41:
                    43:4c:9d:13:16:7b:1f:62:4c:13:ed:a1:d2:4b:3c:
                    09:ef:a1:13:7e:25:82:f6:b5:79:eb:37:d0:da:52:
                    6f:75:42:4c:a4:88:de:21:f3:d4:7b:ea:55:fe:3c:
                    4d:b9:92:25:a7:15:3f:3d:ca:f5:07:82:4e:63:48:
                    d9:4b:4d:c8:db:ac:2d:39:94:27:bf:5c:0e:c1:ff:
                    e2:45:96:5b:b2:93:5b:be:45:55:2b:b6:3d:d1:46:
                    b5:42:96:c4:df:3e:97:e2:5d:e9:c1:c3:5e:93:35:
                    0a:d5:e9:f2:f7:dc:3c:0b:7c:64:22:dc:09:ce:a0:
                    59:cf:9c:3c:00:d9:0a:aa:42:ff:c6:1b:47:42:97:
                    2f:26:c8:62:0f:5b:6b:5f:3c:34:e5:cb:0b:f5:6d:
                    32:7d:f5:ba:9e:96:e9:ab:cd:b5:a4:ff:6a:5f:cd:
                    b0:0f:ce:2b:b4:ee:81:10:c4:ee:3f:e0:94:51:76:
                    6f:ee:82:65:a1:ee:cf:29:92:51:29:e0:f3:59:65:
                    c9:1e:cb:fb:f4:85:42:0a:bc:c0:17:0b:96:d1:4f:
                    8a:40:65:be:db:45:90:fc:a9:d1:30:03:fb:6f:2e:
                    69:85:d3:1e:d9:3c:f6:30:a7:39:6d:40:6c:29:d6:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9C:33:44:B8:F2:62:74:07:CF:FB:40:56:4B:5F:A6:CA:51:94:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17311656406A11EF973D599C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:67:5e:98:3a:54:a5:e0:52:7d:9a:0a:c8:20:be:c6:ac:
         15:0a:99:49:fe:a0:44:6f:cc:3b:06:a7:36:c2:08:91:94:d7:
         9c:01:f4:f3:9c:f8:09:ec:76:23:26:34:f4:b5:41:42:cc:0b:
         6f:2f:a9:43:0b:9f:a9:f5:fc:b7:e2:96:55:c4:e2:a6:00:6f:
         9b:08:14:7e:13:10:b1:53:3c:4f:62:8b:47:fe:48:d6:35:bf:
         03:6b:3a:80:08:1d:d2:fa:6c:0f:d8:48:6e:ab:27:24:ce:62:
         d5:07:cc:82:dc:76:d6:09:cb:02:54:63:97:b3:89:f9:5f:7b:
         33:cb:aa:44:23:19:53:47:e6:a2:a8:b7:49:11:bf:21:57:31:
         b6:4c:06:7a:c3:28:11:dc:cc:fe:c5:97:95:33:d4:ad:05:9e:
         be:9c:5b:7e:08:f6:db:ef:18:4f:de:f3:1b:ff:cb:78:64:8f:
         15:21:f0:03:42:ca:df:c3:a8:91:eb:54:2a:d5:e8:45:3c:af:
         22:25:6a:a9:27:23:8a:6d:38:cc:3c:5f:04:5f:e5:b4:59:49:
         7b:c9:72:53:11:e2:2d:39:17:9f:11:6a:73:a5:c3:ba:d3:d7:
         18:0d:2e:55:4d:d6:64:c6:0b:03:b5:93:c5:61:c3:f0:78:df:
         36:a2:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org