Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
File:                     197128C2488611EC9CCD2936D8A014CE.roa (raw, json)
Hash identifier:          n15Xq6lfoI981DihhIpqeO54Ii4nPMMXGGanl8oHIIQ=
Subject key identifier:   43:51:44:1E:4A:94:21:D1:34:8B:20:88:C1:36:09:66:4B:73:5F:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0D4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:42:13 +0000
ROA not before:           Fri 19 Nov 2021 15:42:10 +0000
ROA not after:            Sat 19 Nov 2022 15:42:10 +0000
asID:                     139879
IP address blocks:        156.231.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:42:10 2021 GMT
            Not After : Nov 19 15:42:10 2022 GMT
        Subject: CN=61967455-f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:49:57:73:41:66:3f:f0:24:b3:a7:24:d5:
                    c4:2f:3a:86:f8:59:20:69:74:50:3e:39:18:2a:5e:
                    ef:97:af:4b:e0:f2:c5:86:97:b2:31:d6:a2:53:8a:
                    b3:de:ed:8b:37:f1:99:e5:a3:81:35:6c:9a:aa:3c:
                    2e:68:66:e6:14:ab:a5:e6:cd:96:8f:05:10:c6:c0:
                    71:9b:21:80:82:98:c6:23:ed:9e:da:92:53:d4:3a:
                    fb:f6:a3:aa:d4:be:4a:e3:3c:82:b2:08:b4:b0:be:
                    53:33:8f:09:d6:c3:01:4c:f3:84:e0:d6:d5:6a:76:
                    d3:f1:44:08:0d:ef:6d:ac:5a:d3:ad:86:3f:2b:01:
                    64:6d:51:2a:5f:d2:77:0c:5a:59:e5:5c:a8:42:44:
                    82:c2:76:13:77:0c:c5:27:b5:91:59:97:03:a0:d8:
                    d4:02:a4:76:f7:33:4c:07:3e:ee:1f:83:3a:51:a8:
                    64:31:08:24:2d:13:a3:8e:07:db:4b:c8:c8:f4:20:
                    cf:ef:3b:29:63:ef:3a:71:64:ab:53:8f:74:47:5f:
                    0c:7b:fb:2b:a7:9c:ba:22:de:c5:62:f5:14:18:7f:
                    2d:6e:79:da:d4:f8:42:91:3a:6e:bd:f2:21:e7:35:
                    b3:38:29:81:b1:5f:16:c6:37:dc:5e:46:03:b3:db:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:44:1E:4A:94:21:D1:34:8B:20:88:C1:36:09:66:4B:73:5F:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:26:87:43:8a:7d:be:f8:89:e0:12:b9:bb:b1:a7:bb:76:
         40:db:98:3f:1d:f2:02:ae:63:27:03:d7:12:6e:95:93:26:5b:
         42:cf:57:ca:54:7d:24:04:a5:86:46:b4:df:29:a4:74:c2:78:
         a0:2d:22:19:fd:62:26:8f:0c:18:93:40:f0:91:c8:62:77:f5:
         a1:a8:fd:b0:eb:57:7c:53:48:50:35:ad:40:be:60:31:b4:ca:
         65:07:2a:10:63:44:c0:cb:e5:f8:17:84:b4:a1:12:d9:e5:ce:
         70:2a:90:36:d5:e9:f0:c9:9e:a1:84:86:41:34:70:7b:bd:d2:
         2b:c0:72:c2:d6:be:ba:1d:40:2f:33:97:55:9b:98:ed:62:93:
         ae:c8:45:9d:30:11:1f:ef:76:2d:84:6c:a9:4c:06:5e:ee:18:
         36:f9:6b:26:ac:6b:36:91:ee:c8:75:26:c8:5c:1e:de:b8:33:
         e3:66:83:3e:4f:95:6f:d2:e5:ba:c2:d1:c4:c0:4d:c2:89:ae:
         90:39:21:d2:3d:97:41:b2:e9:79:7e:19:3f:5e:37:77:40:b9:
         05:a0:0e:6b:7e:d0:36:e2:c6:5b:82:b7:aa:e6:35:24:f0:66:
         eb:06:67:f1:2a:7c:ac:3d:4b:8d:6f:24:13:56:f2:fe:92:66:
         ef:23:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org