Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
File:                     1AA149B4784E11EC83F829C65A40D577.roa (raw, json)
Hash identifier:          oGzQRTQcSmiXJpHTUdBGFzFTGnft9IJ1nYEnDVQjJ1g=
Subject key identifier:   ED:CB:6B:80:3D:E6:B7:E5:19:86:31:65:D3:36:9F:A6:97:E9:69:93
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       119B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
Signing time:             Tue 18 Jan 2022 11:02:19 +0000
ROA not before:           Tue 18 Jan 2022 11:02:15 +0000
ROA not after:            Sun 30 Oct 2022 11:02:15 +0000
asID:                     136525
IP address blocks:        45.206.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4507 (0x119b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 18 11:02:15 2022 GMT
            Not After : Oct 30 11:02:15 2022 GMT
        Subject: CN=61e69e3b-eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:41:1b:f5:ba:81:c8:83:53:b4:c6:7a:e2:
                    ca:82:a8:9e:f7:14:2d:97:6a:1f:d6:36:72:1e:71:
                    c5:9b:51:c6:c6:54:bc:f7:ac:34:b5:d9:75:4e:dc:
                    70:8e:19:b4:6b:dd:e7:98:0e:10:55:90:1f:b0:a4:
                    e1:4c:4d:21:18:bd:f6:ee:63:41:b5:e8:9f:41:62:
                    28:30:ea:b7:02:43:ed:ae:26:8a:f3:43:15:f5:51:
                    fd:d9:59:87:3e:f9:d5:a2:a8:e5:f8:da:fc:9e:9c:
                    ab:73:25:2d:55:fe:62:d0:8e:f3:c8:71:0c:02:76:
                    27:7e:be:30:85:e0:0b:af:63:d9:ab:cf:17:e2:8d:
                    f1:1d:ad:56:33:87:8d:4b:13:a7:31:7b:c3:32:a6:
                    46:36:d9:39:4e:14:50:bb:eb:9f:d1:15:4c:bc:6a:
                    10:8e:7f:72:9f:80:0c:08:03:66:ca:d8:ba:97:54:
                    1f:2a:cd:2e:72:c6:01:f6:ec:68:a9:5b:f4:4c:bf:
                    e3:03:ad:44:1f:0d:b4:f7:cd:34:0b:45:ec:6f:ed:
                    06:e4:d5:91:3e:a7:77:7a:db:01:ce:8f:f8:d9:73:
                    21:9d:70:5b:1a:27:d6:a1:69:fa:63:4b:7f:1d:93:
                    cf:80:b3:68:00:77:52:d3:49:42:e0:5a:16:94:48:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:6B:80:3D:E6:B7:E5:19:86:31:65:D3:36:9F:A6:97:E9:69:93
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:85:99:97:aa:0d:60:ef:9e:6e:3f:96:18:90:f4:b7:e6:
         00:55:35:0e:67:7e:73:e0:c3:92:d7:fa:2e:c0:55:59:ce:93:
         b4:24:9e:66:a6:1f:c5:c7:80:9f:33:a4:1f:e1:38:5c:2a:21:
         8d:8f:17:5c:34:16:c2:6b:47:3e:80:ba:ba:fd:0f:54:ad:6e:
         06:d8:fd:cd:fc:a6:03:c8:a7:e2:cf:27:7f:a1:89:15:a1:0e:
         5c:d5:bc:0e:05:33:c5:d3:f9:bf:a0:f0:dd:b5:d8:33:e6:d0:
         88:83:40:3d:a7:e3:e7:a6:f2:10:4d:61:a4:ff:52:19:18:0f:
         82:47:01:70:22:31:e8:ba:24:be:12:d9:34:c5:ab:a2:b2:ac:
         0a:10:28:b6:0b:4b:4f:a4:51:df:83:81:f3:9e:39:c6:9b:97:
         df:4e:61:c4:10:0a:26:11:a5:5f:ad:79:1e:b1:05:76:85:41:
         86:dd:3a:58:4f:99:65:6e:ab:a8:3a:29:e8:ab:a8:1e:30:20:
         d0:cd:cc:cc:a2:a9:37:cd:34:94:fb:0f:5c:33:a9:01:fd:60:
         d0:4d:5d:55:1e:41:cb:7c:04:24:c5:a7:c0:b9:10:26:58:48:
         05:8d:bc:71:74:3e:6e:48:ef:8c:50:51:f0:0f:0c:42:04:5e:
         78:b9:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org