Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2480980E488811EC94F1953AD8A014CE.roa
File:                     2480980E488811EC94F1953AD8A014CE.roa (raw, json)
Hash identifier:          PC3zKAv8PmmiFr4tjrzKHnZgqNEv1uhrT8yvliuUk1Y=
Subject key identifier:   22:81:3F:37:7B:D7:BC:67:BF:1D:5C:8D:A5:E6:C6:69:5C:18:D8:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0DBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2480980E488811EC94F1953AD8A014CE.roa
Signing time:             Thu 18 Nov 2021 15:56:51 +0000
ROA not before:           Fri 19 Nov 2021 15:56:47 +0000
ROA not after:            Sat 19 Nov 2022 15:56:47 +0000
asID:                     139879
IP address blocks:        156.231.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3518 (0xdbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 15:56:47 2021 GMT
            Not After : Nov 19 15:56:47 2022 GMT
        Subject: CN=619677c3-930e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:ae:29:b1:48:5e:f8:cb:fa:34:cb:17:6a:
                    48:3a:19:c8:c8:62:9e:3d:cd:32:7e:06:b5:92:ec:
                    db:87:9b:06:a2:39:7b:c8:3f:00:8c:89:de:fc:fa:
                    77:91:58:99:28:61:97:be:6d:32:7c:ea:15:46:eb:
                    96:a4:28:32:37:c1:44:00:46:6c:9c:31:71:0e:e0:
                    fb:bd:ea:bd:5e:43:06:66:df:95:1a:b2:b0:a9:d2:
                    d0:22:de:8a:8b:2c:68:dc:cc:51:f3:31:06:77:a6:
                    7c:2e:36:c4:f5:8c:d2:b9:96:06:9a:d5:b5:fc:e1:
                    79:9f:5e:bf:d2:fe:11:fe:b4:0f:48:41:d5:df:6a:
                    1d:70:86:e6:1a:57:82:63:c9:0c:30:b9:b4:7f:3c:
                    bf:39:04:74:1f:42:2e:c8:e1:43:88:7e:e5:57:2c:
                    2b:70:10:dc:a0:63:5a:d5:f3:67:54:e0:58:30:20:
                    5b:ce:7a:3d:47:df:7b:79:78:47:0f:21:22:26:c3:
                    52:a0:c0:5e:8d:af:f1:78:de:81:29:ed:0a:50:6c:
                    7a:71:58:75:85:ca:29:ca:5e:98:98:fc:c7:c9:cf:
                    73:ea:39:03:a5:2e:90:60:7f:57:ab:4c:3b:ae:c1:
                    1e:9a:f1:b2:61:2c:8e:eb:2a:df:e8:66:b5:00:52:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:3F:37:7B:D7:BC:67:BF:1D:5C:8D:A5:E6:C6:69:5C:18:D8:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2480980E488811EC94F1953AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:50:0e:01:b7:ec:03:1e:ff:7b:0d:b4:15:c0:db:ae:58:5a:
         8d:72:26:5f:66:b8:d2:c4:f5:38:2c:fc:e2:40:03:fb:32:97:
         f1:04:91:88:79:3f:cc:28:c5:b9:74:78:e9:80:fe:bb:70:da:
         30:86:90:45:c0:c0:92:c4:45:4c:ea:e8:fa:f9:81:0b:b5:10:
         86:d9:cc:91:7b:25:22:2e:03:50:f7:c3:9d:46:f3:48:b9:a8:
         8b:87:50:9f:83:84:a1:1a:bd:39:e4:f4:aa:bb:a2:da:fa:48:
         50:92:03:d8:d1:f3:d2:ef:33:c1:20:04:a7:ad:17:20:54:8d:
         ce:33:c2:cc:2c:9c:d1:46:62:3c:47:b6:7e:49:d4:5e:83:93:
         f9:26:c2:87:85:3f:ba:f2:05:de:e9:71:19:fb:bf:57:e1:06:
         9f:15:0e:e9:22:fd:bd:e6:19:e4:46:7d:28:95:d7:9a:33:c8:
         a4:6c:7c:37:c8:e7:23:71:10:4a:f7:90:7e:5f:5b:50:50:e3:
         a7:ed:aa:35:50:3f:63:0e:57:c6:f9:5d:0d:7e:32:0e:d7:31:
         e7:9a:a3:48:77:92:8a:78:eb:54:96:d2:15:e3:e2:41:66:94:
         a4:44:c8:fc:f7:76:b3:4a:88:41:eb:85:65:50:d3:63:6a:b3:
         7a:fb:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org