Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28DACAC636DD11EC9163E966D8A014CE.roa
File:                     28DACAC636DD11EC9163E966D8A014CE.roa (raw, json)
Hash identifier:          iOfV+szxQMiML2qgHQ5lSmTF6DaaMNGz7LN+c2UGOvU=
Subject key identifier:   92:16:7A:80:A4:E2:A0:23:E5:B2:4B:76:7F:BF:3C:6E:63:94:E2:6A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28DACAC636DD11EC9163E966D8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:20:04 +0000
ROA not before:           Wed 27 Oct 2021 04:20:01 +0000
ROA not after:            Thu 27 Oct 2022 04:20:01 +0000
asID:                     58895
IP address blocks:        45.206.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2826 (0xb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:20:01 2021 GMT
            Not After : Oct 27 04:20:01 2022 GMT
        Subject: CN=6178d374-fc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:33:5f:a4:07:6a:d3:40:7a:a1:78:c2:ec:
                    80:34:30:47:6b:18:10:8f:4e:15:f0:b3:59:b2:ed:
                    8e:9f:bc:77:b4:5b:1d:c0:50:82:29:25:97:e3:a7:
                    cc:7b:a2:95:e7:24:2f:4f:8b:0b:cb:ed:38:1b:1b:
                    a4:92:c7:4b:ac:00:ff:f3:9a:fa:99:67:3c:6d:ac:
                    11:9d:f9:63:2b:b7:95:b7:bf:71:e0:2e:f3:81:f7:
                    02:3b:61:2a:fd:5b:31:e8:cb:17:20:f4:68:59:1c:
                    e0:00:59:ff:37:8d:a8:3a:2c:04:11:07:55:ec:ce:
                    19:9c:21:5d:94:d8:88:28:35:ba:c2:cb:64:35:3e:
                    a9:f7:96:8c:a0:74:4e:a7:49:bc:e6:5e:9b:d1:d6:
                    94:e8:c8:bd:cf:2e:0c:30:52:0e:63:ef:9e:9a:45:
                    e6:d0:a0:49:ff:80:b1:82:8f:dc:0a:a0:bc:db:b3:
                    fc:b1:35:62:ac:aa:32:0d:e0:77:56:d5:83:a0:68:
                    95:e8:d6:3a:d0:f3:89:e6:1f:e1:67:0c:15:6d:d6:
                    06:5e:b9:5f:aa:0e:6f:7c:51:b1:9b:ef:ba:e0:ea:
                    20:85:3a:73:3e:9f:0a:3e:6d:98:f0:c1:7a:c9:18:
                    a3:d4:a0:8d:4c:49:d3:49:02:ae:b2:ef:7f:6f:8b:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:7A:80:A4:E2:A0:23:E5:B2:4B:76:7F:BF:3C:6E:63:94:E2:6A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28DACAC636DD11EC9163E966D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:21:3a:0f:ff:ec:3a:fa:11:ae:3a:49:b4:c3:36:ec:10:
         4a:4d:e9:3a:75:73:c2:e8:f0:76:e2:f0:52:cb:6d:3d:c9:3d:
         ee:0e:c7:10:5e:1e:5b:92:b7:16:f2:64:8e:e4:3c:14:22:24:
         12:f1:7a:6e:46:c9:81:d2:73:f0:61:68:64:cd:03:bb:da:21:
         dd:eb:d6:a3:33:fc:44:bf:08:fa:ed:70:13:73:6c:11:be:84:
         58:77:62:15:99:ad:a3:5f:57:f5:0a:76:39:99:48:04:c0:0b:
         2a:4d:a9:a7:fb:2d:25:ee:27:1a:5f:d6:8f:0b:4d:36:7a:e1:
         d1:14:b1:09:0f:37:f3:48:05:4a:49:9f:76:68:52:b5:78:26:
         9e:ca:79:3d:fd:08:15:37:21:31:a8:7d:10:d6:f5:e2:07:96:
         c5:88:c5:2d:c5:e5:27:ec:89:a9:23:86:95:f4:e7:c9:63:07:
         d7:3b:83:93:c4:af:b7:11:93:85:6b:60:9e:14:74:52:80:ae:
         63:73:b8:73:42:ca:98:f4:49:4c:cf:3b:15:9e:02:01:61:80:
         ee:e9:e1:7d:a8:4a:48:7e:d3:3b:2f:fe:3e:52:5f:de:d4:52:
         b8:ad:b0:15:56:ac:a8:6e:69:b6:bb:78:0a:6a:00:a7:1d:75:
         6d:bb:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org