Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
File:                     3006611C36E111ECB517506ED8A014CE.roa (raw, json)
Hash identifier:          NIHwr8J+ReHClZ0U/UtNUAbi8U4ucFcfjVHqWimpG0A=
Subject key identifier:   B0:F2:DC:32:E2:47:34:12:31:CA:EE:38:BA:D1:25:EF:0F:CE:55:D0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:48:54 +0000
ROA not before:           Wed 27 Oct 2021 04:48:51 +0000
ROA not after:            Thu 27 Oct 2022 04:48:51 +0000
asID:                     58895
IP address blocks:        45.206.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983 (0xba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:48:51 2021 GMT
            Not After : Oct 27 04:48:51 2022 GMT
        Subject: CN=6178da36-565b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:c2:c5:94:3c:3e:29:7a:bc:af:24:13:02:
                    1a:d6:38:44:04:fc:dd:4d:29:68:9b:b2:2e:2c:d0:
                    5c:f1:46:a0:3c:f7:64:e3:26:4b:d6:09:15:7a:fa:
                    30:1e:4b:b4:36:15:7f:4f:ff:01:77:ef:c8:c0:f8:
                    76:bf:14:37:a1:3e:cf:c1:8c:e2:8d:fc:75:8f:e2:
                    0b:3d:02:17:db:55:56:de:05:bd:f3:42:b6:bc:ae:
                    d0:80:be:e8:0a:26:fd:02:12:86:40:03:e3:3a:c4:
                    55:35:fb:66:6f:06:d9:11:4d:06:ee:cb:31:87:2f:
                    ee:74:57:1e:ad:2c:d7:3a:45:04:25:f5:db:cc:eb:
                    af:1f:ae:10:06:06:44:58:41:4c:a1:3d:dd:de:42:
                    30:b7:fd:da:47:6b:dc:51:e6:ce:77:f7:39:cd:43:
                    82:73:4b:b6:e9:a6:47:c7:66:bc:7c:3d:2b:14:30:
                    42:a5:34:f6:5a:3b:88:69:51:33:d8:c8:0a:48:8c:
                    d8:d7:4e:7a:b4:0e:1c:25:73:a3:4b:0a:26:90:65:
                    49:58:b3:79:63:9e:41:25:36:0a:e2:6a:69:26:22:
                    30:cf:55:55:aa:da:24:a8:64:31:c5:db:ab:b6:47:
                    76:0d:89:d9:b4:f7:8a:5b:79:d6:f3:7c:05:2e:b8:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:DC:32:E2:47:34:12:31:CA:EE:38:BA:D1:25:EF:0F:CE:55:D0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:36:8e:85:bd:9b:17:25:d8:02:f3:eb:d6:19:3c:ed:a1:
         ee:c4:6b:d4:68:ee:14:de:9e:34:2f:4a:08:a2:4a:10:ef:b6:
         e0:3e:60:6e:3a:39:33:57:cd:90:d5:a6:c3:06:3a:de:76:0a:
         22:47:46:c6:c3:39:d9:89:ad:3e:2f:f1:51:65:8f:62:64:03:
         57:bd:51:59:f1:56:16:df:58:a6:06:ed:1b:e2:6f:c7:53:c0:
         69:ca:9a:94:68:53:7d:6d:5f:45:88:93:6d:6b:d7:dd:49:ae:
         3c:2c:30:cc:a3:cc:9b:3b:25:70:b2:e8:24:3f:97:46:c7:ea:
         47:15:8f:e0:9a:e8:0a:f1:05:b8:d2:54:40:11:c2:d5:b0:7a:
         63:de:6c:05:63:86:f5:80:84:15:7b:21:15:c7:6b:e0:4d:02:
         ce:29:9f:25:39:a2:40:5a:15:1e:c0:03:9e:41:fd:47:e8:b1:
         a9:ab:e1:5b:c1:a2:ca:15:9c:dd:88:48:61:ec:c8:04:c5:e7:
         c9:d6:b2:b1:05:65:f0:2e:43:df:6d:e3:0a:bd:33:73:27:2f:
         c6:33:e2:ac:c8:1b:60:f7:a6:f8:d1:dd:c3:e3:36:2e:bf:b0:
         a4:ec:3d:44:70:bd:56:e0:95:9d:60:dd:e3:e5:e9:01:5f:e5:
         80:f2:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org