Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45580070F1F711EDB34D85694AD9E6FC.roa
File:                     45580070F1F711EDB34D85694AD9E6FC.roa (raw, json)
Hash identifier:          +uCo5h3bZsykYFxVmdQmP0DO1w1UyDF3p859sSBG3QY=
Subject key identifier:   0B:BF:BA:1D:84:A4:85:F9:DB:61:9A:7B:16:B7:3D:AC:6D:AC:4B:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       24EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45580070F1F711EDB34D85694AD9E6FC.roa
Signing time:             Sun 14 May 2023 01:33:04 +0000
ROA not before:           Sun 14 May 2023 01:33:00 +0000
ROA not after:            Thu 15 Jun 2023 01:33:00 +0000
asID:                     138995
IP address blocks:        156.227.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9454 (0x24ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 14 01:33:00 2023 GMT
            Not After : Jun 15 01:33:00 2023 GMT
        Subject: CN=64603a50-4463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:72:04:f0:64:be:d6:51:3f:7d:a2:01:2c:
                    b3:41:93:3f:e4:2c:18:08:46:11:90:3d:76:7f:82:
                    76:7d:e8:5d:2f:00:89:c9:d8:b5:b6:aa:9c:a8:65:
                    66:d5:ed:9f:cd:b3:fd:26:f2:f8:db:c5:39:9b:52:
                    93:68:9a:dd:fe:d9:2a:a5:c5:b9:44:a3:28:c9:88:
                    bf:d6:e3:88:2a:bf:ae:81:fa:5c:95:e4:d0:89:b3:
                    59:83:f0:15:fd:b6:36:30:93:ea:00:8e:3a:f3:38:
                    22:49:90:32:73:d9:e9:de:04:1d:fc:fe:9e:34:62:
                    ea:46:be:1c:1c:a4:fe:96:b8:b7:14:53:a7:0c:ae:
                    3a:d8:10:8e:ec:3e:38:4d:44:96:3f:02:44:31:7e:
                    7f:6f:7a:63:1d:ce:99:eb:3d:02:0b:9b:9a:53:a0:
                    39:f0:37:4f:24:25:4e:86:49:98:23:c4:be:05:f3:
                    89:74:73:c4:f4:fb:88:77:21:32:70:03:c0:ac:ac:
                    30:cd:18:04:b1:e2:ad:82:06:bd:8d:3a:30:ed:32:
                    cc:34:e2:fe:57:ba:40:8f:55:3c:4a:0d:63:17:fb:
                    f0:64:b5:0e:a7:20:03:f0:8d:64:76:ae:09:62:b8:
                    12:7f:7f:c2:3f:90:71:ca:80:4b:20:24:a0:e0:c6:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:BA:1D:84:A4:85:F9:DB:61:9A:7B:16:B7:3D:AC:6D:AC:4B:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45580070F1F711EDB34D85694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:bb:d4:44:f0:12:43:0a:90:68:36:e1:0f:33:7a:2e:e9:
         db:a0:48:79:51:f1:c6:51:22:33:43:08:6c:f7:e5:3e:ed:6f:
         19:b0:0c:76:53:e7:9f:10:50:55:61:be:c7:9d:be:d5:47:4c:
         f4:44:21:28:d3:16:a4:8c:64:e2:74:96:12:a9:9d:02:cc:a5:
         88:05:5e:6f:47:6f:7e:f6:ec:7b:d3:9c:3f:56:a9:62:3f:bb:
         97:a0:08:b9:cd:73:82:51:23:03:48:19:c8:04:6b:cc:f1:8d:
         56:66:8b:ab:b2:6c:26:04:23:58:69:3e:0c:40:7d:59:e6:9f:
         09:f9:ed:7c:79:50:28:57:51:14:9d:61:7c:b4:c7:71:03:06:
         96:ec:de:88:7a:62:ef:a1:0d:74:30:88:29:5a:e0:9a:a3:bf:
         48:cc:bf:35:de:77:c8:5f:2f:a0:f4:db:9e:18:72:ea:d8:ef:
         52:14:b6:3c:ab:bd:c7:35:d2:b5:98:16:72:66:cd:e9:64:70:
         16:8d:25:33:c0:59:4f:56:df:4a:a4:bb:13:96:97:5c:8a:82:
         c1:8a:80:a1:dc:d7:49:05:94:f6:19:2b:b1:8b:ee:18:f2:92:
         aa:54:38:35:14:91:1e:04:c1:2e:f3:37:86:6d:75:d6:95:fb:
         c6:28:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org