Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CC05D636EB11EC89D37A7ED8A014CE.roa
File:                     47CC05D636EB11EC89D37A7ED8A014CE.roa (raw, json)
Hash identifier:          kf5xnEd5FNdSIdJUFCXPgTRG4oxHguIuGlERyABED/w=
Subject key identifier:   03:4E:FF:83:07:A5:97:97:40:69:DB:76:E0:05:A3:F6:6D:FB:7C:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CC05D636EB11EC89D37A7ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:01:09 +0000
ROA not before:           Wed 27 Oct 2021 06:01:06 +0000
ROA not after:            Thu 27 Oct 2022 06:01:06 +0000
asID:                     58895
IP address blocks:        45.206.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:01:06 2021 GMT
            Not After : Oct 27 06:01:06 2022 GMT
        Subject: CN=6178eb25-30df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:cf:45:72:f3:46:49:d5:7f:42:45:de:78:
                    f2:5c:1b:9e:ea:5a:9d:5b:d3:fc:c9:59:e4:49:49:
                    05:b5:70:bd:e4:b8:ad:bd:f9:11:ea:64:19:0c:01:
                    54:1a:b8:9e:11:4f:f3:7f:ac:e1:27:8e:98:4b:b9:
                    e7:95:f2:c4:43:e2:f4:53:45:b4:3d:af:c5:f6:13:
                    c7:b1:9a:05:9c:69:e4:98:50:16:03:78:70:0b:be:
                    93:f2:30:39:fc:36:78:01:dc:87:a6:c0:25:01:b0:
                    37:5f:a0:1f:12:71:39:af:11:d1:11:57:49:9d:8d:
                    c4:b0:00:06:68:13:e6:cf:ff:bf:17:e7:9d:38:0e:
                    72:c0:94:5e:7a:9d:39:2b:d0:6e:3e:c9:63:01:27:
                    33:8f:35:c1:9a:2d:45:4b:5e:65:0c:8f:05:5f:45:
                    ab:4b:07:73:bb:d6:fc:ba:01:36:24:6c:31:5f:a9:
                    ff:5e:d5:20:a9:7c:8c:7a:e8:f6:b9:67:66:e1:14:
                    c0:ab:ff:a7:6a:ce:31:2e:a9:1a:d0:69:3f:ad:7d:
                    c5:62:50:d9:68:1f:b5:d2:2e:79:f5:37:6d:c4:a9:
                    ab:f1:43:9b:70:0a:ae:ea:d9:85:7f:71:3c:9f:74:
                    9c:f8:b6:55:6b:8f:4d:28:a4:c2:c3:05:7c:65:71:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:FF:83:07:A5:97:97:40:69:DB:76:E0:05:A3:F6:6D:FB:7C:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CC05D636EB11EC89D37A7ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:ac:bc:d4:9b:8e:19:fc:b7:c8:4e:3b:de:c2:ae:e6:11:
         50:ad:7a:8e:ed:26:72:94:39:ed:9e:7e:3e:44:b9:96:34:e9:
         9e:81:fa:1a:e7:97:31:ef:bc:71:45:13:fa:f5:e6:70:9f:76:
         77:1b:bf:c3:d8:10:4b:15:3c:c1:6d:aa:ff:2c:85:50:f2:48:
         45:4e:70:7f:5e:9b:45:30:31:16:a2:90:1c:6f:c5:f3:2e:35:
         86:7f:9d:a7:0a:6c:fe:64:e7:8b:f3:a0:7e:3a:8a:02:26:a1:
         4d:ca:40:01:4c:13:7a:cc:ba:8c:b0:dd:8d:f2:f2:0e:03:68:
         4f:ea:d7:a9:85:60:53:39:be:30:b7:51:00:8e:f3:f3:b8:df:
         01:a3:f0:94:81:86:4a:9f:8c:b6:77:57:d9:23:61:9a:0e:d4:
         3b:ee:80:52:e5:b2:c6:de:0a:3f:16:d5:84:6b:35:2e:10:b6:
         c1:52:3c:ab:53:0d:96:8b:92:09:85:8f:00:87:21:0a:46:27:
         a6:a3:d9:be:3a:07:80:fc:c5:66:71:a4:9e:67:e7:02:08:9f:
         3e:35:12:3e:b6:e5:cc:d6:b4:41:5f:6f:b3:12:b3:6e:b7:d5:
         f6:0b:6b:e8:38:95:98:75:54:fc:77:bc:2c:37:14:a6:e1:db:
         24:64:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org