Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48383B1447E311EFB4E162A5762E951A.roa
File:                     48383B1447E311EFB4E162A5762E951A.roa (raw, json)
Hash identifier:          3X+v/csVl1wAsLE7LgRCvhu9WsAjpS1otytwiiwaqcc=
Subject key identifier:   94:6B:C8:DF:DA:CE:2A:82:B6:EC:A1:A5:EC:1E:CF:03:4B:89:6B:98
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9E29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48383B1447E311EFB4E162A5762E951A.roa
Signing time:             Mon 22 Jul 2024 04:31:37 +0000
ROA not before:           Mon 22 Jul 2024 04:31:33 +0000
ROA not after:            Wed 31 Jul 2024 04:31:33 +0000
asID:                     273135
IP address blocks:        45.195.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40489 (0x9e29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 04:31:33 2024 GMT
            Not After : Jul 31 04:31:33 2024 GMT
        Subject: CN=669de0a9-08f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:24:62:01:4f:c0:a5:38:ab:44:f3:1c:56:
                    36:83:6b:5f:4f:13:d7:23:16:d2:a5:6e:ee:ad:35:
                    68:75:fc:44:99:a6:2d:88:79:97:b1:66:e2:b6:a2:
                    1f:5b:f5:0b:62:f1:29:54:cb:97:7c:ba:a0:99:b7:
                    25:c9:07:1e:dd:60:e8:eb:f4:45:f2:20:20:b0:21:
                    e7:86:30:5e:47:64:ea:81:5f:59:48:af:76:01:37:
                    fd:2d:ac:66:7c:c3:9d:d3:52:b6:13:1e:c5:ac:e6:
                    1e:b5:20:e7:61:4c:3b:d6:1d:ab:36:c4:7d:25:4b:
                    e4:76:16:fb:a7:3f:d4:a6:d4:e5:bc:7c:6d:a9:d9:
                    06:68:7f:7d:7d:c0:05:96:c2:7b:4d:1f:0c:b2:11:
                    95:b2:57:8a:07:60:27:19:3b:99:4b:28:0b:39:25:
                    68:3c:95:73:31:a7:89:00:98:d6:0b:28:8d:67:21:
                    ef:44:f0:ec:d9:0e:0e:5d:fd:14:76:b1:0f:14:ae:
                    46:f4:ae:2b:b6:f0:81:5d:0c:d7:57:65:95:a8:ad:
                    76:21:9d:88:6d:af:ea:45:41:87:07:60:b3:6f:93:
                    e5:f0:6d:0c:fb:e9:5b:a2:c6:09:22:f9:39:0e:eb:
                    50:2c:7c:16:5e:0c:6b:4b:f4:2b:d0:66:53:3a:3a:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:C8:DF:DA:CE:2A:82:B6:EC:A1:A5:EC:1E:CF:03:4B:89:6B:98
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48383B1447E311EFB4E162A5762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:88:4d:35:d0:77:f0:9e:13:87:85:27:c2:52:5a:5a:12:
         73:41:a2:b4:e5:b2:ef:d9:e4:a2:4d:e7:e9:74:0a:76:61:97:
         61:b9:ab:ef:e7:fb:44:f4:d7:31:de:e2:a5:bb:da:0a:a6:d8:
         02:6d:46:c1:46:2c:aa:e7:64:fa:40:6a:bc:da:9a:d1:8e:25:
         74:9c:4c:a0:05:8e:5b:24:d2:5d:84:8a:dd:10:48:95:8f:ab:
         d9:6c:aa:de:75:91:57:76:f1:2c:a6:d4:0e:bc:f7:2d:ba:b6:
         30:ed:61:5b:cc:5a:1d:49:77:45:b3:9d:f0:d3:22:91:c2:b0:
         6a:1f:bc:09:1f:0b:7f:f8:ad:c6:5e:52:92:4f:bf:06:3e:ea:
         58:a8:3a:33:ea:8a:23:3f:09:c4:8a:7d:9d:11:5b:e6:c7:57:
         a1:cc:d3:df:be:be:10:74:cc:d8:ce:93:59:da:c0:1e:c6:38:
         7b:fb:54:15:c5:41:14:60:70:fb:d0:1f:eb:1a:93:e1:92:f0:
         74:5d:72:fc:c5:53:4f:8f:63:cc:53:19:07:97:83:47:ee:66:
         7c:f5:b9:83:25:47:11:96:a0:42:84:ac:74:0a:90:10:b8:df:
         7d:d4:72:75:4d:6d:32:bd:a4:13:bb:4b:62:27:32:02:67:83:
         52:08:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org