Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3D63603B0711ED81189396F1222468.roa
File:                     5F3D63603B0711ED81189396F1222468.roa (raw, json)
Hash identifier:          g8S1DZR0K1ou9My27aL7EDdwKOtOPkcqthQ48cfmA5E=
Subject key identifier:   5B:AD:D6:29:55:F0:9C:09:60:D3:98:84:13:D2:99:3A:27:17:A7:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3D63603B0711ED81189396F1222468.roa
Signing time:             Fri 23 Sep 2022 06:17:17 +0000
ROA not before:           Fri 23 Sep 2022 06:17:13 +0000
ROA not after:            Fri 30 Dec 2022 06:17:13 +0000
asID:                     328608
IP address blocks:        45.195.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6228 (0x1854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:17:13 2022 GMT
            Not After : Dec 30 06:17:13 2022 GMT
        Subject: CN=632d4f6d-0e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:53:1c:b9:48:55:56:d1:32:15:df:e7:28:
                    47:cf:f4:49:31:15:9b:38:7a:36:e6:45:3d:d8:5c:
                    6a:59:14:8d:04:2e:bf:17:28:f7:53:d5:fc:ac:90:
                    70:a4:8f:04:43:53:0a:bd:f1:2e:00:ef:7a:50:6d:
                    00:99:2b:0a:1d:c8:c4:b1:52:be:3c:fe:f5:ee:b7:
                    1e:36:14:ec:8d:e5:e5:93:12:73:8f:51:30:7c:fc:
                    98:59:4f:f2:db:e9:39:6b:9d:bc:ad:2f:f6:f0:a9:
                    96:1d:cd:11:f6:4e:f6:aa:97:0c:9b:d2:d9:ca:56:
                    92:56:72:74:97:f8:c9:eb:b2:9a:43:1e:04:19:6c:
                    ec:fa:e8:ab:f9:61:27:e5:b8:f6:c3:8d:e6:d8:1e:
                    ec:f6:15:40:d1:16:34:26:2f:8c:f8:12:3b:25:1f:
                    42:ac:4d:1f:aa:7c:c6:c1:05:cf:9b:0e:75:3c:d5:
                    51:c1:f3:49:cf:79:f8:c2:c5:37:f6:13:08:27:33:
                    af:38:67:bd:28:6b:77:ee:ac:47:7d:69:88:c0:a1:
                    37:ed:bc:06:67:df:65:90:43:4d:5c:8f:ce:03:a7:
                    c3:00:97:1c:0a:47:c0:b7:dd:6b:8c:a3:01:43:e0:
                    7f:f4:3b:2e:6e:11:75:0b:b6:54:9b:36:28:f1:0f:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:D6:29:55:F0:9C:09:60:D3:98:84:13:D2:99:3A:27:17:A7:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F3D63603B0711ED81189396F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:7d:f6:6e:76:3d:9f:89:81:a8:22:6b:cb:f0:97:8c:32:
         8c:19:ba:0e:19:8d:e8:ae:7f:3f:0f:ff:38:15:1f:d7:81:f1:
         d0:c9:52:6d:d1:b6:89:3b:51:39:b1:93:79:22:df:2d:7f:54:
         a3:cd:3d:89:1b:18:11:61:0f:2f:c0:c8:d3:19:57:fc:51:d0:
         37:b3:71:e4:ee:f4:98:e8:48:e3:fa:ac:ed:89:df:52:6e:df:
         a2:0e:2b:d8:06:55:55:0f:8e:32:c6:46:4b:5a:6e:e2:4e:99:
         89:23:1f:2c:3b:c2:13:71:f5:26:da:8c:3d:49:df:02:f5:e2:
         ef:6f:2e:d7:a2:a7:52:9c:d4:32:30:aa:1b:f5:bf:7d:3e:a7:
         3b:e9:31:f3:7c:da:00:89:0f:70:f0:a7:ec:87:08:f3:17:99:
         8a:bf:13:cc:32:71:b6:1c:c6:71:c0:57:d4:ac:c6:b5:ca:fd:
         d6:49:27:d2:9e:99:14:e5:12:00:73:76:8f:2c:77:b9:6d:e2:
         7f:85:23:26:55:a5:af:fe:ca:5a:e0:20:dd:a9:06:bd:1c:2e:
         a7:da:2e:9b:a9:6f:e7:1f:bc:13:49:6f:d2:ee:74:33:b1:d0:
         4a:15:0e:08:c3:9f:bc:5b:6f:91:ae:c0:ab:94:db:f5:1f:1a:
         8a:1d:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org