Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6332EBE04A5311EF81D8ADB7762E951A.roa
File:                     6332EBE04A5311EF81D8ADB7762E951A.roa (raw, json)
Hash identifier:          /0r49GySuEaV/wRspHDn78YBBpzXmmq1iurtbwtg/8M=
Subject key identifier:   62:30:F5:F6:B3:FE:6B:22:56:45:90:9F:0B:31:46:9D:79:C2:33:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9F83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6332EBE04A5311EF81D8ADB7762E951A.roa
Signing time:             Thu 25 Jul 2024 06:59:08 +0000
ROA not before:           Thu 25 Jul 2024 06:59:05 +0000
ROA not after:            Fri 16 Aug 2024 06:59:05 +0000
asID:                     136950
IP address blocks:        45.204.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40835 (0x9f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 25 06:59:05 2024 GMT
            Not After : Aug 16 06:59:05 2024 GMT
        Subject: CN=66a1f7bc-19ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:f6:57:b1:f1:8b:92:37:96:21:e7:87:d6:
                    72:2d:78:4c:5e:47:8d:ab:69:95:37:c3:d5:4e:6b:
                    43:71:fb:45:41:7e:7d:5a:2b:6c:0b:95:fe:b5:bd:
                    17:86:b0:d4:51:03:bf:d9:88:92:59:85:20:98:02:
                    c0:41:c8:9b:4b:eb:36:73:5d:e9:cf:f8:1c:e7:86:
                    60:29:1e:78:1a:fe:83:56:8c:29:ce:23:a9:a5:91:
                    f8:65:10:11:15:82:b2:0f:fe:5d:41:a4:f7:04:85:
                    35:1b:73:32:aa:c1:0b:dd:c0:20:f9:77:f3:4a:8e:
                    91:a9:e9:3a:9a:28:e8:e4:67:93:f6:d8:8f:92:51:
                    cc:b6:bb:b2:63:9a:ff:e7:de:bc:c0:9b:44:81:ad:
                    e7:f0:fa:d1:89:d9:bf:fc:40:39:b3:fd:f6:cb:4b:
                    78:77:e1:4c:fb:f8:52:5e:18:7c:30:fe:e9:6b:89:
                    57:33:83:59:3c:c7:1a:e9:30:b6:7b:97:bf:4b:6d:
                    ce:6f:47:37:42:ba:d9:6a:2d:b2:1b:da:f4:3a:76:
                    90:9d:38:be:21:51:45:fa:46:40:93:91:16:b9:0f:
                    e2:4a:89:8b:50:b5:31:64:c0:cf:69:20:87:eb:11:
                    3e:f6:7f:4a:63:f2:bc:5d:ff:ed:cb:44:c6:40:76:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:F5:F6:B3:FE:6B:22:56:45:90:9F:0B:31:46:9D:79:C2:33:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6332EBE04A5311EF81D8ADB7762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:91:f8:84:32:12:6b:3d:ea:33:d1:78:69:21:42:01:f5:
         2c:8a:c0:4e:54:5e:3b:9d:ed:2d:ad:a5:f7:fe:35:96:da:10:
         4e:ef:9c:40:1e:e6:9b:8e:56:66:dc:59:7d:9e:8f:41:65:8b:
         11:e6:8b:71:b7:39:b2:85:e9:20:2a:62:64:84:ef:ce:0c:74:
         61:98:48:a8:7b:93:e1:db:cf:c6:ef:27:22:29:4e:7e:3f:81:
         3f:04:18:5b:82:89:4d:14:14:d0:2c:ff:70:48:e7:28:4d:66:
         81:aa:6a:12:77:61:26:e5:98:12:0f:48:af:2a:d1:f5:24:11:
         4e:18:0d:59:33:82:3e:7c:5f:f9:da:12:be:2d:9f:4a:9b:26:
         ad:19:77:17:94:b7:14:02:ee:e0:87:26:f8:c6:f2:c8:a1:53:
         e9:3f:75:99:d8:e6:ee:75:e9:9d:3a:76:c7:74:ed:e3:17:dd:
         54:34:15:f8:69:35:c9:b7:4f:0e:44:4f:47:8b:d6:6b:8e:0d:
         38:06:ee:30:f0:12:47:dc:e6:dc:7f:5a:2f:60:ca:07:80:0b:
         8a:67:86:0e:32:54:d3:c5:b1:6f:ae:c1:58:30:84:83:ae:c3:
         f5:29:a0:4f:12:95:c7:1c:58:4c:a0:d5:67:5a:7c:b2:a9:fc:
         a8:cc:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 09:53:35 2024 by rpki-client on console-ams.rpki-client.org