Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
File:                     699E0C16C6BC11EC879CBBA0F1222468.roa (raw, json)
Hash identifier:          Pgld4v/nvmgZTEGH8/pSzDw2koxrV5wN4qkLvx2o+vE=
Subject key identifier:   63:18:59:D0:C2:4E:F5:15:5F:23:BB:74:C8:14:24:13:05:67:51:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       13A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
Signing time:             Thu 28 Apr 2022 06:28:27 +0000
ROA not before:           Thu 28 Apr 2022 06:28:23 +0000
ROA not after:            Fri 30 Dec 2022 06:28:23 +0000
asID:                     35916
IP address blocks:        45.194.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5033 (0x13a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 28 06:28:23 2022 GMT
            Not After : Dec 30 06:28:23 2022 GMT
        Subject: CN=626a340b-e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:67:d1:6b:cc:a9:5f:71:f5:b0:cc:db:55:
                    e9:94:9f:26:94:89:66:21:d7:5d:12:cc:2e:ec:45:
                    a9:87:dc:75:b8:5f:e2:cc:a8:11:62:46:05:9f:95:
                    b6:02:d9:67:1a:93:33:15:ee:22:d2:9d:4c:58:91:
                    a3:9a:44:8d:45:7d:da:12:4f:c0:eb:33:e6:18:d1:
                    66:8a:55:f5:f0:9d:2f:17:82:51:16:fc:cf:c5:f0:
                    99:93:53:3f:27:fc:a2:fc:11:ad:5b:af:a0:2e:22:
                    36:8e:b3:c0:60:cf:d0:fd:3d:bc:a1:fd:3a:5f:6b:
                    82:94:73:2e:d2:67:c1:1e:d1:c5:0a:20:d7:d1:ad:
                    97:04:9b:4b:70:9a:7c:20:45:5c:01:36:ba:ac:78:
                    53:b6:4d:c4:12:73:23:03:51:f3:bd:e7:27:e1:8f:
                    52:6e:cf:2b:78:f1:da:56:2c:c3:32:13:d0:3f:b3:
                    ce:ca:5d:4d:35:79:12:46:26:81:36:70:33:f1:46:
                    43:b4:5d:a2:9a:18:71:15:ad:45:9e:bb:c4:ff:08:
                    26:d9:d9:69:9c:bd:8c:fe:a5:11:f4:30:8a:c6:2b:
                    28:bc:88:ca:69:a3:9f:19:c4:6f:08:5d:67:3a:79:
                    c6:e6:e7:43:fe:79:18:69:66:dc:b7:48:b7:1b:7a:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:59:D0:C2:4E:F5:15:5F:23:BB:74:C8:14:24:13:05:67:51:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:73:98:f6:98:df:5b:de:85:f8:24:62:0f:f8:ad:01:84:
         3f:60:42:29:f2:ec:0b:51:0f:38:14:67:1c:dd:cb:e6:f6:75:
         14:55:33:f7:72:5b:75:8f:23:d9:37:62:96:d5:f4:cf:66:03:
         92:cf:37:5f:1c:9c:ee:fc:95:cc:4a:73:27:d9:64:69:7f:6b:
         98:40:c0:02:2e:57:76:44:0c:56:7c:01:db:11:bd:7a:56:a7:
         ea:fc:0e:9b:ec:b1:9b:96:11:d3:31:99:c2:60:ab:d9:7b:f9:
         c0:82:5f:90:f8:4d:38:47:79:b0:3b:12:f4:be:9a:2f:4f:0a:
         39:0f:e5:d6:30:aa:6a:bc:e9:80:8a:52:a2:5e:c8:97:86:5f:
         ac:7b:16:d8:34:5f:a8:09:9b:3e:65:49:64:88:aa:7b:22:95:
         61:10:11:4f:b8:fe:1c:e1:26:ac:56:85:ab:77:76:a9:18:a2:
         6c:4d:fa:8b:d3:0e:d1:f4:f6:0d:fe:ff:6d:ec:d3:a1:9e:29:
         2a:5a:a3:2c:b0:25:97:e2:15:53:f8:73:58:e7:38:a3:f0:d1:
         52:20:95:6a:da:c2:fd:24:b8:54:45:c3:53:b7:f7:69:93:4d:
         33:71:c0:3b:14:76:5a:f9:01:71:ae:30:f9:df:3a:ed:35:fa:
         46:66:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org