Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A217718031611ED9F0056F6F1222468.roa
File:                     6A217718031611ED9F0056F6F1222468.roa (raw, json)
Hash identifier:          i1Q65D9EDMfC+hUpxK5FgHxm81i85Zeek8WI0lJBEC4=
Subject key identifier:   9B:A1:59:BA:93:35:F6:79:29:8D:A7:A4:2A:47:C0:9B:70:12:E8:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       155B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A217718031611ED9F0056F6F1222468.roa
Signing time:             Thu 14 Jul 2022 01:43:52 +0000
ROA not before:           Thu 14 Jul 2022 01:43:49 +0000
ROA not after:            Sat 31 Dec 2022 01:43:49 +0000
asID:                     135097
IP address blocks:        45.207.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5467 (0x155b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 14 01:43:49 2022 GMT
            Not After : Dec 31 01:43:49 2022 GMT
        Subject: CN=62cf74d8-17c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:d7:e7:e3:d9:7e:22:ec:ca:cc:75:a3:c7:
                    84:c9:78:86:3f:ba:dc:fe:8f:51:55:7c:66:22:69:
                    17:df:ac:f9:e8:8a:f0:bd:d4:f7:f7:8b:1e:b5:d5:
                    de:c0:ac:7f:4d:e6:cf:57:78:70:5d:03:d5:64:71:
                    f0:63:24:42:c6:8a:d2:84:8b:36:15:a8:2a:77:7a:
                    cb:af:83:aa:ee:77:be:f1:ca:af:34:6b:c1:85:ee:
                    47:b2:63:a7:d2:3c:1d:16:cf:83:53:1a:df:40:03:
                    5c:ab:8f:bd:b0:4a:1d:32:77:2c:e2:37:9b:71:25:
                    65:88:a8:6a:19:84:3a:4b:ff:d3:e5:a2:f7:56:fa:
                    78:7a:ab:e2:ac:51:b8:de:ec:03:9b:fd:c1:c9:b2:
                    fe:b5:1b:c2:74:3b:11:80:ae:3e:b5:b8:62:30:19:
                    c1:93:c2:09:5d:80:c1:20:59:d8:f9:4d:3a:10:57:
                    ae:01:17:0a:a9:c8:be:98:86:9a:4f:b6:3b:7d:90:
                    49:01:96:a3:e0:18:8f:bd:3c:f4:7d:16:ff:93:87:
                    fe:c7:12:88:55:0b:e9:85:b4:ce:ff:25:8e:5e:b3:
                    25:a1:46:cd:99:9b:cd:26:84:2d:68:96:7b:54:bd:
                    6e:20:e1:96:d8:02:44:7f:41:83:51:42:52:ad:af:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A1:59:BA:93:35:F6:79:29:8D:A7:A4:2A:47:C0:9B:70:12:E8:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A217718031611ED9F0056F6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:f7:6b:19:ac:2f:59:dc:3a:7d:1a:d1:09:f0:c3:83:59:
         89:7d:17:8d:d2:c5:f6:ea:68:41:d3:21:3c:a9:b8:7c:53:df:
         92:fa:ca:eb:d6:46:90:07:81:a2:0d:af:25:ab:fb:f0:58:f4:
         d5:32:a6:80:44:5e:e3:5f:8a:5c:ed:5e:e9:72:06:8d:7c:cb:
         ed:42:24:48:33:e6:00:09:2f:73:d3:b6:bb:01:dd:9e:7a:f0:
         ac:ae:bc:51:bd:80:8d:10:a0:8b:fa:53:3d:71:5b:52:24:8e:
         fc:0b:b0:7c:59:20:a3:5b:c3:f1:4a:07:5c:75:98:11:93:49:
         9b:fb:f9:04:3b:c9:c7:8b:68:78:2f:d2:7b:f9:09:d0:cc:6b:
         6b:f1:cb:48:35:7b:49:48:1b:dc:46:0b:50:d1:67:f3:3d:42:
         9a:1b:2e:be:f1:77:a1:17:32:69:da:f1:da:0c:d8:a2:e2:11:
         21:57:5c:d5:fd:9b:b1:fa:15:6c:2a:b7:61:6b:ce:6e:73:18:
         1f:84:93:fd:b9:ee:6e:e5:b4:f9:89:70:dd:1c:f3:18:cc:a0:
         6f:a6:2a:70:e8:b2:b5:fa:2c:8c:2a:77:b0:6f:eb:6b:d7:a3:
         e3:17:df:69:1d:2b:9d:fa:e9:cf:b3:ad:08:2d:d8:94:e2:8d:
         26:15:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org