Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/712A6FE036E011EC9790096DD8A014CE.roa
File:                     712A6FE036E011EC9790096DD8A014CE.roa (raw, json)
Hash identifier:          CiEVMVoUBdz+yQ668oA1K7PasBnCaRi+YPu/w5+kn/g=
Subject key identifier:   40:E5:68:84:43:27:DE:BB:F2:BC:02:7B:73:1E:EE:52:A2:26:60:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/712A6FE036E011EC9790096DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:43:34 +0000
ROA not before:           Wed 27 Oct 2021 04:43:31 +0000
ROA not after:            Thu 27 Oct 2022 04:43:31 +0000
asID:                     58895
IP address blocks:        45.206.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2965 (0xb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:43:31 2021 GMT
            Not After : Oct 27 04:43:31 2022 GMT
        Subject: CN=6178d8f6-40bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:97:98:bd:48:2a:44:94:8b:47:5e:60:cf:
                    8c:93:b4:73:ca:d1:d1:11:07:9e:fc:53:0c:49:18:
                    06:e0:ae:24:26:b2:e7:78:a0:68:bc:16:81:1f:62:
                    6c:21:4b:d0:45:f6:ae:03:47:76:88:07:a6:f3:bc:
                    78:f4:3b:ba:b6:e6:f5:0f:6f:07:00:57:e2:67:c4:
                    e8:00:4d:e6:12:2e:c3:88:f3:ae:21:c9:8c:62:20:
                    8a:f7:83:93:4f:8f:6e:fb:d9:f8:9a:24:4d:b5:67:
                    5f:c4:6b:9f:0b:f6:f7:96:82:8d:f5:60:c5:0b:09:
                    18:84:df:ab:27:1d:3b:c1:1d:97:c6:93:fa:29:2e:
                    33:2f:5c:0a:24:7b:1a:8c:95:a2:90:7d:24:ec:9f:
                    b5:b4:29:dd:05:0c:00:5e:b1:fa:ee:6f:87:9f:f3:
                    87:92:3c:c1:a9:49:bb:41:7d:24:f2:50:af:9e:61:
                    53:fc:a9:23:b2:56:05:1d:7b:af:80:94:05:d0:6a:
                    1b:9a:f7:c2:89:cc:78:d7:00:a5:f1:e7:2e:53:ac:
                    86:ba:0e:d0:c7:92:c0:3b:e9:75:85:7a:88:9f:88:
                    30:08:25:02:e6:ae:56:55:28:34:08:be:95:6f:c7:
                    10:ae:4e:fc:cd:43:bf:9a:a1:7c:88:86:68:05:fa:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:68:84:43:27:DE:BB:F2:BC:02:7B:73:1E:EE:52:A2:26:60:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/712A6FE036E011EC9790096DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:b6:25:60:af:55:3a:2b:16:f2:62:d1:94:c4:91:6a:4c:
         fc:ae:27:af:c5:91:5d:54:6f:63:4f:b1:f0:45:ea:75:02:f2:
         79:a9:23:42:97:11:ca:11:33:f5:1c:f9:07:05:2b:af:88:df:
         16:9e:4f:ae:52:c5:7d:b9:d9:c6:66:30:8f:c6:5a:9c:16:56:
         2c:c9:90:24:e5:b2:3b:2f:4e:88:3f:6d:76:2f:cd:ab:1f:9c:
         ec:09:03:79:39:5c:2a:42:ab:d2:52:70:4f:d0:9a:0a:f3:6f:
         8a:06:ff:8c:78:ae:96:8b:bf:e9:6d:e5:7b:73:96:29:fd:72:
         32:55:da:54:6c:19:38:46:6f:f0:fc:40:84:7b:a1:2e:6e:1f:
         a5:a5:d4:75:ed:e7:12:cb:e0:da:d5:f8:e8:ca:bc:15:49:4d:
         69:b4:ae:32:56:a5:74:ff:94:be:f4:3a:19:9f:47:ed:35:d7:
         ab:b1:a0:b4:5d:f2:6c:35:7c:00:2b:d2:fd:60:df:bc:8d:86:
         51:35:58:48:ce:4b:27:21:0f:68:b5:ec:be:4b:15:1f:43:cd:
         97:e3:b1:ee:db:95:bb:09:e4:7c:83:01:23:64:b4:6a:a2:7f:
         7f:c4:ad:43:7b:77:a3:6b:fd:0f:5e:a1:d3:06:28:c2:dc:64:
         64:90:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org