Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
File:                     779B6C10361711EFA03588B6762E951A.roa (raw, json)
Hash identifier:          rttAPnKnM2zc5+Wgoo29dIOv9vImXMlKbcJPsIIvIIA=
Subject key identifier:   A8:4B:01:7F:E9:20:E0:24:8A:0E:E2:6E:06:DA:DB:A6:41:93:39:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9698
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
Signing time:             Sat 29 Jun 2024 12:59:49 +0000
ROA not before:           Sat 29 Jun 2024 12:59:45 +0000
ROA not after:            Tue 27 Aug 2024 12:59:45 +0000
asID:                     134548
IP address blocks:        156.240.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38552 (0x9698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 29 12:59:45 2024 GMT
            Not After : Aug 27 12:59:45 2024 GMT
        Subject: CN=66800545-fd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:4b:25:03:fe:5d:61:60:b2:a3:96:da:c3:
                    99:87:38:af:33:87:84:9a:80:90:f6:d1:08:b5:65:
                    95:36:2e:fd:31:57:39:f2:77:22:a9:10:77:50:47:
                    4f:16:b2:9e:52:9d:0e:c0:b2:ff:8a:ac:53:dc:43:
                    46:4d:a5:23:8f:92:34:e0:54:b9:bf:1f:0e:34:41:
                    81:d3:09:d4:98:27:85:99:be:81:09:0c:6a:3b:d0:
                    e5:78:0d:0c:6d:fa:55:bb:d5:c7:93:bb:d9:f1:88:
                    b8:91:78:52:c8:80:08:c8:11:9e:72:62:40:30:bf:
                    a6:f0:ca:bd:f9:14:ae:f9:05:08:43:cf:5a:dd:e4:
                    68:99:b0:52:6d:c4:22:ce:fb:6a:ea:96:8a:8f:f4:
                    28:8c:49:b4:fa:ac:49:bf:0b:1c:51:e9:8d:00:f8:
                    c5:81:d8:b9:58:2c:15:3c:de:6d:47:c6:ef:59:ee:
                    f5:d6:a7:19:02:f0:24:9a:24:f7:b9:05:f4:8d:e0:
                    ec:53:fe:57:2d:9a:29:50:b0:8d:3b:c7:f8:1f:08:
                    6c:73:eb:a2:1d:62:86:59:9e:66:2b:1f:51:96:73:
                    d8:45:a3:9d:2c:47:6b:bf:4a:24:ea:d6:41:47:b1:
                    04:40:ce:50:65:8d:c7:b5:85:19:04:42:d1:11:44:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:01:7F:E9:20:E0:24:8A:0E:E2:6E:06:DA:DB:A6:41:93:39:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779B6C10361711EFA03588B6762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:70:ce:df:d2:39:e5:dd:04:57:e7:c6:7f:1a:ac:e7:cb:da:
         96:68:0d:c7:3e:cd:e4:44:d3:b1:1d:d5:62:21:ea:d9:ff:74:
         13:33:a5:04:b1:2b:d0:1c:f8:ad:15:fb:de:78:c0:9d:f1:89:
         b0:37:be:a1:b4:d2:ac:1f:44:25:01:84:a5:71:2e:34:be:ef:
         6c:74:15:f2:bd:e8:3e:47:d2:27:e2:c1:59:58:73:31:0f:e3:
         18:47:6b:04:c6:b3:79:91:8e:b2:ee:6d:d0:9f:c9:89:dd:64:
         d1:33:3f:81:49:ef:6b:fb:45:37:19:35:17:4e:6f:a6:53:eb:
         9e:74:5f:3a:8a:63:e8:f4:7d:80:0e:80:ba:93:0b:a0:10:ad:
         5f:85:4d:77:d8:6d:c1:55:c8:d2:07:61:85:8c:da:7a:4e:72:
         1e:82:6b:33:12:14:12:08:f0:51:aa:ce:9f:2c:45:29:20:12:
         03:b5:6b:a5:cb:2c:9b:a3:14:3c:c5:24:0c:f1:84:45:84:dc:
         67:67:0f:38:a4:cc:31:56:4b:41:84:74:95:21:2e:56:4f:c3:
         af:f8:7a:70:c2:ea:d0:46:aa:63:73:5b:72:5d:33:26:17:1f:
         32:7c:1b:43:24:06:25:e8:20:d9:39:f3:9f:58:e1:a1:6e:c9:
         1b:c3:da:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJaYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI5MTI1OTQ1WhcNMjQwODI3MTI1OTQ1WjAYMRYw
FAYDVQQDEw02NjgwMDU0NS1mZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArCRLJQP+XWFgsqOW2sOZhzivM4eEmoCQ9tEItWWVNi79MVc58nciqRB3
UEdPFrKeUp0OwLL/iqxT3ENGTaUjj5I04FS5vx8ONEGB0wnUmCeFmb6BCQxqO9Dl
eA0MbfpVu9XHk7vZ8Yi4kXhSyIAIyBGecmJAML+m8Mq9+RSu+QUIQ89a3eRombBS
bcQizvtq6paKj/QojEm0+qxJvwscUemNAPjFgdi5WCwVPN5tR8bvWe711qcZAvAk
miT3uQX0jeDsU/5XLZopULCNO8f4Hwhsc+uiHWKGWZ5mKx9RlnPYRaOdLEdrv0ok
6tZBR7EEQM5QZY3HtYUZBELREUQQtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKhL
AX/pIOAkig7ibgba26ZBkzmiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzlCNkMxMDM2MTcxMUVGQTAzNTg4QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPD/MA0GCSqGSIb3DQEBCwUA
A4IBAQCEcM7f0jnl3QRX58Z/Gqzny9qWaA3HPs3kRNOxHdViIerZ/3QTM6UEsSvQ
HPitFfveeMCd8YmwN76htNKsH0QlAYSlcS40vu9sdBXyveg+R9In4sFZWHMxD+MY
R2sExrN5kY6y7m3Qn8mJ3WTRMz+BSe9r+0U3GTUXTm+mU+uedF86imPo9H2ADoC6
kwugEK1fhU132G3BVcjSB2GFjNp6TnIegmszEhQSCPBRqs6fLEUpIBIDtWulyyyb
oxQ8xSQM8YRFhNxnZw84pMwxVktBhHSVIS5WT8Ov+HpwwurQRqpjc1tyXTMmFx8y
fBtDJAYl6CDZOfOfWOGhbskbw9rm
-----END CERTIFICATE-----
Generated at Wed Aug 28 04:47:13 2024 by rpki-client on console-ams.rpki-client.org