Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB63848987211ECA51DFB985A40D577.roa
File:                     7FB63848987211ECA51DFB985A40D577.roa (raw, json)
Hash identifier:          rnsTKpXG0ih7IF8e9Idxxhi07oZbEIg/IBXfb+vbc1E=
Subject key identifier:   E6:6F:54:09:C5:00:1A:FB:37:66:BD:23:DF:B0:BF:DE:56:C7:78:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1220
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB63848987211ECA51DFB985A40D577.roa
Signing time:             Mon 28 Feb 2022 08:43:28 +0000
ROA not before:           Mon 28 Feb 2022 08:43:24 +0000
ROA not after:            Fri 30 Dec 2022 08:43:24 +0000
asID:                     328608
IP address blocks:        156.242.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4640 (0x1220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 28 08:43:24 2022 GMT
            Not After : Dec 30 08:43:24 2022 GMT
        Subject: CN=621c8b30-ece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:14:ef:ee:b2:d3:13:f3:a3:fb:5a:00:ac:
                    cc:3f:90:cc:7e:b7:6b:21:32:a7:93:01:9a:02:93:
                    75:94:ef:c1:b9:d3:23:53:9e:32:12:e3:50:56:63:
                    f9:61:0a:a4:64:c4:3d:85:7f:a0:24:e0:72:72:70:
                    3a:43:b8:34:27:a6:40:d4:48:42:ed:fe:93:05:7a:
                    c2:2a:19:b5:41:46:a3:85:f1:9c:15:75:b7:d1:d8:
                    88:e5:6a:06:ea:31:f3:60:67:c3:97:79:44:bb:fe:
                    b2:0d:9f:95:35:38:8b:a1:ab:eb:af:11:5c:ef:08:
                    e8:ba:d8:a7:f3:6b:b6:0a:5b:6d:ee:85:46:d4:4e:
                    f9:eb:dd:97:08:b6:25:b6:35:8c:19:68:01:42:4b:
                    13:fc:56:1d:6f:63:ea:a8:3e:fd:be:9a:2a:f4:2c:
                    c8:00:9a:d3:12:bd:bf:66:a5:6b:0b:47:b9:b8:54:
                    87:09:a7:b0:7f:b0:5e:b4:18:7f:35:95:a1:76:41:
                    51:cc:55:20:55:03:da:f4:9a:03:7f:f9:54:ff:28:
                    1b:ce:dd:aa:e2:79:17:d6:59:2a:b0:3a:b2:96:ab:
                    e5:fe:21:75:52:c3:02:5c:0f:e9:68:4d:e3:26:b7:
                    bd:32:64:99:78:bb:d9:5d:0b:42:08:c9:1a:a2:c5:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6F:54:09:C5:00:1A:FB:37:66:BD:23:DF:B0:BF:DE:56:C7:78:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FB63848987211ECA51DFB985A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:35:c6:59:9d:70:bd:52:ee:a4:a3:08:e2:7a:f7:2f:0d:4f:
         0e:fd:45:c3:ff:63:f4:75:07:79:4b:d4:33:c1:59:2d:2f:ad:
         d9:5e:43:0c:8c:53:14:42:11:b3:23:2b:ee:a4:ea:29:98:dd:
         8b:b6:78:21:c1:07:d3:bd:0f:2f:7c:40:a9:a9:3b:75:6c:c1:
         23:2d:60:80:a5:e9:da:3a:89:6f:80:5b:28:c8:65:45:d2:e6:
         83:bc:27:89:13:c5:21:7f:72:db:b3:cc:10:04:7d:7f:82:62:
         8d:1f:5a:4e:ba:07:1b:5e:95:45:03:fe:2a:b6:d2:f4:48:e6:
         ae:d5:22:98:9b:09:21:9f:03:d1:1c:a1:c8:48:ef:d3:37:7d:
         f4:40:82:08:72:f5:e8:2b:b9:33:15:ab:fc:a1:54:ae:1a:90:
         38:4a:d3:27:65:de:f7:5f:e6:a3:ec:ea:1a:29:9a:94:3c:28:
         7a:1f:0c:55:c3:d6:f4:1e:2b:85:f8:2b:de:da:ea:ed:19:3c:
         4f:91:15:42:2e:34:b9:8f:48:a5:af:3e:6e:cb:f1:b2:d1:0c:
         c5:ab:78:36:54:3a:2a:4d:c4:38:a3:f4:16:d7:ca:f9:b4:62:
         b0:32:f0:5b:87:56:7e:ec:c8:a9:8e:b8:33:da:e9:73:6f:aa:
         20:ec:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org