Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8004D9A48F1111EC889912895A40D577.roa
File:                     8004D9A48F1111EC889912895A40D577.roa (raw, json)
Hash identifier:          jMt6HBcnmfO2BNP4ygdwZ9VWjZfETyvCymFtl6sK590=
Subject key identifier:   C3:DD:D6:61:78:10:FF:93:8C:F7:54:39:75:39:A7:93:CC:B8:A5:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       11EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8004D9A48F1111EC889912895A40D577.roa
Signing time:             Wed 16 Feb 2022 10:16:27 +0000
ROA not before:           Wed 16 Feb 2022 10:16:23 +0000
ROA not after:            Fri 30 Dec 2022 10:16:23 +0000
asID:                     141711
IP address blocks:        45.206.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4590 (0x11ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 10:16:23 2022 GMT
            Not After : Dec 30 10:16:23 2022 GMT
        Subject: CN=620ccefb-c921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:13:d2:c3:58:92:fa:35:f4:9f:09:08:d3:
                    2c:fc:64:15:e6:e0:86:81:96:fd:2f:11:b5:e8:7d:
                    4f:51:69:a1:10:56:ec:79:35:96:bf:b9:c6:da:57:
                    22:a8:74:54:11:89:12:46:b4:11:3f:ad:42:4f:49:
                    c4:cf:5e:c8:ff:0c:21:70:7b:af:ec:a9:9b:0e:43:
                    05:e0:88:5d:e4:0a:f6:15:80:3e:f6:48:14:f1:92:
                    80:d6:47:a2:e8:a4:fe:61:a5:6a:1d:da:df:1a:61:
                    a1:c2:8d:f4:7d:6b:b5:cd:d0:56:a6:56:a2:1b:5d:
                    ad:8b:7b:2f:be:be:b4:ac:03:c4:51:a4:ee:af:fc:
                    da:34:08:87:3d:94:a3:b0:cd:9c:34:79:33:e6:6d:
                    a1:a3:59:40:f4:2a:16:e5:3c:ba:dc:00:a3:86:44:
                    52:76:54:f4:ae:56:c8:05:0d:93:c6:e3:27:c8:c8:
                    4c:29:9e:21:29:8e:3c:a5:42:e8:09:5e:20:e8:50:
                    ab:f1:72:eb:f9:b6:22:a5:48:0d:7f:94:03:02:ce:
                    50:65:c6:6e:c3:3f:9f:bb:a9:7d:96:15:57:94:42:
                    17:29:57:c9:20:98:b2:d2:5d:a9:3d:6d:5c:83:cb:
                    77:24:55:2f:05:7b:5d:2d:96:27:20:31:48:15:82:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DD:D6:61:78:10:FF:93:8C:F7:54:39:75:39:A7:93:CC:B8:A5:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8004D9A48F1111EC889912895A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:03:9e:e8:16:cd:a7:34:41:b8:cd:c7:ef:10:b5:69:0c:
         ae:96:95:e5:51:6c:db:fb:37:04:73:dd:87:04:fb:2c:82:98:
         46:91:35:20:6f:87:59:ce:7a:2e:ff:6a:1c:d4:14:6b:bb:29:
         c9:e8:9f:08:f6:f1:bc:ce:1e:0a:10:89:36:cb:3f:07:6c:41:
         aa:cd:8f:a3:00:69:30:97:87:fe:cf:4f:5e:47:b2:78:0f:a6:
         c5:10:36:f4:33:0e:08:85:59:ea:31:4c:ca:c2:aa:6a:85:82:
         75:cb:5b:bf:1d:12:5b:97:7e:9c:de:ff:ab:bd:46:a3:61:20:
         25:b4:5a:35:83:e3:3f:02:9b:64:1d:1c:10:b8:71:56:86:b6:
         08:81:78:a0:bd:57:a9:5b:fc:5d:f6:16:a6:d5:73:d2:c3:72:
         db:38:72:da:bc:5a:20:4a:d3:a5:9d:aa:6b:87:32:a2:e2:bc:
         2d:24:1f:a8:83:6c:36:82:81:57:04:bf:25:79:e1:ed:68:38:
         39:82:b2:b7:5f:d5:63:b7:e2:22:e5:a9:e4:96:6f:3f:5d:24:
         7b:60:d5:f7:72:e5:34:94:01:81:05:4e:de:8d:6b:76:92:72:
         71:b9:40:f9:ba:e2:5b:c4:93:1b:1f:bf:c2:0c:e4:32:a0:01:
         5e:1b:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org