Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
File:                     88D7DBB22B5A11EE9725D2534AD9E6FC.roa (raw, json)
Hash identifier:          dm7aPHuvr2Xc8LaU3VuYbNGyTbaLbNEFZ9zlClI00Xo=
Subject key identifier:   8B:19:21:E4:15:D8:33:62:90:60:FB:C9:79:90:D9:24:00:13:D9:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3282
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
Signing time:             Wed 26 Jul 2023 02:17:14 +0000
ROA not before:           Wed 26 Jul 2023 02:17:10 +0000
ROA not after:            Wed 03 Jan 2024 02:17:10 +0000
asID:                     139057
IP address blocks:        156.246.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12930 (0x3282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 26 02:17:10 2023 GMT
            Not After : Jan  3 02:17:10 2024 GMT
        Subject: CN=64c0822a-158a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:9a:ca:b2:3d:2e:51:53:cd:54:28:be:17:
                    bf:b8:de:11:cb:da:c2:dc:97:42:d1:06:33:31:8c:
                    85:13:26:27:88:ce:31:1c:00:55:4b:b0:20:bf:08:
                    fe:97:64:28:68:1c:dd:e2:4f:59:c4:b2:2e:c8:b1:
                    41:41:30:7d:3e:bc:43:96:84:47:d4:1f:b9:3c:cd:
                    3b:92:80:8f:09:5a:ce:f3:6b:29:d1:df:91:da:80:
                    d6:a0:ab:16:3c:27:bf:1c:7d:fa:63:81:1b:60:52:
                    4b:9e:0d:e9:ae:01:07:2a:fd:5d:db:fb:b5:52:a3:
                    18:ab:8c:8a:9c:28:1b:b0:aa:52:82:aa:cc:3e:9e:
                    e6:ed:53:80:40:16:de:bd:fd:d9:5c:7b:ab:f2:b1:
                    2a:95:ac:50:06:4e:f6:c0:ec:c9:5b:24:ec:22:f5:
                    c6:c4:3b:42:94:3b:65:55:0a:55:cb:13:ad:a6:39:
                    97:e0:5b:03:f5:82:69:52:3c:a8:79:80:2d:0b:7a:
                    cf:31:b3:2f:50:14:96:b8:f3:f3:13:5f:d0:60:31:
                    85:92:51:0d:78:0e:d0:2e:e7:62:4e:6f:7e:05:61:
                    21:d6:26:43:ed:fa:c7:58:de:51:07:cd:9f:90:42:
                    1b:e2:71:9b:e5:23:8c:f1:b9:20:ee:d3:48:0b:8b:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:21:E4:15:D8:33:62:90:60:FB:C9:79:90:D9:24:00:13:D9:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D7DBB22B5A11EE9725D2534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:27:ad:15:a0:53:3b:8a:0c:03:fb:fe:93:ef:ea:d1:77:5d:
         da:8a:52:82:df:3b:ad:d4:77:4f:71:b5:8f:8b:2a:c6:18:91:
         0a:be:e6:83:52:ad:59:1a:d5:89:06:24:7e:90:13:31:19:85:
         8d:73:4d:05:68:fb:57:db:bc:a1:05:d0:80:1c:c5:e7:11:13:
         69:49:1c:f9:c3:56:db:59:53:b8:77:b6:4a:9f:4c:34:35:70:
         be:d4:49:dc:7f:1d:b4:58:45:ba:df:7f:c6:f6:ce:c4:f2:0f:
         31:c8:e4:fe:44:74:6a:af:b6:b0:8c:58:ae:4e:7b:fb:e0:13:
         c9:fa:bb:1d:12:28:8d:ac:3a:d1:60:a3:e9:48:bb:b7:28:2a:
         00:5d:7c:23:53:2b:5a:7e:b3:19:c0:21:35:1c:43:80:01:ee:
         e1:92:fe:f1:ce:dc:42:84:c6:c6:d0:1c:0c:9e:f8:03:71:91:
         27:ba:c0:16:72:ca:76:ed:68:07:1d:4e:fa:93:65:94:15:9f:
         b8:df:67:80:0b:27:1b:ab:6f:1d:a8:5c:3b:86:d1:63:7d:13:
         01:8d:b4:8a:6f:e9:67:45:9a:df:df:82:33:2d:dc:18:b7:2f:
         38:d7:a2:fa:d4:51:30:a1:8f:b6:e3:ff:3d:57:d0:d3:db:5c:
         6a:27:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 06:39:32 2024 by rpki-client on console-fra.rpki-client.org