Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93E5D6008A0F11ECAE646BD45A40D577.roa
File:                     93E5D6008A0F11ECAE646BD45A40D577.roa (raw, json)
Hash identifier:          NFK8fe1uNwSyfALBhCb3hW2XsnRZlxH2e2VfGpHvjy8=
Subject key identifier:   18:BE:29:8B:85:63:3D:9C:5E:7B:4B:16:CA:9C:4F:0B:CE:EA:F4:39
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       11D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93E5D6008A0F11ECAE646BD45A40D577.roa
Signing time:             Thu 10 Feb 2022 01:20:05 +0000
ROA not before:           Thu 10 Feb 2022 01:20:02 +0000
ROA not after:            Fri 31 Mar 2023 01:20:02 +0000
asID:                     271916
IP address blocks:        45.194.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4567 (0x11d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 10 01:20:02 2022 GMT
            Not After : Mar 31 01:20:02 2023 GMT
        Subject: CN=62046845-b882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:24:17:e2:37:cc:44:a1:2d:24:53:f1:52:
                    8c:35:31:6f:87:29:e0:c1:da:69:ab:2c:a0:78:8a:
                    31:1d:6c:53:b7:8b:dc:14:f4:e8:75:c2:f9:85:34:
                    ca:b7:a6:f4:b1:e6:48:63:b4:af:cb:c2:48:86:78:
                    32:7d:0b:07:f8:b2:4b:9b:18:eb:c3:0e:0f:c7:47:
                    85:86:e9:14:a4:d6:0b:92:09:a8:23:59:5f:22:89:
                    b1:62:9d:56:33:37:25:63:e6:19:fb:e4:19:8d:85:
                    29:46:f6:4e:39:c9:5c:b0:80:3a:74:68:90:cd:80:
                    63:cf:e2:1f:5d:40:ea:09:fc:ee:b0:c6:98:f5:d6:
                    04:35:aa:b1:45:9a:c1:d3:64:67:18:af:b8:ca:61:
                    6a:7c:3b:29:6d:a8:94:93:9f:ba:36:d4:74:e5:b1:
                    1e:4f:89:40:a0:18:74:ab:8f:15:be:00:f0:22:37:
                    e9:19:fb:59:73:ea:e3:3a:c8:90:f0:0a:bd:43:e2:
                    d0:a4:0d:b1:d9:ab:1d:75:3e:44:75:e8:44:23:62:
                    7c:81:16:8a:4f:3e:0d:be:89:0b:64:75:3e:65:8b:
                    b0:cd:0c:fb:b4:e0:a6:24:09:de:15:6f:2b:5d:f0:
                    7b:66:38:a4:e8:30:cf:00:0d:6d:f9:cd:9c:db:01:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BE:29:8B:85:63:3D:9C:5E:7B:4B:16:CA:9C:4F:0B:CE:EA:F4:39
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93E5D6008A0F11ECAE646BD45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:65:6e:2e:ab:74:c9:78:19:b6:cf:72:24:c1:21:13:4a:
         11:05:7a:9c:92:23:93:81:75:88:58:31:b0:6f:91:66:ee:3d:
         7a:09:19:3c:0a:a4:f9:7c:2c:ef:af:29:47:df:df:c1:1d:e7:
         f2:9c:ed:18:a7:b9:b6:c4:df:8c:57:e6:fe:ec:4d:9e:a4:27:
         a0:7e:12:cb:92:04:9a:1c:64:89:f7:6f:58:35:b6:ea:97:c8:
         73:de:93:57:77:31:00:cc:ea:80:e4:3d:6d:12:bd:a4:c0:a5:
         02:00:de:ab:fe:97:f1:0d:b0:b4:68:69:e2:04:ae:4f:79:22:
         27:0e:0d:e0:c9:68:da:61:85:76:8d:a3:3d:63:cc:90:47:0b:
         58:21:86:5a:21:8f:e7:4a:eb:f8:bc:af:92:0c:9a:5f:22:da:
         c7:5a:ff:6f:c8:a7:3c:b3:97:18:04:76:45:91:92:70:73:86:
         17:bc:b7:a3:42:df:70:97:0e:40:af:31:fd:fd:32:0c:9a:f4:
         29:da:be:4e:76:7a:7d:35:ca:66:c9:e2:5a:1b:5f:5f:59:c7:
         6c:df:4a:45:04:c6:33:60:db:05:42:ba:c1:54:7e:8a:50:f6:
         a0:62:58:e6:b8:8b:ca:af:f8:96:1a:bd:17:38:9f:c5:b9:3a:
         7a:5e:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org