Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9993994E784D11EC83249BC45A40D577.roa
File:                     9993994E784D11EC83249BC45A40D577.roa (raw, json)
Hash identifier:          SgOSy3k6emtav97oc4YFCqyy0N3epA6TmdOHmb5o7R8=
Subject key identifier:   27:22:13:DA:C8:DF:37:9C:7F:44:7C:2C:22:5A:DA:BE:54:BA:34:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1193
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9993994E784D11EC83249BC45A40D577.roa
Signing time:             Tue 18 Jan 2022 10:58:43 +0000
ROA not before:           Tue 18 Jan 2022 10:58:39 +0000
ROA not after:            Sun 30 Oct 2022 10:58:39 +0000
asID:                     136525
IP address blocks:        45.206.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4499 (0x1193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 18 10:58:39 2022 GMT
            Not After : Oct 30 10:58:39 2022 GMT
        Subject: CN=61e69d62-51c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:77:88:ba:c2:59:dd:a8:8c:fc:2a:45:f5:
                    3c:e0:e1:98:52:19:ed:8a:cc:3c:c6:cd:2b:8b:a6:
                    04:a0:1d:b0:db:7c:b2:d5:f5:5a:55:ab:83:2f:39:
                    23:05:ce:af:9c:3d:3a:b2:1f:18:80:a6:db:44:dd:
                    2f:26:4d:de:86:87:a9:03:81:d7:0c:23:46:06:56:
                    eb:80:b0:1e:0e:80:05:db:75:07:97:a5:f0:b7:0a:
                    31:c0:21:6c:04:be:16:69:97:bf:83:57:75:f2:a6:
                    37:65:12:7e:c8:6f:fa:ea:4b:e4:db:79:12:6b:90:
                    0c:df:9d:55:3d:f8:1d:93:93:b0:d7:a6:5a:e4:f3:
                    c9:7e:28:22:61:42:30:56:93:0a:6f:c3:3c:67:d1:
                    c0:0c:21:dd:2a:3e:27:1a:fe:1c:f0:dd:7b:93:eb:
                    79:a3:af:7e:04:fd:bb:0b:72:e7:f1:2b:b5:fb:97:
                    68:87:d2:4b:76:ca:d0:e7:a4:10:3f:b8:6b:1c:cd:
                    f3:af:8f:c0:d9:c4:3a:cd:e6:52:e4:1d:2d:a1:23:
                    7c:b9:9b:fd:d6:c1:33:63:cb:08:b1:2e:5c:6a:df:
                    d1:ea:26:c5:1c:2a:be:0e:65:46:fa:16:03:2d:1b:
                    72:a3:64:a6:8b:f2:29:5f:31:7e:a4:da:12:25:3d:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:13:DA:C8:DF:37:9C:7F:44:7C:2C:22:5A:DA:BE:54:BA:34:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9993994E784D11EC83249BC45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:32:43:7e:01:c0:cc:f7:06:b8:ec:ad:59:94:04:72:58:
         f8:26:76:f9:62:c5:52:47:da:51:e8:95:c3:2b:24:4d:79:c7:
         28:0b:19:69:40:97:1c:22:7c:72:b1:95:84:91:3d:47:cd:ab:
         75:18:27:b3:1a:28:20:f3:70:dc:16:cd:a7:48:b8:89:39:2b:
         0b:74:23:06:96:6f:56:8a:3b:47:49:e5:f8:80:2f:e5:48:9d:
         d4:2e:06:77:81:9f:ac:8c:48:18:68:83:b9:af:dc:f7:9f:37:
         d6:72:53:32:0c:a6:87:31:b0:0c:3a:cd:7d:5a:2c:68:b8:79:
         79:c1:d5:33:fb:24:d9:43:da:1f:e4:10:eb:bc:79:88:4d:9e:
         25:d7:b3:51:7d:89:aa:80:0b:30:e1:3f:d3:1b:8e:69:41:3f:
         1d:26:1b:75:1f:96:58:d8:04:f5:c9:0d:f2:c3:02:0c:df:4f:
         73:08:a3:b3:b9:1a:ce:08:70:86:3f:ca:a5:2e:07:eb:9e:81:
         6e:f6:23:d0:53:16:8c:91:cd:59:b2:98:c1:bd:6d:2d:17:98:
         35:a0:8b:43:54:7a:94:4d:c7:53:ac:5c:e6:c8:8a:53:ce:0d:
         1f:73:31:ad:b3:f1:84:d9:fd:0f:dc:26:84:e4:6c:69:14:1b:
         54:6c:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org