Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB50A81EE89811ECB1BE22CDF1222468.roa
File:                     AB50A81EE89811ECB1BE22CDF1222468.roa (raw, json)
Hash identifier:          H52P2G7EShRw/BUSPMXiPsNPhSxtTCbYWZJVruyGVhM=
Subject key identifier:   9C:61:C1:B4:51:AB:74:0D:DA:9F:E8:F9:A2:E0:DA:0D:17:FD:88:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       14A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB50A81EE89811ECB1BE22CDF1222468.roa
Signing time:             Fri 10 Jun 2022 08:38:15 +0000
ROA not before:           Fri 10 Jun 2022 08:38:11 +0000
ROA not after:            Tue 28 Feb 2023 08:38:11 +0000
asID:                     133199
IP address blocks:        45.207.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5282 (0x14a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 08:38:11 2022 GMT
            Not After : Feb 28 08:38:11 2023 GMT
        Subject: CN=62a302f7-6e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:78:46:53:5b:de:95:d4:03:63:6d:08:e9:
                    8f:b3:43:f3:9a:3c:81:ce:89:46:81:27:d8:45:aa:
                    99:15:6f:c8:b5:cb:16:99:b3:7f:a8:15:65:f3:ae:
                    63:5b:69:31:55:b5:14:18:bf:c7:a9:33:27:23:94:
                    b9:76:65:65:d6:33:ec:08:7a:72:e7:43:56:07:9b:
                    86:74:b6:82:a8:01:35:a8:ab:5a:bb:35:4b:be:44:
                    bb:3c:a6:f1:8e:41:2c:c5:8a:60:a0:85:c3:7b:13:
                    b5:38:81:10:06:83:d4:a2:b3:d9:ee:aa:db:55:e0:
                    14:03:91:82:ef:66:95:0c:a6:95:66:fd:1d:8a:e9:
                    66:f9:51:94:17:4c:ae:ee:90:a4:00:d7:12:cc:8f:
                    be:00:01:d5:e1:f9:ad:90:a1:66:20:3a:8a:0a:8d:
                    e2:2f:a3:ca:e4:38:74:56:f5:32:74:a0:5c:44:46:
                    93:37:0e:f5:6c:85:f6:4b:a0:2b:f0:33:94:72:58:
                    a8:9d:ba:dd:2a:28:00:8c:a6:58:cf:57:79:df:24:
                    00:26:11:cc:fb:8a:f5:27:40:b7:02:02:31:46:e3:
                    48:d6:57:45:61:3d:41:6b:4d:e8:3d:f3:ca:60:04:
                    68:36:94:08:00:59:f9:55:a6:a2:c7:1f:29:17:d6:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:C1:B4:51:AB:74:0D:DA:9F:E8:F9:A2:E0:DA:0D:17:FD:88:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB50A81EE89811ECB1BE22CDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:04:8c:cc:7c:fa:c8:85:62:51:3a:f2:b5:4b:5c:ce:c4:
         52:41:d3:f1:04:ad:63:77:77:dd:96:fe:9c:ec:e2:1e:e3:cd:
         9f:30:1a:98:ce:5b:34:77:09:21:ae:1b:f5:b6:04:0e:e4:c8:
         3a:83:9f:f3:2a:57:7c:5c:54:99:e9:c7:70:e6:e5:22:b7:27:
         09:0c:cc:9a:62:f5:2a:ec:ff:21:a1:ae:dd:aa:ff:77:a8:c4:
         08:23:7e:70:b7:4f:54:c8:ec:91:02:bc:80:14:4f:3f:b7:17:
         ff:33:f1:1d:af:f5:b4:ce:e5:26:bd:e2:f5:20:99:0d:3a:18:
         76:2d:0c:19:50:38:4e:05:51:70:17:3d:29:9f:ce:f5:ba:3f:
         8d:65:98:05:55:12:e4:e7:3a:c7:6a:37:4f:22:b7:05:79:42:
         a8:bf:e1:b1:3a:2d:15:1d:82:f0:e9:ed:4b:02:d7:c5:11:50:
         9e:55:0d:76:01:15:13:2d:3e:ad:b7:04:e8:65:d8:f8:d8:e3:
         54:d5:11:56:65:20:6e:8b:39:4d:87:03:7d:a5:76:7f:1c:d4:
         6d:0f:c4:f6:40:ba:b5:68:fe:4b:a3:4c:40:17:7a:e0:6a:c8:
         43:c9:e3:b8:17:61:0d:5c:72:ba:42:ca:69:07:96:cc:31:c6:
         f2:35:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org