Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F760DAD11511EC801457ABF1222468.roa
File:                     B1F760DAD11511EC801457ABF1222468.roa (raw, json)
Hash identifier:          zWYW0HiFST85G0IVPQD7//UueX5EHHvqxRw9J0b+xS0=
Subject key identifier:   D3:9F:63:6F:BB:92:A1:5F:F8:D8:3F:A7:3B:FB:11:9E:9A:E3:76:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       13C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F760DAD11511EC801457ABF1222468.roa
Signing time:             Wed 11 May 2022 10:32:45 +0000
ROA not before:           Wed 11 May 2022 10:32:41 +0000
ROA not after:            Sat 31 Dec 2022 10:32:41 +0000
asID:                     132513
IP address blocks:        45.195.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5064 (0x13c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 11 10:32:41 2022 GMT
            Not After : Dec 31 10:32:41 2022 GMT
        Subject: CN=627b90cd-d474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f2:3a:4a:f9:ca:fb:d4:dd:91:c5:57:5b:60:
                    6e:95:83:de:88:c9:6f:f3:f4:c1:ca:47:2d:af:d5:
                    47:e5:bd:00:40:34:d3:eb:4a:41:6a:63:f6:62:1d:
                    80:a4:c3:f4:0f:5d:8a:fc:06:ce:d0:93:2d:45:31:
                    ff:11:9e:20:b4:e8:94:a6:65:dd:e6:b4:57:af:a5:
                    17:02:84:0a:b6:22:cb:68:70:dc:29:4d:01:a1:25:
                    67:4e:c9:1e:70:f0:7e:a4:f8:52:dc:f5:2b:3b:35:
                    53:a6:7f:d2:4a:14:ac:92:4d:da:7e:41:97:6b:24:
                    44:c1:c7:44:75:a3:e9:d0:4a:42:48:e6:b7:f9:3f:
                    ef:75:3c:45:34:5a:67:5e:4a:ad:32:1c:9a:2f:ff:
                    99:1f:6b:39:d0:f5:8a:50:e0:f3:56:a3:2b:f6:7b:
                    af:a5:59:ae:3d:e3:a5:e9:7a:c2:92:81:f8:5d:19:
                    14:c9:84:6e:ff:74:3e:63:20:cb:b3:15:a9:0c:91:
                    68:9b:6d:e4:7f:ef:14:42:da:53:be:51:53:96:e0:
                    7b:5b:a6:f1:15:09:4d:00:e6:a2:bc:50:7f:5a:9a:
                    46:db:1b:85:9b:a4:26:5a:01:e1:d8:ef:67:38:7f:
                    50:b6:f8:45:cf:50:c5:d2:7d:56:ff:fc:15:f7:75:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:63:6F:BB:92:A1:5F:F8:D8:3F:A7:3B:FB:11:9E:9A:E3:76:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F760DAD11511EC801457ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:a4:74:35:a5:d9:d9:4b:de:43:cc:8b:18:d1:09:c8:15:e2:
         d7:6a:0a:5a:85:d9:77:48:5f:72:a2:5f:da:07:6f:1e:91:78:
         ce:32:56:b3:cc:4d:6f:5e:2a:b6:97:7e:8b:e6:ba:ac:97:32:
         fc:c4:04:54:f6:8b:ae:5f:e4:a1:2b:7a:e3:25:86:c6:b1:5a:
         e3:43:a3:24:e2:e7:ed:fb:f4:1a:be:0a:ba:e4:67:c2:c6:4a:
         38:6b:96:08:ec:32:0a:21:15:27:d7:da:75:db:99:e2:b9:c1:
         ae:bd:5c:24:ba:02:26:4a:26:f6:42:21:04:39:6a:77:d1:fd:
         f0:d3:ee:a3:6b:e7:73:2d:df:cc:e4:16:9e:eb:e2:cd:0d:f0:
         f1:07:ec:d4:d6:32:70:35:ec:b8:b0:9d:4f:62:2d:76:4b:da:
         99:79:a5:01:ad:38:95:91:09:dc:34:32:b7:dc:56:59:39:00:
         5d:a9:d9:3e:b9:98:cb:33:02:73:e7:67:38:37:a2:f1:5c:d4:
         43:fc:1a:82:b8:1b:c3:42:dd:8b:23:92:71:d9:57:8a:9e:9d:
         1b:b0:4e:f4:9a:0e:98:65:52:d3:0e:15:be:0d:09:c9:d6:5c:
         1c:8c:18:88:dd:c8:db:4c:a6:14:3a:92:71:ca:e7:4d:4c:c8:
         28:f3:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org