Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBBDE57236E111EC8698406FD8A014CE.roa
File:                     BBBDE57236E111EC8698406FD8A014CE.roa (raw, json)
Hash identifier:          MEXftgtDOiSxncsnzGKnI3tSdO6CWwy3x/+jL8BtoVY=
Subject key identifier:   43:D1:A2:6D:72:CC:8D:52:9E:BE:EF:30:BB:43:62:24:07:51:EC:27
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBBDE57236E111EC8698406FD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:52:49 +0000
ROA not before:           Wed 27 Oct 2021 04:52:45 +0000
ROA not after:            Thu 27 Oct 2022 04:52:45 +0000
asID:                     58895
IP address blocks:        45.206.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:52:45 2021 GMT
            Not After : Oct 27 04:52:45 2022 GMT
        Subject: CN=6178db21-0a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:23:f5:d9:d4:60:15:c9:f8:c0:61:fa:54:
                    66:8c:d0:55:fe:37:eb:7c:db:08:fd:e3:da:26:1b:
                    80:a1:66:26:82:7e:a1:01:0f:7f:b8:41:8d:13:06:
                    e0:ab:f2:ef:11:1e:5a:5e:e7:bd:73:b7:00:47:ff:
                    c8:b7:50:b0:f3:a9:8c:ba:c1:2b:96:7a:b5:f5:76:
                    50:7e:5d:c9:c9:5e:d2:5b:4e:13:2b:b6:db:47:48:
                    fa:28:3e:b8:b3:84:21:46:8b:22:35:6f:50:7c:31:
                    29:c6:bb:e4:81:26:84:e8:7e:c1:99:f4:c5:e8:5e:
                    3c:b5:ad:64:ff:9b:a1:1a:b8:18:fa:77:8e:38:94:
                    a9:6d:b1:b4:77:09:6a:57:1f:33:77:72:1d:87:be:
                    36:a2:0a:b6:1c:28:06:0d:02:30:16:33:6e:e4:18:
                    e2:08:93:6e:a1:13:87:b4:ab:0a:c6:ad:6c:3f:c7:
                    9f:b7:6d:f6:dc:fa:7d:04:49:f1:d0:bd:09:92:60:
                    2d:ce:a7:92:ed:6d:cf:4f:f3:50:27:66:82:7a:87:
                    ac:f0:03:82:86:85:1c:d7:cd:aa:3e:94:d4:04:d7:
                    d6:20:d8:54:5d:9b:a4:49:83:7f:c5:d6:c5:3a:95:
                    87:10:25:e8:78:41:89:33:e5:a1:0b:49:e4:0b:bd:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D1:A2:6D:72:CC:8D:52:9E:BE:EF:30:BB:43:62:24:07:51:EC:27
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBBDE57236E111EC8698406FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:33:0b:3b:57:2d:e3:9d:6f:ab:c4:bb:56:5e:50:c9:bf:
         ed:2a:4a:b2:2a:98:0f:cd:91:62:94:6d:20:0b:98:c1:ca:80:
         76:94:1d:57:e8:63:09:39:a9:70:37:ef:5c:80:bc:94:3b:3e:
         c5:81:27:02:d4:18:5b:a5:23:0f:98:25:20:ed:dd:4f:d9:64:
         0d:25:65:e4:32:b2:70:c3:06:a8:7d:e2:cc:ca:e9:c5:a0:37:
         48:ba:00:88:e5:64:ad:59:3a:64:4d:f1:49:e3:05:7b:dc:1b:
         34:ca:6a:0e:99:16:e1:48:84:1e:97:02:e2:05:c6:31:4e:c5:
         4f:a5:64:53:a4:5f:1a:ef:22:68:90:6c:17:82:d4:aa:8f:71:
         3b:17:ce:27:46:a8:82:09:cd:ca:6d:30:3d:c9:41:4b:a0:71:
         c0:30:72:40:ae:4b:07:66:31:8a:12:3c:a3:a2:23:3f:ab:3a:
         be:69:90:7c:be:63:b6:ab:36:52:2b:ec:49:a2:25:8e:20:46:
         de:b2:7e:21:1f:31:f6:39:2d:b7:78:c7:3c:fe:67:f0:2c:3a:
         ec:b6:eb:66:61:df:69:1a:a4:39:d3:8d:69:6a:cf:35:de:62:
         e9:72:3b:5a:4c:5b:a9:9a:54:0f:c4:e7:19:59:cf:3f:8b:db:
         64:bb:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org