Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7077AE25BB11ECA0C14173D8A014CE.roa
File:                     BD7077AE25BB11ECA0C14173D8A014CE.roa (raw, json)
Hash identifier:          eCfqlUubI1+J24CBXeJDq505pDEHSdu+8Wkq3aYpptY=
Subject key identifier:   4E:7F:8B:72:EA:2B:FA:1C:61:15:F7:9B:5E:6E:84:10:8F:C0:A3:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       09DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7077AE25BB11ECA0C14173D8A014CE.roa
Signing time:             Tue 05 Oct 2021 09:08:01 +0000
ROA not before:           Tue 05 Oct 2021 09:07:56 +0000
ROA not after:            Sat 22 Oct 2022 09:07:56 +0000
asID:                     26617
IP address blocks:        45.195.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524 (0x9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  5 09:07:56 2021 GMT
            Not After : Oct 22 09:07:56 2022 GMT
        Subject: CN=615c15f1-730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:fa:c8:a0:02:ba:87:64:96:b3:f8:35:93:
                    4c:be:2e:13:fe:18:2f:3a:d7:83:fd:20:74:a6:e6:
                    ed:4b:ff:2d:8c:44:cf:a1:45:20:fa:d3:d0:34:eb:
                    9e:c9:72:a7:9f:3d:30:17:7e:34:52:3b:82:d7:57:
                    39:91:80:1d:73:47:a6:03:c8:7a:84:19:c4:74:6b:
                    d7:db:8f:7c:c9:29:37:51:f7:c8:6f:0e:e1:15:59:
                    19:71:fc:d6:3e:d0:25:75:c0:4f:ad:43:1f:6b:fb:
                    c7:53:01:62:92:b3:a8:4b:b5:3b:fb:5f:6c:9e:f3:
                    15:f8:7d:c1:c3:c9:1a:14:25:1a:b0:f1:6c:40:e1:
                    cc:72:e1:83:45:fa:38:61:c7:be:9f:dd:00:34:a8:
                    3f:56:0e:6d:bc:a4:4b:49:97:8f:62:1a:89:f2:a9:
                    4a:85:98:7b:91:b8:d8:db:52:c8:97:c6:74:a5:72:
                    18:78:54:0e:a4:24:56:99:62:fc:fa:f8:7f:2b:70:
                    49:44:8c:92:11:a4:51:27:e6:df:7d:d9:2c:d5:ab:
                    51:2e:5a:80:f2:b6:41:4f:b7:31:e6:e2:5c:ca:f7:
                    73:4c:ce:bd:c7:a2:4f:26:a1:5d:10:52:df:52:af:
                    8c:1c:89:78:69:02:04:de:5b:7b:08:a1:69:3b:ed:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:8B:72:EA:2B:FA:1C:61:15:F7:9B:5E:6E:84:10:8F:C0:A3:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7077AE25BB11ECA0C14173D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f6:d0:77:fa:5a:d4:bd:d4:f6:d1:a7:bb:43:1a:96:5c:ef:
         b9:ba:e5:b7:43:04:eb:47:1e:74:42:a6:fe:44:16:3a:c5:3d:
         df:19:9c:9a:cf:e4:b8:36:eb:2d:9b:25:f7:8e:e9:70:89:0a:
         84:11:58:72:1e:56:53:59:d2:ff:5d:3b:89:ee:c7:76:22:f1:
         83:dd:54:e7:c8:8b:e9:5b:21:1e:ce:3c:82:2d:f3:6b:d4:62:
         2f:f1:be:bd:f2:5f:44:ab:35:51:ea:b7:00:ec:07:6a:a5:3d:
         32:71:8c:61:78:af:ff:28:1f:da:a6:51:04:56:98:05:78:1c:
         79:f1:2d:ad:ff:46:89:27:13:de:1d:68:cc:77:b2:d9:3f:84:
         11:ec:54:fc:09:75:ea:f4:48:86:29:fc:73:e4:ac:94:29:9a:
         4a:9d:eb:00:c6:c6:6f:8f:28:fd:12:63:ed:61:d9:50:70:92:
         ec:b5:69:8d:ac:46:b4:10:87:2a:3b:70:ef:71:27:36:f4:80:
         0a:9b:fc:36:4a:6a:ff:83:00:b4:56:c3:81:e2:60:69:9e:7a:
         3e:86:37:e1:39:f8:eb:d2:8b:9d:e2:03:2f:cc:e7:3b:b0:58:
         07:88:b7:5b:5d:9c:1d:d6:20:ea:82:a4:ca:6d:6f:30:f9:45:
         40:6c:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org