Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
File:                     BFEBBA08741611EC854A4EE65A40D577.roa (raw, json)
Hash identifier:          +q3+MEr+B2ApUkNaCLHw15rGCm8RHuwgXcg5oI/TITA=
Subject key identifier:   85:2D:2B:15:7D:11:DF:1D:54:2C:06:A3:11:3A:05:3F:74:D2:99:4F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
Signing time:             Thu 13 Jan 2022 02:16:00 +0000
ROA not before:           Thu 13 Jan 2022 02:15:56 +0000
ROA not after:            Sun 31 Jul 2022 02:15:56 +0000
asID:                     328608
IP address blocks:        45.194.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4456 (0x1168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 02:15:56 2022 GMT
            Not After : Jul 31 02:15:56 2022 GMT
        Subject: CN=61df8b60-128b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:f5:01:f0:ab:7a:02:17:8e:3d:c1:46:fb:
                    08:f6:e6:f7:03:2a:0f:0f:3a:a9:18:99:24:94:b8:
                    66:72:7d:bd:1a:e0:a9:3c:d3:a0:89:a0:f5:d4:2e:
                    0e:85:7b:11:17:ea:a3:de:98:50:dd:e1:a9:35:59:
                    0a:61:fc:a0:0e:9b:f4:fd:40:b2:c6:3d:88:8a:38:
                    24:ea:7b:98:40:ad:9d:aa:96:0e:25:3a:89:ef:15:
                    84:d7:38:88:a6:31:f5:03:db:bb:0a:60:c5:11:03:
                    33:71:ec:89:6b:d2:a5:80:13:e2:7e:20:e1:0f:5f:
                    11:1e:c4:49:2b:8c:29:ad:41:dc:26:b3:19:66:2a:
                    a6:25:a5:d4:e2:00:c6:86:36:ee:32:01:64:35:93:
                    71:55:a4:23:9d:4a:46:dd:2a:b1:d1:38:c7:33:cf:
                    67:7e:29:88:4a:b0:a7:b0:54:1a:87:b3:4d:05:55:
                    5a:b7:49:97:3b:bd:91:ad:89:43:c6:10:eb:a0:20:
                    f5:68:b2:37:87:7e:46:fb:0a:34:98:37:38:a3:29:
                    fa:15:7b:46:05:ba:cd:b8:28:f2:ae:2e:47:63:6b:
                    cd:29:9b:3f:f5:ef:d0:6d:30:66:13:7c:d7:26:9d:
                    12:27:5d:d5:ff:cd:23:a7:fd:95:3f:e6:ed:e1:4c:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2D:2B:15:7D:11:DF:1D:54:2C:06:A3:11:3A:05:3F:74:D2:99:4F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:c2:a7:70:57:bd:51:a9:8a:57:8c:8f:d1:c3:9f:af:b0:
         8b:59:ab:85:1b:fc:40:2b:23:e6:82:13:b1:5d:55:0b:6c:da:
         b6:a0:c8:d1:e0:07:ed:7a:f6:23:2a:a9:7f:30:44:62:a0:a6:
         55:9d:c2:1c:b4:d7:63:9b:da:03:f1:03:52:e2:d2:2a:b5:3f:
         bd:a0:c3:68:50:cd:de:47:0d:70:3a:7c:b8:16:cd:7f:f6:f2:
         ee:e0:fb:f3:ce:93:5e:d5:28:90:3a:f3:4e:38:0f:4a:c8:19:
         36:08:1f:52:34:2f:3b:9e:39:f5:35:99:df:d2:7e:00:d0:be:
         ab:be:70:9d:b6:27:30:9d:94:7e:4d:df:03:4f:c6:a8:5a:2e:
         2d:2e:34:62:e7:b9:2a:6a:08:65:af:5e:93:34:60:12:4c:b3:
         1d:f5:91:d8:e8:c1:c8:df:bb:a2:3c:23:9a:f6:cf:cb:22:ea:
         a7:1f:fb:7d:a5:0d:7d:08:06:93:4f:bf:19:a3:b9:56:e5:7b:
         9d:2f:ad:75:0d:99:f7:ac:89:6c:d9:a1:df:72:e3:2d:e3:eb:
         fe:02:36:45:9c:d3:e1:c9:84:c0:b0:7e:72:26:1c:b9:87:6b:
         fd:b4:03:62:2a:b5:59:eb:1b:5c:1d:a9:a0:4e:60:ba:f0:e7:
         9f:89:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org