Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F87F3613D211ED89252BAAF1222468.roa
File:                     D1F87F3613D211ED89252BAAF1222468.roa (raw, json)
Hash identifier:          jz28miE2cfTqwojtdJ6LA68Pb1XkxV/Xxksw8c+SN1A=
Subject key identifier:   BB:B4:72:5A:BB:88:C8:FA:44:6E:F0:74:4D:CA:2C:45:EC:C1:C2:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1642
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F87F3613D211ED89252BAAF1222468.roa
Signing time:             Thu 04 Aug 2022 08:52:50 +0000
ROA not before:           Thu 04 Aug 2022 08:52:47 +0000
ROA not after:            Fri 10 Feb 2023 08:52:47 +0000
asID:                     133861
IP address blocks:        45.207.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5698 (0x1642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  4 08:52:47 2022 GMT
            Not After : Feb 10 08:52:47 2023 GMT
        Subject: CN=62eb88e2-00ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:84:50:0e:f6:64:42:1a:41:3f:09:ef:08:
                    e8:fc:14:f5:1d:e6:a3:b9:89:5f:7a:12:73:d9:15:
                    20:d8:4d:eb:5e:80:d7:34:a7:d7:22:fa:71:78:87:
                    7e:01:35:49:89:c4:43:98:19:ca:d2:c2:b2:80:86:
                    0d:bf:95:5b:2a:46:f8:7f:bf:45:e0:2b:61:db:4d:
                    ea:60:97:4e:ab:d6:65:90:cc:78:fa:23:0b:89:b1:
                    49:91:2c:d6:66:3f:d5:76:39:c7:73:c6:73:3e:7d:
                    a2:18:03:88:18:6d:76:65:a9:4e:d1:05:ee:61:55:
                    de:b9:78:15:14:f1:cc:58:0f:17:af:cb:e3:0c:47:
                    43:c0:d4:2f:b9:8a:50:e8:9e:b4:ca:81:e9:cb:f6:
                    44:e2:06:9e:4a:08:28:e6:9f:fe:6c:e9:da:5d:93:
                    ba:c3:68:78:6d:b2:51:e6:e2:e5:35:ec:04:2a:6f:
                    68:0e:fa:de:2a:0a:61:40:98:99:0d:dd:72:77:75:
                    a8:fd:a4:58:33:44:69:ec:e7:20:d4:61:9f:93:2b:
                    42:1c:48:68:41:36:e7:b5:b7:2c:d4:86:f6:a2:01:
                    da:63:ef:45:0e:69:4e:b5:40:d7:16:2f:c0:4e:8c:
                    a9:41:62:db:2b:8d:65:41:56:80:49:96:c7:5e:a9:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:72:5A:BB:88:C8:FA:44:6E:F0:74:4D:CA:2C:45:EC:C1:C2:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1F87F3613D211ED89252BAAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:24:66:29:38:27:f2:2d:6e:34:77:14:cf:19:f0:4e:54:cc:
         21:b7:d3:75:36:80:d3:4a:07:71:c5:08:fa:99:8a:e8:56:04:
         8c:c4:d2:8e:61:bd:39:9a:85:83:d3:2e:b3:f4:58:0f:45:2b:
         66:63:4d:b1:e1:63:6f:18:5a:6c:71:dd:e8:59:5c:18:a7:70:
         7c:38:ef:b3:a0:df:5f:2f:3b:86:67:df:8d:1e:7d:9c:f0:b0:
         0d:52:18:18:a3:bd:96:ad:63:db:e1:b0:3d:95:bd:b7:95:3c:
         d7:c9:05:67:a0:b3:19:f1:01:b4:38:43:44:fa:ce:3e:13:aa:
         00:fc:5b:d7:ab:2c:65:a3:a5:1c:0c:5b:86:04:cb:cc:91:92:
         06:83:69:3e:c2:ee:07:f8:2e:c9:69:cb:8f:3e:f2:e9:18:85:
         af:ad:72:09:d5:51:2b:d7:d7:a9:b1:10:0d:5d:cf:5f:ab:5d:
         21:79:8e:75:3d:77:05:28:81:b4:42:11:0a:2e:7f:3b:0f:90:
         05:19:fc:97:fe:d3:78:43:cc:08:db:54:26:d5:d3:5a:b3:a8:
         60:cb:97:ca:b0:35:23:23:5d:bb:49:b1:1c:2c:ed:fd:9a:04:
         15:83:2b:5d:7d:c7:b3:c7:5f:ca:3f:a8:85:eb:c0:95:d5:19:
         a9:36:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org