Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2247776B92511EF958CCB7D762E951A.roa
File:                     D2247776B92511EF958CCB7D762E951A.roa (raw, json)
Hash identifier:          Hjk2Pbwms6BarckxpAXvW0w8OrmhQLryA0IsqL0IJ/o=
Subject key identifier:   82:7F:49:35:1A:46:70:48:B7:02:71:57:12:ED:95:C9:82:FA:C6:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       E305
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2247776B92511EF958CCB7D762E951A.roa
Signing time:             Fri 13 Dec 2024 07:42:36 +0000
ROA not before:           Fri 13 Dec 2024 07:42:33 +0000
ROA not after:            Sat 25 Jan 2025 07:42:33 +0000
asID:                     202656
IP address blocks:        45.192.50.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58117 (0xe305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Dec 13 07:42:33 2024 GMT
            Not After : Jan 25 07:42:33 2025 GMT
        Subject: CN=675be56c-f388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:1e:8f:4c:9f:9b:81:3f:94:49:33:41:73:
                    56:24:45:89:7e:8c:32:dc:bc:e2:be:9f:9c:78:8f:
                    bf:e3:c1:b9:0f:a1:39:4b:67:c1:db:7a:55:d3:a9:
                    f8:f3:db:36:17:80:ae:06:cc:12:c6:b8:66:f4:b9:
                    69:12:38:b5:b3:53:bf:c8:61:a7:53:3b:fc:82:ac:
                    c1:f9:74:89:6a:85:b5:a7:b3:1d:43:8b:f6:4c:43:
                    41:aa:7e:64:12:ad:88:f9:37:7a:cc:71:a3:d5:35:
                    9b:b1:63:09:cf:9e:86:1a:27:a7:50:1d:fc:00:10:
                    54:cb:00:13:7d:dc:54:5b:77:8e:b3:05:88:3c:23:
                    7e:51:b7:2f:0c:b7:af:7e:29:5a:f6:16:44:a1:02:
                    c7:76:1b:69:39:01:46:71:39:a5:0d:38:a7:3c:d7:
                    6c:27:fb:56:d1:74:5b:03:7e:41:57:aa:29:17:59:
                    a5:84:50:47:fd:9a:bc:26:49:58:e5:78:20:b8:13:
                    70:4a:dd:d5:44:f8:3d:e5:19:cb:5c:d4:9c:b8:06:
                    30:03:97:ae:54:50:f8:8d:d7:ca:fe:2a:2a:ec:ae:
                    21:07:a3:73:04:8c:30:ff:45:95:e9:43:82:f1:68:
                    99:bb:ca:32:18:ba:71:f3:59:f3:09:8e:da:a6:77:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:49:35:1A:46:70:48:B7:02:71:57:12:ED:95:C9:82:FA:C6:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2247776B92511EF958CCB7D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:a4:71:9c:0c:11:06:be:0b:d7:0d:37:a9:63:0d:1f:40:
         4c:92:4c:f2:4e:3a:cd:84:94:f9:c6:56:31:92:a2:4c:e7:f5:
         ac:a7:a9:bd:41:3a:02:a9:bf:1c:f6:b1:65:a3:0f:56:10:fa:
         f2:39:ba:1e:f4:4a:45:3e:af:db:09:80:d0:9a:1e:95:79:e0:
         c7:33:ac:30:c8:e3:4d:fe:a1:25:66:29:09:cf:32:30:2b:b9:
         df:e6:0a:02:ce:a8:c5:34:ce:07:dd:e0:c7:bc:65:25:7b:12:
         5a:c2:9a:58:36:2d:03:30:81:9e:8d:b1:c1:8f:47:99:9c:e6:
         a5:21:d0:d7:3b:ca:23:97:06:ff:c2:da:f0:21:ce:a6:43:6c:
         3f:89:9f:e3:37:0f:ec:44:6d:f8:81:1e:73:47:ae:10:dd:10:
         c5:2f:92:97:eb:40:ca:e6:b1:0e:b8:6e:44:44:70:85:df:14:
         ce:ee:5d:f7:4d:81:3b:99:40:7a:0a:71:02:3a:5a:25:9d:64:
         1e:f2:72:d5:a3:b3:4b:69:d4:0a:27:8f:1e:66:1c:32:98:1e:
         ac:28:cf:ed:44:3c:70:6c:fe:15:e7:63:e0:fc:02:1d:1e:4f:
         ed:3a:91:19:f6:00:13:89:d4:c8:fa:67:53:5b:f9:1c:a5:a0:
         18:a1:dc:00
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOMFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDc0MjMzWhcNMjUwMTI1MDc0MjMzWjAYMRYw
FAYDVQQDEw02NzViZTU2Yy1mMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmcEej0yfm4E/lEkzQXNWJEWJfowy3Lzivp+ceI+/48G5D6E5S2fB23pV
06n489s2F4CuBswSxrhm9LlpEji1s1O/yGGnUzv8gqzB+XSJaoW1p7MdQ4v2TENB
qn5kEq2I+Td6zHGj1TWbsWMJz56GGienUB38ABBUywATfdxUW3eOswWIPCN+Ubcv
DLevfila9hZEoQLHdhtpOQFGcTmlDTinPNdsJ/tW0XRbA35BV6opF1mlhFBH/Zq8
JklY5XgguBNwSt3VRPg95RnLXNScuAYwA5euVFD4jdfK/ioq7K4hB6NzBIww/0WV
6UOC8WiZu8oyGLpx81nzCY7apnc/qwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIJ/
STUaRnBItwJxVxLtlcmC+sa7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMjI0Nzc3NkI5MjUxMUVGOTU4Q0NCN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcAyMA0GCSqGSIb3DQEBCwUA
A4IBAQCfOqRxnAwRBr4L1w03qWMNH0BMkkzyTjrNhJT5xlYxkqJM5/Wsp6m9QToC
qb8c9rFlow9WEPryOboe9EpFPq/bCYDQmh6VeeDHM6wwyONN/qElZikJzzIwK7nf
5goCzqjFNM4H3eDHvGUlexJawppYNi0DMIGejbHBj0eZnOalIdDXO8ojlwb/wtrw
Ic6mQ2w/iZ/jNw/sRG34gR5zR64Q3RDFL5KX60DK5rEOuG5ERHCF3xTO7l33TYE7
mUB6CnECOlolnWQe8nLVo7NLadQKJ48eZhwymB6sKM/tRDxwbP4V52Pg/AIdHk/t
OpEZ9gATidTI+mdTW/kcpaAYodwA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:18 2025 by rpki-client