Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34E3C3271D811ECADEB9DD55A40D577.roa
File:                     D34E3C3271D811ECADEB9DD55A40D577.roa (raw, json)
Hash identifier:          +G42cW8kzTxpqdcE0b276bdCGQH9PCZpNKPekvsE2EM=
Subject key identifier:   6A:93:BF:B2:CD:0E:5D:E4:3C:8C:87:2B:BE:20:21:6D:1C:4D:3C:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       114B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34E3C3271D811ECADEB9DD55A40D577.roa
Signing time:             Mon 10 Jan 2022 05:47:42 +0000
ROA not before:           Mon 10 Jan 2022 05:47:37 +0000
ROA not after:            Fri 30 Dec 2022 05:47:37 +0000
asID:                     328608
IP address blocks:        45.199.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4427 (0x114b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 10 05:47:37 2022 GMT
            Not After : Dec 30 05:47:37 2022 GMT
        Subject: CN=61dbc87e-6823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:b5:a4:5b:c4:d8:2f:aa:59:3c:55:fc:20:
                    33:9a:eb:53:06:6f:2f:77:fe:27:11:23:04:e5:70:
                    10:43:e9:1f:f6:ee:5e:ea:9f:c4:bf:b7:e5:96:d1:
                    52:5e:1a:91:c0:aa:a2:fe:cb:69:2c:77:2b:72:8d:
                    b9:18:e8:14:52:c2:b4:6b:d4:4d:0e:32:4d:37:08:
                    fa:ca:86:1c:1b:f3:0a:fb:0f:c8:06:61:7c:01:e9:
                    f8:c9:0c:ba:cb:97:48:a8:a0:ce:f3:3e:a7:5e:8b:
                    d3:09:b8:d1:e4:cd:ce:8d:e1:77:c1:3c:02:44:6f:
                    dd:70:95:61:87:e5:64:17:c9:7d:b4:55:e2:60:1d:
                    f0:3f:a3:8d:70:e8:69:60:2a:55:9f:8e:1a:22:7b:
                    5f:4f:fe:51:8b:67:6d:74:5a:0e:ff:37:16:30:39:
                    dd:e6:ae:36:71:23:9c:6f:73:a9:16:2d:a8:e7:15:
                    dc:eb:87:cc:9a:be:20:a7:c5:82:68:fb:b7:d0:4e:
                    c8:47:af:a7:c7:5c:b2:b8:04:1a:78:ee:7c:af:69:
                    2d:69:df:1f:9c:8e:ec:f3:a1:3c:1b:80:67:35:08:
                    5e:ed:a3:d5:b4:96:74:74:b0:c5:6f:b8:dc:e8:ae:
                    b3:a1:c6:84:da:b1:8e:60:fa:e5:8f:82:4c:33:e2:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:BF:B2:CD:0E:5D:E4:3C:8C:87:2B:BE:20:21:6D:1C:4D:3C:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34E3C3271D811ECADEB9DD55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:23:94:ad:97:f6:7a:d0:c9:78:cb:ea:b8:78:f7:86:85:
         5b:e9:23:70:52:7c:88:97:bf:4f:63:6a:40:fa:ba:ce:61:5f:
         29:f7:90:33:48:b0:bf:9e:2e:04:4f:bd:77:87:fc:1f:12:a3:
         59:d7:66:8f:bd:04:30:d3:15:0e:cb:dd:ca:d6:de:15:28:98:
         f9:2e:2a:e6:43:ac:3f:f9:21:f7:b9:e6:a2:24:fa:af:38:87:
         b7:e3:d8:5f:dc:dd:48:3f:23:a3:e9:f6:be:5c:54:64:14:26:
         fe:29:50:b8:2d:28:15:51:e7:34:14:4a:17:94:cb:88:95:15:
         f7:42:89:4b:dc:ea:6f:9c:00:a4:aa:72:16:48:83:07:de:a7:
         0c:89:88:38:f8:77:64:72:54:be:b0:6a:ba:e5:4b:a7:04:bc:
         c6:fe:f8:20:83:4a:2a:f6:3f:56:e3:97:33:ca:10:e5:11:08:
         05:4f:5c:1c:8e:18:fd:0c:e6:cb:29:9a:72:8e:79:32:7f:78:
         75:2c:31:f0:0b:30:c9:0b:58:10:53:16:06:c0:fc:19:c2:55:
         09:cf:90:7c:78:ef:12:cc:ae:57:ad:80:55:32:12:62:29:dc:
         31:dd:63:20:60:18:07:3a:7d:a3:93:24:65:21:16:e4:be:be:
         c6:c0:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org