Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566C5E8D10B11EBA425B461F8AEA228.roa
File:                     D566C5E8D10B11EBA425B461F8AEA228.roa (raw, json)
Hash identifier:          FeuCf35Y6uJfM12BM1yp3sHqLT76RGChlxOesRgsa/0=
Subject key identifier:   9B:C0:13:25:96:DD:41:2A:67:A7:16:FA:D0:15:18:43:1D:E3:D8:4A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       068F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566C5E8D10B11EBA425B461F8AEA228.roa
Signing time:             Sat 19 Jun 2021 14:37:12 +0000
ROA not before:           Sat 19 Jun 2021 14:37:07 +0000
ROA not after:            Tue 09 Aug 2022 14:37:07 +0000
asID:                     201411
IP address blocks:        45.195.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 19 14:37:07 2021 GMT
            Not After : Aug  9 14:37:07 2022 GMT
        Subject: CN=60ce0118-815f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:44:94:6a:04:c6:01:78:07:e1:57:82:a4:
                    bd:d1:61:1e:85:88:0f:ea:4d:54:15:1c:b8:0b:77:
                    b7:9a:73:67:f5:82:d5:2e:7e:2d:74:61:8e:28:c1:
                    3f:96:a2:88:25:93:4e:90:3e:ae:64:1f:a2:53:d5:
                    b2:72:8b:12:c4:a4:3d:27:e9:3c:60:11:1f:26:8b:
                    62:f5:58:4b:19:28:f6:3b:14:60:2c:df:71:8b:47:
                    34:dc:5d:8c:bd:a5:87:d1:ed:a0:81:84:78:c1:9a:
                    98:b7:59:1f:6a:f5:22:ad:06:72:aa:f8:26:c2:dd:
                    cf:a0:10:c9:b1:b4:00:48:a8:a6:e9:3c:f0:e4:5f:
                    b7:14:dd:e2:3d:82:03:75:f2:eb:cf:ff:dd:df:05:
                    d9:e4:e4:93:85:cc:81:37:a1:fe:ff:53:43:62:f4:
                    72:31:24:64:7b:b7:d6:5a:2e:83:25:15:57:da:98:
                    22:af:3a:fc:d8:f0:17:f7:fb:8a:eb:e0:a2:ff:b2:
                    73:65:7a:62:3c:d6:f0:a2:3c:15:b2:fb:bd:04:56:
                    ec:a4:94:f8:41:88:82:bd:f3:b3:8b:1d:79:5d:80:
                    6b:41:01:93:19:9c:e9:e6:17:55:68:43:08:97:8d:
                    be:57:75:c0:1d:3c:5b:4b:c8:cd:18:5e:54:e1:e6:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:13:25:96:DD:41:2A:67:A7:16:FA:D0:15:18:43:1D:E3:D8:4A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566C5E8D10B11EBA425B461F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:de:55:90:bf:60:09:c7:5b:df:0e:fa:0f:fa:c0:93:98:5b:
         85:33:28:ce:3b:63:8c:ca:37:f3:d3:fc:e1:41:7f:dd:de:35:
         c9:1e:83:09:56:b3:2e:5b:ab:91:ae:19:88:9c:80:3a:25:ec:
         24:ea:26:5b:73:92:c2:32:d3:42:af:7f:ec:ff:4a:8d:95:0f:
         11:85:b6:99:93:c7:80:92:ce:3d:2d:dd:15:22:1a:a0:18:79:
         f0:13:f0:15:62:b1:1b:1c:59:55:6e:78:e9:f3:ed:cb:b4:93:
         80:fc:60:3d:c2:b7:36:81:a8:6c:b3:37:09:0e:58:19:df:1e:
         e8:b7:3f:82:e7:1b:bb:1e:5a:8a:3a:41:61:6f:7a:cd:93:60:
         ba:ba:f0:16:5f:d3:1b:a9:e0:85:2b:74:d4:77:a5:5f:0d:fa:
         a4:21:df:11:72:68:05:cd:c2:98:77:d3:14:8b:a0:41:27:4f:
         19:bd:ac:40:58:f6:c6:fb:9c:6c:17:a4:1d:56:4b:70:e7:b8:
         bb:54:4f:38:98:9a:fb:d7:5a:ac:1b:30:98:8d:1c:87:cd:06:
         36:2c:2b:ef:8d:be:4c:e1:0e:0e:d5:dd:22:aa:ae:59:23:54:
         d8:0e:ac:4f:06:23:0f:d1:b9:1c:ea:82:1a:fe:b1:62:d6:01:
         0b:54:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org