Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBABE93CEF6611EB819B3F47D8A014CE.roa
File:                     DBABE93CEF6611EB819B3F47D8A014CE.roa (raw, json)
Hash identifier:          t3Ygp+/AEwmrbkZj1gaNDTd/E7h8FSZbjsOTSYs6dVU=
Subject key identifier:   E8:50:41:6E:04:3F:79:E5:CF:42:1D:A4:8A:A5:F3:56:C1:F4:37:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0824
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBABE93CEF6611EB819B3F47D8A014CE.roa
Signing time:             Wed 28 Jul 2021 05:44:41 +0000
ROA not before:           Wed 28 Jul 2021 05:44:35 +0000
ROA not after:            Wed 28 Sep 2022 05:44:35 +0000
asID:                     133201
IP address blocks:        45.200.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 28 05:44:35 2021 GMT
            Not After : Sep 28 05:44:35 2022 GMT
        Subject: CN=6100eec9-c0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:a2:3e:61:05:13:e4:02:d7:73:d7:2b:8b:
                    39:5a:ee:04:6b:af:09:e9:4a:ea:0a:28:fd:36:6e:
                    ef:3b:9f:c9:e2:4d:da:08:2e:c7:0a:81:28:3f:ee:
                    ab:8f:7b:42:0e:1a:4a:a0:59:ba:fd:91:b8:5d:28:
                    8c:4b:2c:13:78:2e:f7:36:3a:8a:6c:a1:11:cf:a3:
                    25:d1:8f:f8:ce:a5:5d:38:70:76:4b:6b:aa:fc:a7:
                    5b:61:5b:6f:9c:60:83:2f:ce:d0:15:15:d5:ca:e2:
                    c3:57:56:5e:b4:f9:1d:25:53:a8:64:fc:41:8e:54:
                    4e:67:5b:97:7d:d2:27:13:0b:f2:c3:29:b5:49:38:
                    60:1e:ad:da:df:ad:c2:5d:d3:19:63:50:2c:9e:87:
                    cb:de:fe:07:7c:02:ee:60:a1:2a:75:7c:50:eb:b3:
                    99:49:e5:9f:34:ad:84:dc:c9:00:0b:d7:8b:d7:de:
                    6f:24:e1:78:b4:74:84:c8:aa:33:4b:54:09:85:cd:
                    80:75:d3:78:ee:9a:d2:e0:6d:2e:ab:09:4e:b5:8b:
                    7b:81:99:3f:02:9f:d7:a4:b5:a7:0e:65:46:86:70:
                    79:ff:fc:2f:a7:64:28:b3:d7:2b:99:ad:25:5c:3e:
                    cb:6c:fc:5a:52:2b:87:53:16:76:f5:4c:f2:41:b8:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:41:6E:04:3F:79:E5:CF:42:1D:A4:8A:A5:F3:56:C1:F4:37:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBABE93CEF6611EB819B3F47D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:1b:8d:0d:37:31:ad:0b:a9:6b:32:6a:a8:9f:dc:c0:a0:
         c3:f4:8f:d3:b0:1e:e9:86:e1:a8:77:97:26:5d:e6:1e:08:5d:
         c3:98:12:3e:8f:ba:fe:af:25:4e:f9:81:bf:ce:a3:87:37:6c:
         55:e5:52:d8:28:c1:59:dc:59:85:1d:c7:68:34:c0:3d:10:b0:
         b8:ae:23:82:e0:1a:db:fb:fc:9b:95:87:35:28:4a:46:9a:ba:
         d8:ca:89:84:06:aa:e4:af:58:7b:f7:48:a7:ec:fd:f0:3c:df:
         7e:27:80:b6:1b:b3:d8:0e:4b:02:86:f8:27:ea:7b:4a:3d:9c:
         3c:f6:62:53:e7:20:67:56:f3:71:e8:e7:2d:82:3e:b4:88:c1:
         f7:37:c3:70:31:c7:9c:fc:05:99:01:08:b1:95:5b:f6:85:80:
         74:11:a5:63:49:4c:96:67:d5:7a:c4:3a:7e:8a:35:58:78:89:
         cd:c2:ca:ae:10:d8:02:1a:f4:19:a4:38:8f:5b:4f:31:56:99:
         60:39:8c:00:22:ca:d1:f1:66:85:6a:2b:9f:cb:cd:1d:a9:68:
         93:1a:f6:64:e1:d6:7c:02:28:b1:a9:8f:0d:00:a8:88:a7:16:
         3b:6f:f1:3d:f9:72:89:93:2b:24:07:47:ad:23:d0:14:41:66:
         f9:f0:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org