Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE38B8B436ED11ECA2E49304D8A014CE.roa
File:                     DE38B8B436ED11ECA2E49304D8A014CE.roa (raw, json)
Hash identifier:          ENHNf4an/vd1IU9C143eV5/U6NIEXs17SORpaypuwx8=
Subject key identifier:   85:4A:5C:86:9F:91:D9:77:99:83:98:61:36:F5:A2:82:9C:88:C1:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE38B8B436ED11ECA2E49304D8A014CE.roa
Signing time:             Wed 27 Oct 2021 06:19:41 +0000
ROA not before:           Wed 27 Oct 2021 06:19:37 +0000
ROA not after:            Thu 27 Oct 2022 06:19:37 +0000
asID:                     58895
IP address blocks:        45.206.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 06:19:37 2021 GMT
            Not After : Oct 27 06:19:37 2022 GMT
        Subject: CN=6178ef7c-69b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:16:02:5a:ce:0b:2e:3d:ca:0c:7a:21:a4:
                    d0:72:b1:b3:28:c7:2f:40:cc:78:ca:e9:39:31:db:
                    19:81:3b:c3:e3:f0:61:ff:e3:89:27:0a:89:86:1d:
                    ac:85:a4:8d:88:48:b9:87:5a:26:0b:23:18:58:98:
                    6e:8c:79:79:fc:04:dc:49:14:d0:30:c5:e4:ca:51:
                    35:df:30:92:d4:f2:4f:62:fb:9e:a7:b9:6a:1c:51:
                    65:b6:97:9a:1f:b8:af:7c:a5:c1:b9:8f:7f:82:df:
                    63:94:4d:1c:f6:f4:9b:05:d4:73:f2:3b:5b:f5:a0:
                    ae:4e:fa:a9:1e:58:b0:ad:fe:e1:9e:dd:98:77:41:
                    fb:6e:2c:9a:24:51:85:e2:87:62:64:bf:2a:bb:1a:
                    31:55:02:67:c0:78:a0:75:26:5c:38:46:97:43:c5:
                    a4:e8:59:78:9a:78:f0:b8:bc:14:54:83:50:5e:07:
                    76:ba:9f:bd:da:c1:2b:b5:ad:92:5e:81:e8:53:9c:
                    a2:d0:68:9b:5a:90:8f:9d:69:9f:a0:1c:16:f5:95:
                    65:a2:a7:58:b7:23:c5:a1:1f:8b:ab:21:85:c5:ad:
                    c4:ae:83:22:6f:fe:7b:8e:46:27:1f:0e:c5:7b:7a:
                    e9:86:74:46:f6:43:64:04:d6:ee:62:05:ec:d9:4d:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4A:5C:86:9F:91:D9:77:99:83:98:61:36:F5:A2:82:9C:88:C1:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE38B8B436ED11ECA2E49304D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:36:3c:f3:0c:ee:b7:a4:e4:50:4c:ae:e4:63:74:72:63:55:
         2a:bf:7c:a1:13:43:e5:6b:52:93:36:7d:c6:29:e0:7d:b1:d0:
         89:d6:f8:58:d5:7b:3b:cb:d2:ce:fc:fa:be:1a:01:91:9a:e3:
         84:11:e9:72:31:2c:09:37:8f:9d:fc:d9:45:dd:fd:c5:05:45:
         5a:a1:3f:05:90:e4:d0:16:c4:7c:af:09:37:d1:24:fb:f3:24:
         c9:ca:ec:4b:94:0e:8f:52:36:c9:0d:bb:54:2c:66:39:6b:b5:
         4b:56:f5:d1:b7:2d:9e:bb:92:1f:31:ab:40:61:74:32:ec:29:
         3b:d1:05:be:44:0f:ff:c0:80:7a:c0:30:c4:60:f9:99:69:ba:
         db:c4:09:7b:18:2f:45:05:d8:a0:8b:d5:34:00:b9:a1:c4:30:
         29:31:ed:17:30:8d:99:ed:66:71:84:d4:d0:f0:8c:b1:2a:eb:
         99:ac:70:75:8e:85:f8:c0:9e:23:11:a5:85:5f:eb:57:85:c2:
         60:55:6b:78:55:7e:8a:be:a7:66:77:ac:a0:57:27:ce:80:70:
         05:bb:a2:1e:28:36:b8:b9:dc:1f:ec:58:77:c9:12:30:82:08:
         2e:86:ce:f3:56:04:7b:19:81:fa:f8:fc:6f:21:76:2a:9f:45:
         2d:98:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org