Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E45E568058C711EC89D149945A40D577.roa
File:                     E45E568058C711EC89D149945A40D577.roa (raw, json)
Hash identifier:          CxtXdtIQS08+6/w+5v7eEIhLL+JKwKxYG0FCmOf04x8=
Subject key identifier:   B6:B7:0D:37:C9:88:09:8A:27:C2:7C:37:DB:EA:5E:29:C3:5E:22:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       10BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E45E568058C711EC89D149945A40D577.roa
Signing time:             Thu 09 Dec 2021 08:13:29 +0000
ROA not before:           Thu 09 Dec 2021 08:13:26 +0000
ROA not after:            Sun 30 Oct 2022 08:13:26 +0000
asID:                     147176
IP address blocks:        156.233.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4285 (0x10bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  9 08:13:26 2021 GMT
            Not After : Oct 30 08:13:26 2022 GMT
        Subject: CN=61b1baa9-ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:41:d4:40:f9:95:a4:ce:2d:0c:88:c8:54:
                    03:5b:26:3f:c7:68:a8:14:4b:a4:0c:42:e9:d8:ed:
                    c4:9e:c6:b6:91:09:95:02:d2:c9:ec:87:05:4b:75:
                    6b:c7:a7:e7:00:04:cb:ae:58:96:bf:4c:09:12:19:
                    09:32:e9:38:c5:54:b2:aa:ca:ef:de:ae:0c:9b:a2:
                    68:f0:46:b2:40:07:f6:11:f3:b2:51:4a:a7:f7:14:
                    5c:95:ff:18:b7:ad:c6:4a:c0:27:3b:e1:ee:f6:6f:
                    45:61:e4:03:8d:4b:f3:2c:d3:50:73:23:d6:ea:7d:
                    3d:8e:83:46:2b:79:ed:50:f4:07:ae:96:77:fe:e9:
                    79:28:74:ed:9c:23:fe:18:e1:ba:e5:47:a6:29:6b:
                    a5:03:e5:35:73:a9:05:a7:f1:98:c4:a6:f1:8e:90:
                    01:a8:c4:2b:67:a6:e7:ae:39:04:3e:75:84:5b:5b:
                    4c:aa:fb:6b:80:9f:66:65:b6:41:e5:1f:d3:76:c9:
                    62:a4:a6:6a:d7:b4:03:d3:57:fb:a3:62:c5:b2:c1:
                    bc:12:81:80:73:76:d0:09:70:df:ce:0e:4d:b6:a7:
                    ed:b8:4b:3b:47:68:cd:f9:fd:3f:79:d9:b4:58:6c:
                    8c:3d:c8:f8:d0:90:7c:e9:e2:e1:6e:b8:e1:e7:dd:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:0D:37:C9:88:09:8A:27:C2:7C:37:DB:EA:5E:29:C3:5E:22:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E45E568058C711EC89D149945A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:a4:8b:d7:f7:f6:ac:a4:c8:58:2b:c4:71:d0:9f:66:fc:
         86:30:e2:49:45:21:2d:43:a6:f8:5b:35:02:e4:ae:0f:08:d6:
         bb:7d:59:44:dd:88:ab:57:3a:94:b0:56:83:89:12:fd:41:80:
         b3:81:de:28:d5:c8:95:7e:ed:a3:cc:25:7d:27:84:e8:7d:bc:
         31:74:8b:5b:ce:ed:f8:62:24:e3:f1:94:54:4e:2c:b7:5e:24:
         c9:8c:0c:e9:28:34:75:43:11:bc:9c:ef:63:4c:07:fa:88:d4:
         df:ea:c3:64:f5:03:bb:b2:a9:20:98:ce:de:03:ea:24:32:52:
         41:b1:ad:cc:c4:ef:85:a3:cc:2b:bb:b0:ec:bd:0a:0b:db:ff:
         18:c5:02:f3:2b:73:12:52:52:ad:50:01:c7:0c:94:8d:8f:66:
         56:00:14:56:ef:0c:3c:2e:c9:cc:9d:07:30:01:82:05:23:04:
         63:e3:0f:29:d4:8b:34:03:df:71:c5:d0:35:77:28:6f:76:af:
         66:b2:76:e3:92:7c:df:85:43:7b:1c:fe:dc:5e:01:67:92:9a:
         54:58:02:fe:af:a6:ae:be:3d:f1:25:c7:2a:dc:42:08:03:51:
         a6:eb:95:87:c4:61:4f:95:e4:03:a4:f3:9e:f3:06:c2:2e:9b:
         e4:e5:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org