Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5778794744211ECA7CFBFE75A40D577.roa
File:                     E5778794744211ECA7CFBFE75A40D577.roa (raw, json)
Hash identifier:          4c5s8U25GQiKGaOH53iveN4cNeMwLV8FuifZleyFY5g=
Subject key identifier:   64:9E:7F:82:04:D9:6A:3B:D0:CF:2B:C5:39:E3:86:ED:38:92:40:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1178
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5778794744211ECA7CFBFE75A40D577.roa
Signing time:             Thu 13 Jan 2022 07:32:01 +0000
ROA not before:           Thu 13 Jan 2022 07:31:56 +0000
ROA not after:            Sun 31 Jul 2022 07:31:56 +0000
asID:                     328608
IP address blocks:        45.196.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4472 (0x1178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 07:31:56 2022 GMT
            Not After : Jul 31 07:31:56 2022 GMT
        Subject: CN=61dfd571-30c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:41:31:0d:c9:b3:01:da:dd:15:fb:d2:aa:
                    e2:c3:06:83:ed:6d:04:bc:95:6f:83:7e:e6:41:ce:
                    97:67:80:ec:6c:da:9f:52:8a:43:bd:a7:56:6a:d9:
                    75:9c:89:03:9a:86:c4:dd:43:95:71:0b:7c:76:f6:
                    97:f0:f9:90:7b:e0:c1:92:b0:2c:c7:d8:b9:d7:bc:
                    16:f9:93:ee:fd:07:f8:9a:be:3f:88:35:9c:e4:fd:
                    90:53:3a:e1:5f:9a:45:db:5b:66:2c:a2:b1:f9:99:
                    20:7e:bf:9e:9e:da:3f:0d:d9:74:a3:95:ef:8c:a0:
                    9c:f8:2b:a7:50:ac:fc:34:36:2d:ca:46:e2:36:26:
                    77:57:76:20:24:6c:d9:65:75:5c:6d:e0:63:6d:26:
                    26:88:fe:5d:77:35:97:d6:e0:0f:ac:53:ab:cb:97:
                    94:18:92:77:42:78:19:13:a7:f3:34:f0:e9:d1:11:
                    09:51:d3:37:7c:ed:1e:e2:e3:99:b9:dd:e8:02:fc:
                    12:1c:58:39:4d:f2:12:d5:58:89:59:9c:d3:fd:fd:
                    73:e6:17:1e:e9:50:64:5e:e8:87:ae:7f:9b:5f:bd:
                    db:2b:65:d9:8a:db:0e:4c:48:19:67:6e:a6:7c:0b:
                    82:4c:d3:04:25:75:f6:eb:c0:3f:22:9c:a1:6f:b1:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:7F:82:04:D9:6A:3B:D0:CF:2B:C5:39:E3:86:ED:38:92:40:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5778794744211ECA7CFBFE75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:06:c6:24:3c:93:37:54:46:9f:e6:66:d7:1a:02:e0:31:
         12:88:ea:9e:a9:bd:b9:c7:e6:6a:39:4b:08:86:7c:69:76:4d:
         e0:b2:87:8f:47:1d:09:34:e1:60:5f:bf:73:eb:fd:88:32:94:
         3d:f1:e8:54:fe:f9:dc:f1:63:3f:75:7f:6f:5a:32:0c:e3:5f:
         bc:07:c1:bc:fe:04:d7:89:c6:3a:ff:46:b1:16:25:b4:6e:e2:
         50:a8:d9:46:15:55:4e:10:7e:c8:62:6c:60:56:76:f0:22:c9:
         4a:a9:ac:4b:82:e4:17:9e:0d:da:c6:1c:43:3b:a9:07:9b:ae:
         a2:61:76:32:a0:12:86:e8:07:e0:df:9a:79:be:84:cf:80:b3:
         7f:c4:0b:3d:41:72:d4:c7:3c:8d:ee:54:10:77:a4:b9:74:ea:
         a4:e9:1c:35:ed:a0:6d:5d:99:f8:81:96:51:50:77:2e:8f:15:
         42:96:97:79:a7:bc:f4:a1:eb:b2:46:8e:b0:10:72:78:c0:c2:
         e0:e9:a8:03:36:13:76:32:fc:b0:e7:40:5d:f9:f6:b3:32:1e:
         4d:be:64:b9:02:a3:d1:b3:59:58:42:60:e5:61:af:0f:7b:4b:
         49:e7:6c:18:8c:73:eb:92:e0:66:4e:5a:77:3c:cf:8c:5b:57:
         34:fa:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org