Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDBC682018611EFA86FA351017001B1.roa
File:                     EEDBC682018611EFA86FA351017001B1.roa (raw, json)
Hash identifier:          mSSKTPGhovQ0YKVS6zGnIA2NFQ+06+ek4zSWAPKJtYE=
Subject key identifier:   19:83:AB:2C:6E:5D:09:EA:39:15:B7:DD:90:94:FE:F7:32:BE:62:37
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       847F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDBC682018611EFA86FA351017001B1.roa
Signing time:             Tue 23 Apr 2024 15:34:12 +0000
ROA not before:           Tue 23 Apr 2024 15:34:08 +0000
ROA not after:            Thu 02 May 2024 15:34:08 +0000
asID:                     136950
IP address blocks:        45.204.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33919 (0x847f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 23 15:34:08 2024 GMT
            Not After : May  2 15:34:08 2024 GMT
        Subject: CN=6627d4f4-4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:a2:f6:a4:43:2c:d1:41:66:93:14:f3:fd:
                    6d:7a:e6:14:f3:77:b8:67:db:cc:be:24:1b:c4:05:
                    bf:ae:e6:6f:37:0d:5c:3c:b6:ee:da:e0:a0:26:ec:
                    4d:89:f6:7d:0d:9d:2c:27:92:ea:ed:d5:c0:63:e3:
                    5a:94:a1:16:af:18:72:99:71:88:8a:b0:29:2e:3e:
                    0f:ec:4c:8c:c9:51:ac:3c:8a:f4:ba:da:5e:45:5f:
                    8f:61:25:68:c1:10:36:00:5b:0e:73:dd:67:b8:33:
                    d2:ed:70:80:ad:de:1f:9e:a6:79:6c:db:e1:88:f2:
                    99:8f:79:8f:3a:d5:5a:98:3e:b8:28:79:f2:79:13:
                    0d:9b:71:37:a5:bf:1a:87:f2:60:2f:5b:5b:3c:ea:
                    89:4d:27:03:02:ee:16:ab:63:08:31:4f:90:a8:c3:
                    b0:52:f5:47:30:90:24:ed:d3:9c:21:94:35:d7:b3:
                    84:cf:5f:6a:34:b6:a8:7a:c1:90:80:7c:a1:13:08:
                    f7:d4:a6:8e:fe:bc:a9:2f:10:0a:ce:c0:92:b6:3c:
                    9f:e8:a8:1a:bb:7e:d8:c1:6b:55:50:d4:f1:90:6b:
                    7a:5a:3e:da:56:a4:0f:0b:56:a6:34:d9:c5:0d:de:
                    c1:e8:d9:82:3e:78:fd:ee:83:30:e4:2c:43:8d:a5:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:83:AB:2C:6E:5D:09:EA:39:15:B7:DD:90:94:FE:F7:32:BE:62:37
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEDBC682018611EFA86FA351017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:81:9d:f2:d6:21:c8:44:1a:40:cb:fb:8c:87:bc:cf:a8:
         7a:04:06:84:be:b4:09:ec:f2:fc:3d:0c:4a:bb:b0:e4:b8:9a:
         c8:71:13:6d:34:6d:8d:1c:e1:67:a0:d3:98:0a:fb:e7:93:c5:
         80:64:86:43:3f:ad:78:04:ac:02:15:5f:40:91:9c:5e:04:15:
         e0:b6:b8:87:fc:61:22:49:94:3d:fe:2a:2d:0b:f9:a2:72:b2:
         f8:6e:7b:bc:71:ff:9e:63:0b:80:31:2c:62:dd:a3:c6:94:3d:
         bc:64:97:a0:9d:13:ec:19:f6:6c:77:7f:3e:3b:c5:00:8a:68:
         32:7d:c9:e1:1c:da:0c:18:bb:e4:bd:a8:45:ad:10:1c:95:2b:
         90:c8:31:9e:9e:18:76:24:36:7d:a7:c7:b2:e4:2f:07:e9:eb:
         78:be:53:07:34:1a:d6:5e:33:06:60:49:3c:b3:f1:b5:ef:4d:
         51:91:1c:f8:17:3b:30:77:49:8a:e5:36:f3:8b:06:12:56:65:
         6a:ac:6b:ea:b9:53:61:3b:3b:e0:1c:b6:0e:34:05:37:68:eb:
         ee:4c:35:48:ba:a5:40:ac:d4:d0:a3:d9:78:18:3e:2b:eb:34:
         0a:33:c4:4a:96:37:61:72:41:f5:9a:c2:97:6b:fa:d1:3d:f8:
         24:c1:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org