Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EB172F32C30C11EDBDD144F3F1222468.roa
File:                     EB172F32C30C11EDBDD144F3F1222468.roa (raw, json)
Hash identifier:          ZAwH9OS02i3iIaYJicNB/cAO0jc1aBQ3m/s1M1Tchlg=
Subject key identifier:   04:4D:22:7D:E9:3D:49:FD:EA:E4:84:13:15:11:8D:45:D4:AA:57:3F
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       035C
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EB172F32C30C11EDBDD144F3F1222468.roa
Signing time:             Wed 15 Mar 2023 08:39:37 +0000
ROA not before:           Wed 15 Mar 2023 08:39:33 +0000
ROA not after:            Fri 15 Mar 2024 08:39:33 +0000
asID:                     61290
IP address blocks:        154.73.251.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF
        Validity
            Not Before: Mar 15 08:39:33 2023 GMT
            Not After : Mar 15 08:39:33 2024 GMT
        Subject: CN=64118449-2cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:10:96:bf:69:f7:ec:f0:d5:e9:ff:57:48:
                    95:49:39:8f:42:07:d1:6a:03:89:8e:ee:32:19:12:
                    ac:73:84:ec:25:42:c6:08:87:20:d5:fa:9d:89:12:
                    32:30:15:59:55:30:ad:bb:3c:2f:e5:bc:ad:56:9f:
                    d1:d5:31:1e:81:e7:d0:6b:12:7d:e1:2f:bd:a0:c2:
                    74:15:f0:75:a7:d6:26:49:89:f1:ab:09:e4:9d:0d:
                    39:ed:f1:93:b6:59:10:0b:84:eb:29:1f:af:27:fb:
                    82:0a:8b:b4:1e:fb:c8:3d:07:55:87:7b:21:9e:0c:
                    1c:f5:dc:99:56:b5:39:8e:f4:cb:c3:19:d8:d7:8b:
                    ed:80:04:9f:d5:c4:7c:15:2e:a3:3f:50:ef:2d:b9:
                    b3:ce:cf:dd:1a:59:51:f2:89:74:d0:b9:30:f8:0c:
                    55:11:87:98:1c:7b:d8:62:48:74:e6:24:24:ac:e6:
                    20:17:be:7e:a3:3a:6e:6a:a0:a9:24:38:e0:e4:c5:
                    a8:ed:2a:ed:a8:71:67:1e:01:9f:a3:f7:47:78:af:
                    3d:e3:c7:ab:76:15:42:ce:31:8d:fc:eb:eb:97:f9:
                    06:55:45:1a:07:33:54:f7:25:e6:2f:3a:39:12:59:
                    96:eb:05:87:a0:0f:7d:85:e3:94:92:b8:61:5a:0d:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:22:7D:E9:3D:49:FD:EA:E4:84:13:15:11:8D:45:D4:AA:57:3F
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EB172F32C30C11EDBDD144F3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:13:2c:d9:81:8b:13:64:5e:5e:9a:53:49:07:91:85:50:80:
         dc:8a:6a:b4:fd:fc:90:5c:22:f0:e3:5b:cc:17:64:84:91:b8:
         43:0b:c4:27:fd:56:80:a9:e7:82:61:ae:af:04:43:1f:48:c8:
         cb:9f:47:9f:ec:76:a7:55:34:aa:4c:48:bf:a3:6f:fc:f5:13:
         a5:30:f8:87:32:a5:03:08:b1:93:d2:37:50:ae:92:c9:11:cf:
         aa:7b:af:9f:d7:af:76:95:28:78:cd:4e:51:32:9d:0a:05:32:
         06:01:91:c6:09:e8:1c:f4:7e:aa:9a:5d:8e:29:11:fa:d5:9b:
         9e:6f:08:bf:96:1b:09:60:1c:de:a1:f6:71:69:a3:1a:d6:80:
         1d:5e:43:c3:14:8b:88:ba:56:0c:39:ad:07:d9:95:5a:4a:36:
         9b:65:d1:e5:43:7d:10:2f:00:0a:47:d9:fa:5f:61:48:df:5f:
         90:79:cf:ec:c0:d8:40:01:39:c4:16:df:b8:a4:af:fe:5f:dd:
         b1:cf:3d:a4:8a:69:21:44:8c:fb:b8:4d:95:ae:fe:1f:9b:2e:
         75:5a:4d:cb:b4:ce:1b:21:99:00:89:25:cb:99:97:53:91:5c:
         32:8c:ff:b4:37:b2:4b:22:87:fb:29:9b:64:b3:53:fa:4a:97:
         8d:a1:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:22 2025 by rpki-client