Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/021D02D2A8BA11EDADFC6AE4F1222468.roa
File:                     021D02D2A8BA11EDADFC6AE4F1222468.roa (raw, json)
Hash identifier:          nZbDds8tC3dTphaVA2QzA3i/qVwt4h35wUMe+0Ln92w=
Subject key identifier:   06:43:5C:8E:52:9C:FC:46:28:F9:0A:EB:F1:0C:F7:58:B1:52:DD:82
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       09B5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/021D02D2A8BA11EDADFC6AE4F1222468.roa
Signing time:             Thu 09 Feb 2023 20:40:37 +0000
ROA not before:           Thu 09 Feb 2023 20:40:34 +0000
ROA not after:            Fri 09 Feb 2024 20:40:34 +0000
asID:                     207990
IP address blocks:        161.123.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  9 20:40:34 2023 GMT
            Not After : Feb  9 20:40:34 2024 GMT
        Subject: CN=63e55a45-d21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:3a:44:f6:18:45:3c:ed:ad:b4:59:f6:82:
                    aa:2d:78:c4:17:55:d4:b7:51:98:07:60:6f:47:14:
                    3a:77:34:c3:38:d1:ab:ee:ab:e1:45:49:15:66:dc:
                    8c:3a:2e:5e:72:7d:2f:5b:23:10:f3:fa:13:a5:ff:
                    b2:c8:60:a0:ee:9d:40:fc:b7:ca:24:66:03:a8:aa:
                    5f:d6:7c:07:cc:45:f9:be:43:90:8e:70:32:e8:e2:
                    5b:ed:85:9a:5f:72:7b:f6:65:2a:a9:19:bc:84:88:
                    43:0d:75:6f:32:34:6d:d3:17:32:91:3f:d7:4f:66:
                    9e:95:eb:b3:af:a1:44:a7:a0:d9:14:04:52:6c:69:
                    4b:76:14:23:fd:dd:30:46:00:23:ce:d0:24:44:50:
                    43:c4:39:37:68:58:d0:35:5a:14:2b:7d:00:df:d4:
                    bc:6b:45:92:96:34:8f:a6:5e:64:92:35:bd:ef:00:
                    e5:71:5f:57:d3:d9:6d:80:9e:9f:3a:72:56:89:64:
                    33:f2:97:53:0b:60:8d:03:85:a8:08:a2:ad:2d:58:
                    9f:af:01:9b:bd:a4:0d:8a:67:98:82:a6:02:1a:53:
                    c4:19:82:4f:27:5c:c0:25:76:12:d8:f5:c0:81:2a:
                    a6:bc:70:7f:50:fd:7d:00:17:69:45:31:d2:0d:03:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:5C:8E:52:9C:FC:46:28:F9:0A:EB:F1:0C:F7:58:B1:52:DD:82
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/021D02D2A8BA11EDADFC6AE4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:0b:d2:85:29:68:2f:21:81:60:6e:9e:c8:9a:83:0b:4f:
         f2:11:21:2f:01:aa:3d:c9:12:b6:72:6c:4a:8e:15:7d:9e:a7:
         72:e3:af:7d:98:80:83:f1:c0:69:bb:82:d6:46:23:a1:b5:f2:
         c7:7b:c7:57:8d:8b:17:d1:1a:6e:fc:32:4c:b0:cd:e4:ad:da:
         5d:8a:16:1f:f0:a2:b3:94:ea:df:28:e8:99:e9:a0:e6:83:8c:
         ac:50:3f:df:c6:10:07:e5:c8:a8:56:fa:6a:f9:19:99:dd:b5:
         d2:10:06:8d:fd:b1:2d:99:b5:51:6e:31:a5:61:58:e9:39:9c:
         1f:f5:e8:38:d6:a1:2a:7d:4b:92:30:a7:21:2f:ff:16:08:5b:
         96:78:3b:66:37:20:97:50:56:30:08:f5:9a:51:b1:49:05:fd:
         35:ab:39:b4:09:4d:2d:70:a7:4d:42:ac:71:72:24:fb:d6:59:
         67:05:e3:0c:cc:01:be:4f:f0:01:5e:8e:ad:7d:29:d9:3a:88:
         29:0e:ae:af:4b:2d:a2:b5:99:d8:69:ab:b1:1b:49:3c:ed:7e:
         2e:3b:ee:8a:11:ff:8a:c2:57:b9:61:b6:96:df:8e:fd:77:51:
         74:8d:98:56:c5:bf:3a:37:3c:a9:f5:87:69:03:af:0e:4e:83:
         ad:db:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org