Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0341A8602FB711EDBD6B707CF1222468.roa
File:                     0341A8602FB711EDBD6B707CF1222468.roa (raw, json)
Hash identifier:          GpgfIXGXN6wQRWKC9Mn7UtXd1Zu1AKY5jfO3/VjmdBs=
Subject key identifier:   6A:F3:81:16:B0:D0:FE:1D:8E:C7:FB:23:6D:55:EB:D1:35:64:3C:44
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       080A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0341A8602FB711EDBD6B707CF1222468.roa
Signing time:             Thu 08 Sep 2022 20:44:20 +0000
ROA not before:           Thu 08 Sep 2022 20:44:14 +0000
ROA not after:            Fri 08 Sep 2023 20:44:14 +0000
asID:                     205431
IP address blocks:        161.123.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep  8 20:44:14 2022 GMT
            Not After : Sep  8 20:44:14 2023 GMT
        Subject: CN=631a5424-3b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:e1:aa:cf:d5:c9:d1:d9:75:cc:2d:e2:fb:
                    8f:17:fb:b8:25:86:d5:30:2d:65:8e:4c:f6:37:46:
                    2a:2d:92:04:f9:5a:b2:47:55:70:18:ab:05:6e:84:
                    22:a8:23:04:88:ca:dc:15:88:ee:c5:de:d1:42:07:
                    3b:a6:8c:fd:d2:b2:22:46:47:77:56:04:06:ef:cf:
                    01:76:98:74:5c:cf:33:ad:bb:49:7c:5a:91:ed:c2:
                    f0:1d:76:a5:80:69:f8:e0:ce:16:ac:13:dd:b7:91:
                    17:2f:69:a4:29:5b:e0:2c:f5:3b:29:b4:d1:4d:41:
                    04:9c:b4:7b:1b:a3:49:a9:15:24:13:34:17:52:c6:
                    10:75:dc:db:25:02:17:7a:3c:1f:54:54:8e:a3:2a:
                    c0:a0:b1:e6:ea:ba:14:e5:4c:a8:9a:fb:3b:0b:80:
                    c1:2f:f9:0b:83:3e:1b:58:b3:29:cf:7f:11:46:d4:
                    5f:09:6b:8e:6d:5e:9a:e1:51:9e:c3:69:08:ee:36:
                    63:f7:e4:75:14:79:ee:e6:b7:23:85:88:b2:42:56:
                    21:bd:13:75:e6:ec:55:6a:35:2d:eb:6d:34:95:81:
                    70:e5:85:16:ba:2d:58:47:21:c3:4c:99:2e:b9:d4:
                    15:08:c8:5c:4b:ab:6d:2f:14:15:7a:21:69:60:c1:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:81:16:B0:D0:FE:1D:8E:C7:FB:23:6D:55:EB:D1:35:64:3C:44
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0341A8602FB711EDBD6B707CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:c0:5d:1f:45:49:41:33:07:67:01:80:95:f0:fc:d5:5b:
         c7:e9:0c:d0:5f:e5:d3:17:2e:f3:2a:77:28:36:78:11:c5:6c:
         65:43:70:c5:ea:b7:ff:a6:6a:8c:a9:5a:0c:4f:58:0b:0b:94:
         7b:06:d2:32:89:c4:b6:8a:5f:60:f8:a3:8b:f5:2e:fa:15:3d:
         90:10:ad:da:7a:fc:23:ba:2d:55:99:23:4a:ed:4e:76:53:be:
         2c:32:33:18:63:5e:7c:bb:9c:5c:05:a2:6e:98:b2:de:bf:87:
         81:c5:3a:e6:1f:f6:70:31:20:ea:af:b5:c1:cf:fa:23:49:a2:
         ff:33:7c:06:17:e3:e6:98:11:53:8e:8b:a4:d7:cd:b0:df:6b:
         26:e7:ec:43:12:88:b7:6f:f2:0b:43:d4:5a:ae:f9:2c:fd:d9:
         48:5d:71:26:28:18:85:07:fc:5e:07:ad:bf:f6:06:da:dc:01:
         9d:72:cf:28:b4:ad:a9:78:8f:20:a1:7c:85:2e:f5:ee:77:e6:
         5f:76:0c:a7:b7:b5:a4:87:34:c0:32:52:70:13:70:1c:d6:56:
         d9:9e:4b:f6:e8:c2:36:7d:f9:a8:31:5f:72:48:41:27:1c:af:
         59:5e:b0:14:b9:e5:47:53:72:c8:96:48:98:1f:9b:8d:b7:2d:
         a2:34:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org