Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/07413A0EE5E111ECA0016BA2F1222468.roa
File:                     07413A0EE5E111ECA0016BA2F1222468.roa (raw, json)
Hash identifier:          lY0Yd1Pn3+A1vZgE1WcALy18gCMJLBlfOtrF9GhKlY4=
Subject key identifier:   A4:A7:69:D9:BA:87:BB:C8:FB:75:AE:82:28:6F:87:FA:F3:6B:BD:50
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0746
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/07413A0EE5E111ECA0016BA2F1222468.roa
Signing time:             Mon 06 Jun 2022 21:38:39 +0000
ROA not before:           Mon 06 Jun 2022 21:38:36 +0000
ROA not after:            Tue 06 Jun 2023 21:38:36 +0000
asID:                     203999
IP address blocks:        161.123.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun  6 21:38:36 2022 GMT
            Not After : Jun  6 21:38:36 2023 GMT
        Subject: CN=629e73df-727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:bf:b2:0c:e1:75:ff:b9:75:99:1a:a0:34:
                    45:33:a6:67:39:9e:0e:d8:f2:4b:64:b6:ce:d2:c0:
                    92:3f:f8:60:30:cb:55:0a:bd:f2:08:12:f7:4b:e9:
                    e9:a6:bf:73:b9:84:c4:75:23:44:49:a5:cc:a2:04:
                    23:82:c9:05:fa:8c:72:0e:80:2d:8c:f3:b6:c3:6b:
                    89:f2:89:04:11:1b:e6:64:b1:7c:8d:a6:35:de:1e:
                    2a:d5:df:ce:b5:3f:48:7a:52:6c:63:56:a1:cc:1c:
                    12:d7:e6:4c:20:1b:e1:fc:0b:66:e2:93:e3:2c:a9:
                    c8:84:67:33:06:a3:b9:9e:c7:78:09:de:41:5f:2c:
                    19:45:32:92:01:c2:38:5a:62:7f:8f:c7:93:b4:75:
                    e5:28:e8:ae:c5:5c:a5:61:52:2a:77:d4:68:f2:2a:
                    f8:e3:4a:77:fa:f7:d1:1f:92:a9:d3:d2:85:9e:4c:
                    45:e3:f8:9d:ad:4d:2e:d1:b0:cc:bd:82:8d:cc:69:
                    c8:38:ff:09:20:8a:1a:ae:60:3c:ca:ff:ca:5b:11:
                    c0:0f:6c:a2:c3:28:f1:a5:ba:fc:6f:80:d7:59:91:
                    f4:bf:13:ea:d2:f0:31:89:a8:9e:4e:e4:87:77:37:
                    5d:ca:39:dd:aa:3b:09:c3:41:7e:92:1e:e9:17:27:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:69:D9:BA:87:BB:C8:FB:75:AE:82:28:6F:87:FA:F3:6B:BD:50
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/07413A0EE5E111ECA0016BA2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:71:4b:b8:c9:86:8e:3c:fa:96:d3:d8:c4:a7:da:0b:c4:12:
         a4:a3:ab:29:49:ce:67:81:f3:cd:52:c6:85:b0:ab:1c:e8:ac:
         30:fe:10:ef:55:83:cf:d4:02:04:59:72:6d:c9:06:f1:94:24:
         e4:53:a2:ab:49:8c:f5:c7:30:68:24:b2:ac:33:66:51:a7:3b:
         8f:d0:0f:db:ef:de:8b:69:5a:b0:66:cd:40:3d:5f:bc:31:19:
         cd:50:4d:ff:aa:e5:b9:02:ff:5c:e4:dd:8a:b7:58:16:f8:95:
         e1:73:31:b5:c2:c6:fd:a5:de:c9:cd:a6:ca:d1:16:d5:3b:f6:
         5e:43:47:f4:16:34:c5:f9:2e:de:e0:55:10:f1:4d:0f:9e:50:
         f2:4d:ba:4c:80:31:2f:4c:c1:03:b6:6a:65:99:eb:a5:b7:d0:
         20:c7:fb:1e:34:2d:b4:a5:45:ff:c1:74:a3:b2:ff:2c:a2:9a:
         d5:e1:b2:d5:15:9d:33:57:05:e3:6c:3c:b6:be:58:b3:0d:8c:
         72:ee:2b:bd:86:51:fb:e0:6a:be:2d:b6:02:f6:ea:9f:06:d4:
         1a:48:cd:4e:49:31:09:58:89:a3:c1:b8:1a:4b:7d:c7:dc:d9:
         c2:02:6f:e3:0b:1d:81:b0:01:f7:0e:9a:83:a5:00:f8:12:c9:
         e5:02:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org