Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11509DE07DFA11ECA30F12D35A40D577.roa
File:                     11509DE07DFA11ECA30F12D35A40D577.roa (raw, json)
Hash identifier:          16x8cTMDbCxN3oLgrVObdGwO30JlasKawOZUnTlT5Us=
Subject key identifier:   51:FA:16:1D:C9:C0:11:95:73:B4:C6:DB:7A:6A:CF:54:3D:90:94:C6
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0518
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11509DE07DFA11ECA30F12D35A40D577.roa
Signing time:             Tue 25 Jan 2022 16:15:53 +0000
ROA not before:           Tue 25 Jan 2022 16:15:49 +0000
ROA not after:            Wed 25 Jan 2023 16:15:49 +0000
asID:                     327790
IP address blocks:        161.123.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:15:49 2022 GMT
            Not After : Jan 25 16:15:49 2023 GMT
        Subject: CN=61f02239-4d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:6d:06:59:8c:c7:30:b5:b6:37:ff:ca:19:
                    0d:c9:48:e9:d5:55:c9:30:cf:65:d8:b2:32:d6:f1:
                    20:b2:d1:4f:0e:a3:6f:09:56:40:63:62:d3:ad:54:
                    98:ca:f7:60:5d:f1:2f:9e:17:16:37:59:a8:39:f4:
                    a9:73:2f:8a:5a:45:1a:1a:6f:fa:83:24:51:4e:cf:
                    de:b6:04:f7:ec:3a:4b:ef:7d:9f:8c:ee:a0:de:17:
                    76:23:eb:50:fb:ed:16:f4:75:e3:db:d8:22:fb:56:
                    24:5b:2a:76:5b:06:ad:ee:03:9e:37:74:77:a0:6e:
                    fe:ce:71:b1:6d:da:7b:7d:1a:ad:bc:b1:44:20:72:
                    06:d7:4a:42:8d:28:36:d8:27:18:59:6f:ca:5f:11:
                    4d:7b:29:f0:89:58:16:13:cd:0e:e3:8c:20:06:e8:
                    d3:3b:89:f3:88:f7:4a:1c:78:a2:c1:ad:d3:3a:de:
                    64:23:77:b1:ca:68:98:58:d2:4f:e2:f8:9c:8d:6f:
                    d3:48:bc:0e:76:71:b3:f1:c8:dc:ea:40:25:c9:c4:
                    a1:b0:42:1d:45:31:79:d1:f8:e5:3a:93:c1:dd:e7:
                    8b:08:d9:c4:57:ec:49:72:9c:24:f5:28:e4:55:ab:
                    c1:f4:3d:f3:7f:62:83:d8:26:22:cd:f2:fa:99:a3:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FA:16:1D:C9:C0:11:95:73:B4:C6:DB:7A:6A:CF:54:3D:90:94:C6
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11509DE07DFA11ECA30F12D35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:8b:ab:23:26:d2:13:93:e2:09:29:3b:1a:2c:c2:6e:8f:
         14:2f:01:bf:e5:28:7e:cf:66:ac:51:b9:84:5b:ab:5c:68:d9:
         df:79:92:c5:2c:ec:33:32:ff:50:f9:ce:1d:08:92:1f:60:1b:
         98:ad:1d:cc:67:b4:68:97:bc:10:1e:9e:39:bd:ac:77:3b:fc:
         76:ae:90:87:fe:ed:29:7e:4a:83:75:01:9d:59:db:ee:2e:71:
         06:a9:4e:1c:78:97:e9:90:03:75:25:63:64:8e:5f:97:03:d3:
         dd:8a:74:7e:80:5d:0c:87:ed:de:13:1a:a2:5a:f6:1b:88:6b:
         4f:c4:38:a3:77:21:50:3d:e8:08:10:a5:7f:34:38:8a:59:e7:
         51:54:d1:71:96:a0:f8:d8:7a:a7:50:d4:70:2c:74:43:07:f5:
         b1:f3:28:6a:7e:09:15:bd:cb:bd:c9:8c:e6:7d:91:c4:4a:5e:
         09:be:83:78:5d:94:9e:95:4f:36:06:d1:40:21:da:aa:8b:26:
         f1:0f:d9:32:77:33:b4:49:58:95:48:fa:1d:96:84:98:ce:05:
         f1:e2:1a:76:b0:0a:42:b4:54:05:d2:0c:59:42:43:2b:3f:32:
         5b:3f:3e:6b:52:4b:ba:84:44:36:a2:b0:d6:29:69:c8:75:17:
         d7:45:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org