Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/124D9838327311EC8AB3736BD8A014CE.roa
File:                     124D9838327311EC8AB3736BD8A014CE.roa (raw, json)
Hash identifier:          62krWTOcVoi+NnCgZyvtHlDrYvxveqaLL8spQ85UAGM=
Subject key identifier:   BE:1B:9C:B1:6F:E4:7E:50:B6:18:96:01:16:25:4C:B5:28:BD:A8:10
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01E6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/124D9838327311EC8AB3736BD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:30:35 +0000
ROA not before:           Thu 21 Oct 2021 13:30:32 +0000
ROA not after:            Fri 21 Oct 2022 13:30:32 +0000
asID:                     60458
IP address blocks:        161.123.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:30:32 2021 GMT
            Not After : Oct 21 13:30:32 2022 GMT
        Subject: CN=61716b7b-1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:f5:b2:fb:48:a7:d0:1c:13:c8:af:60:03:
                    15:ad:36:fc:55:a9:cd:9c:6f:9b:3f:7c:a9:30:18:
                    a7:e3:d3:90:e7:d6:e5:ba:73:d8:dc:e2:c0:99:e8:
                    0e:29:a9:a9:2e:a8:a2:4e:fc:c6:b4:6c:88:64:8a:
                    d2:e3:3a:43:78:47:d1:af:ec:d9:b6:80:32:a7:2f:
                    17:e3:0e:18:7f:f1:87:2b:7f:6a:0d:e3:c6:d1:89:
                    50:eb:16:34:2a:52:ab:6f:2b:25:ee:00:5f:7b:d5:
                    41:19:94:17:54:7f:39:a7:92:56:f0:7c:e6:17:bd:
                    14:d8:fc:14:1e:80:31:b9:ba:77:80:dc:40:ab:34:
                    6b:69:eb:6b:7b:a4:a0:ec:a0:d3:56:79:99:8d:4c:
                    f4:19:85:56:0d:9e:ec:db:7e:db:53:ff:ae:4c:5a:
                    73:b9:fd:a2:e1:28:55:de:8a:d0:1b:44:43:0e:f1:
                    48:a8:15:89:cc:8a:c5:9a:31:68:5b:54:98:63:3e:
                    2f:82:a2:2b:54:85:45:22:2e:0e:99:63:70:e4:79:
                    f3:8a:e0:c5:f3:a4:a2:0c:cd:ce:3b:99:d0:33:34:
                    a8:70:54:74:26:0a:87:48:4e:78:8b:8c:69:88:ad:
                    77:e0:17:e7:ac:7b:81:b6:a8:3f:de:ec:75:2e:49:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:9C:B1:6F:E4:7E:50:B6:18:96:01:16:25:4C:B5:28:BD:A8:10
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/124D9838327311EC8AB3736BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:e9:44:26:f1:16:3b:e3:53:03:3e:0f:c6:0c:68:62:eb:
         24:6f:c0:94:1f:b2:b2:91:58:70:cf:be:1b:95:aa:87:e7:0e:
         ee:a9:6d:bb:94:a2:85:f6:ce:c5:c4:94:3e:35:94:45:06:ed:
         a2:18:96:a6:56:2f:c9:30:f8:75:3e:19:3b:11:85:f8:47:de:
         f1:b9:4f:a8:e1:55:ee:ad:58:ef:3b:10:c7:30:11:26:81:92:
         51:39:0e:7f:46:40:f7:1f:69:fd:93:1b:92:33:4c:5e:bf:02:
         69:aa:ac:4b:8d:50:8d:8a:dc:c8:ed:81:25:8f:b3:93:ee:34:
         67:aa:6e:e7:ce:c7:31:48:9f:49:eb:99:5a:74:19:41:61:e6:
         f8:ef:0e:6e:a9:61:4e:53:3f:eb:9a:f8:fb:f7:2f:c1:4a:e4:
         f7:2d:b7:32:ef:13:1b:96:4c:06:2c:f2:12:5d:41:bf:14:0a:
         d0:7e:da:98:77:07:6e:26:74:4a:4e:99:fd:14:4c:ca:34:79:
         ad:e7:b9:ea:70:08:4d:98:2b:a8:8c:73:6d:b6:3f:71:5f:8e:
         27:1e:db:bf:f1:82:0e:5f:49:db:c1:1d:a6:6a:f1:84:f1:7d:
         50:02:37:47:e7:a0:fe:36:ce:3b:32:e6:81:27:c5:86:5a:8e:
         33:1c:f9:e0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTEwMjExMzMwMzJaFw0yMjEwMjExMzMwMzJaMBgxFjAU
BgNVBAMMDTYxNzE2YjdiLTE0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSq/Wy+0in0BwTyK9gAxWtNvxVqc2cb5s/fKkwGKfj05Dn1uW6c9jc4sCZ
6A4pqakuqKJO/Ma0bIhkitLjOkN4R9Gv7Nm2gDKnLxfjDhh/8Ycrf2oN48bRiVDr
FjQqUqtvKyXuAF971UEZlBdUfzmnklbwfOYXvRTY/BQegDG5uneA3ECrNGtp62t7
pKDsoNNWeZmNTPQZhVYNnuzbfttT/65MWnO5/aLhKFXeitAbREMO8UioFYnMisWa
MWhbVJhjPi+CoitUhUUiLg6ZY3DkefOK4MXzpKIMzc47mdAzNKhwVHQmCodITniL
jGmIrXfgF+ese4G2qD/e7HUuSTtlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvhuc
sW/kflC2GJYBFiVMtSi9qBAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzEyNEQ5ODM4MzI3MzExRUM4QUIzNzM2QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe68wDQYJKoZIhvcNAQELBQAD
ggEBABWK6UQm8RY741MDPg/GDGhi6yRvwJQfsrKRWHDPvhuVqofnDu6pbbuUooX2
zsXElD41lEUG7aIYlqZWL8kw+HU+GTsRhfhH3vG5T6jhVe6tWO87EMcwESaBklE5
Dn9GQPcfaf2TG5IzTF6/AmmqrEuNUI2K3MjtgSWPs5PuNGeqbufOxzFIn0nrmVp0
GUFh5vjvDm6pYU5TP+ua+Pv3L8FK5PcttzLvExuWTAYs8hJdQb8UCtB+2ph3B24m
dEpOmf0UTMo0ea3nuepwCE2YK6iMc222P3Ffjice27/xgg5fSdvBHaZq8YTxfVAC
N0fnoP42zjsy5oEnxYZajjMc+eA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org