Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
File:                     1792FA16C31011EDBFDB807EF1222468.roa (raw, json)
Hash identifier:          W96QRuwoVsgZLQnUd9ahKyB/OMBcwJUV1275mTPjK8o=
Subject key identifier:   03:34:D7:51:E9:87:C6:A7:34:A4:E7:08:CA:E3:BD:25:15:78:70:FD
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A0F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
Signing time:             Wed 15 Mar 2023 09:02:20 +0000
ROA not before:           Wed 15 Mar 2023 09:02:17 +0000
ROA not after:            Fri 15 Mar 2024 09:02:17 +0000
asID:                     207990
IP address blocks:        161.123.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 15 09:02:17 2023 GMT
            Not After : Mar 15 09:02:17 2024 GMT
        Subject: CN=6411899c-14de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:16:6a:24:5c:f7:64:4a:7b:a0:c1:b9:d4:
                    39:63:76:c0:e2:9f:d3:3b:50:2e:49:24:40:63:03:
                    25:a0:e1:5a:24:42:63:65:3b:20:3c:7c:1d:d8:a3:
                    ea:b5:c2:87:72:a4:b7:e5:49:a7:7b:d8:02:69:19:
                    b3:2b:6d:3b:71:55:99:b6:b0:23:dc:d0:bd:3e:aa:
                    f7:5b:35:5a:0c:dd:9e:25:da:81:9a:bd:d4:37:02:
                    b8:55:8b:26:ce:27:ca:22:af:69:5f:6e:f7:9d:c6:
                    d0:75:8f:4a:37:f4:87:0a:c8:be:61:ac:a8:a6:57:
                    59:ba:74:94:11:99:9d:94:b9:d5:11:d7:21:fe:df:
                    98:15:9f:56:c3:8a:8d:0b:ab:6f:99:4a:5a:bf:c5:
                    d0:99:4e:23:0a:47:1c:83:53:b1:aa:f8:9d:09:11:
                    95:a3:79:02:61:1a:41:c0:b1:16:99:ec:37:e5:c0:
                    7f:4f:42:06:8f:18:4a:27:2e:3c:11:1e:fd:b7:21:
                    07:e1:3a:13:93:9c:e8:d6:f0:2e:be:78:6f:72:72:
                    f8:b8:fb:50:a9:71:f6:a5:2b:db:11:a6:82:04:8c:
                    46:bf:f3:18:1d:69:fe:17:dc:b2:8c:a8:71:68:66:
                    bd:fe:3c:b5:3b:1b:d6:91:28:b7:4f:d0:2c:57:23:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:34:D7:51:E9:87:C6:A7:34:A4:E7:08:CA:E3:BD:25:15:78:70:FD
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:d1:10:1a:df:46:0c:17:a0:4a:d3:df:0a:26:41:22:70:
         0b:6d:34:70:00:5b:0e:d9:d8:25:4d:be:d7:1a:0e:b8:08:8a:
         04:9c:88:2a:77:ca:cd:28:87:f1:90:94:1b:fd:f8:0a:9d:64:
         55:5a:cc:f7:3b:a3:c6:d6:24:d6:16:66:58:9f:c3:69:6f:13:
         57:a8:40:f9:2d:f6:c5:e6:b1:df:8d:e0:ed:b8:5e:3d:85:f5:
         55:99:55:6c:24:de:e1:76:1d:43:b6:aa:dc:af:3c:d8:b0:37:
         27:6e:57:ac:39:30:e1:34:7e:0b:7d:7c:cf:42:8c:4f:14:35:
         e2:d0:d3:a6:78:5b:72:a5:db:dc:e4:da:b3:52:b8:a1:6c:8d:
         a7:8b:c0:b9:7e:42:99:73:f0:a6:06:42:2c:9f:a9:f6:4f:e7:
         f7:c6:1a:51:9a:5c:91:ab:dd:6e:02:57:26:53:55:24:43:bb:
         3e:9c:ee:6f:15:3e:87:d2:5d:b7:6d:69:94:61:f0:91:b5:da:
         4f:9a:3a:44:30:89:8e:31:fa:38:23:50:a9:87:61:2c:81:a4:
         c2:54:ff:94:ce:16:60:7a:e7:42:0d:0c:4d:fd:1f:63:4d:13:
         83:36:ef:21:7b:17:6e:b8:23:c5:e4:66:f1:3c:f4:3f:72:45:
         4b:b9:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org