Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/21458394652D11ED9B27539AF1222468.roa
File:                     21458394652D11ED9B27539AF1222468.roa (raw, json)
Hash identifier:          3wR8JbRgNWdI0UxS5j7VRynF2t2J5TZ24muolzXJUcU=
Subject key identifier:   AC:8D:EF:D4:F9:7B:6F:AF:9A:FD:CD:A9:F3:F6:D2:26:37:4B:77:47
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       08EA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/21458394652D11ED9B27539AF1222468.roa
Signing time:             Tue 15 Nov 2022 21:33:22 +0000
ROA not before:           Tue 15 Nov 2022 21:33:19 +0000
ROA not after:            Wed 15 Nov 2023 21:33:19 +0000
asID:                     205431
IP address blocks:        161.123.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Nov 15 21:33:19 2022 GMT
            Not After : Nov 15 21:33:19 2023 GMT
        Subject: CN=637405a2-5241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:23:8d:dc:b7:d7:15:c1:3a:0e:af:46:92:
                    d9:43:e4:83:c4:aa:e8:93:6e:3c:1a:45:27:6f:ce:
                    27:c1:6a:42:ce:11:0f:b2:f2:c4:1d:7b:5f:fd:79:
                    b5:32:c9:8e:d0:f6:89:c6:b0:b1:2a:49:56:3c:47:
                    72:19:5f:0e:3a:38:d7:6d:52:12:98:60:1c:fb:29:
                    cc:d6:27:39:2f:0f:5d:ad:9a:76:87:9f:b1:1f:85:
                    09:94:fd:a3:d7:26:88:aa:af:68:c2:a1:35:31:61:
                    5b:92:65:2e:4b:78:96:e0:82:10:dc:c6:af:8f:3d:
                    ba:c2:e6:c5:d0:ed:96:17:89:08:66:86:9f:5a:19:
                    e3:ac:8b:2f:d6:5e:83:a7:c3:42:1b:40:ac:bd:1d:
                    c5:05:a1:b2:63:ef:88:3a:e3:95:73:36:a5:0d:b2:
                    7c:9c:74:03:64:1c:d9:f2:41:e7:0d:bc:78:8d:6b:
                    62:70:0e:3a:f4:a1:7a:c9:a1:3a:51:c9:55:6f:bf:
                    1b:1d:76:20:f5:4b:ec:3c:3c:ce:fb:0a:f2:c2:52:
                    ae:c3:71:43:b2:99:a5:00:ef:1d:3c:9d:bf:30:d1:
                    55:f8:a0:40:94:5d:ea:3e:08:7b:c5:4e:5b:33:c9:
                    4d:b5:15:7d:c8:61:a0:46:cf:7f:f4:09:70:94:2a:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8D:EF:D4:F9:7B:6F:AF:9A:FD:CD:A9:F3:F6:D2:26:37:4B:77:47
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/21458394652D11ED9B27539AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:68:4e:76:d9:b8:cb:8e:82:6e:dd:03:dd:9b:27:34:0d:4e:
         da:f4:81:ff:f7:73:c5:bc:77:1a:ee:0a:03:df:67:42:b5:fc:
         55:12:75:1c:29:c3:3f:57:2b:aa:1e:fd:e8:23:1e:f1:38:36:
         9b:58:55:e6:ea:dc:51:93:57:e3:b0:1e:29:ae:64:18:f1:bd:
         ee:7e:a1:d0:79:20:64:5b:38:51:8f:fd:1b:51:f4:de:ef:5d:
         77:59:4f:01:14:32:d4:98:c4:85:68:2c:d4:cc:4a:c6:80:e3:
         06:47:e2:a6:6b:b8:8e:27:50:92:74:6b:ff:ae:1d:18:b2:88:
         60:9b:48:2e:86:71:dd:5b:f7:fd:66:05:27:18:ad:c0:45:ad:
         94:dc:3d:fd:e3:b6:0a:85:67:7d:1c:4e:88:45:7c:fa:35:0f:
         f6:fb:a7:54:b5:c9:6f:31:56:02:e0:a1:39:65:6b:3e:8d:30:
         e0:5c:0f:fb:23:78:37:dd:08:44:2d:30:93:b1:0a:45:eb:e7:
         6a:e8:e8:ac:b5:7d:ac:87:08:3f:5c:5c:59:fd:1e:37:2b:7c:
         95:d5:6f:e0:c6:4a:b2:f5:ae:3a:46:ca:a3:53:de:24:c3:a2:
         24:2e:81:97:8e:9a:18:4a:6c:6c:33:19:7d:77:38:a1:94:e7:
         81:34:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org