Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24A00F60B00F11EC82217B755A40D577.roa
File:                     24A00F60B00F11EC82217B755A40D577.roa (raw, json)
Hash identifier:          ajZ+QNbWO9phZu2zovdyDUpKYV1JjaRMDSWeSYq8IQY=
Subject key identifier:   F4:03:70:97:E2:AD:27:48:5C:13:DF:71:9D:9A:B0:94:31:10:B5:CE
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0633
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24A00F60B00F11EC82217B755A40D577.roa
Signing time:             Wed 30 Mar 2022 09:52:43 +0000
ROA not before:           Wed 30 Mar 2022 09:52:39 +0000
ROA not after:            Thu 30 Mar 2023 09:52:39 +0000
asID:                     400377
IP address blocks:        161.123.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 30 09:52:39 2022 GMT
            Not After : Mar 30 09:52:39 2023 GMT
        Subject: CN=6244286b-479e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:06:cf:4a:20:07:d7:56:71:b3:2a:b2:7a:
                    4d:22:c2:c6:ce:b1:1d:ad:c0:16:09:9e:f2:88:25:
                    00:33:1d:e6:b9:50:e6:6a:a8:33:43:e7:b7:45:07:
                    08:b1:10:fd:8a:3c:60:6d:a5:eb:f4:a3:1c:7e:83:
                    5e:64:c9:71:cf:e9:01:f6:d8:7c:6a:59:3f:68:df:
                    e9:e1:38:24:a4:4d:82:09:ac:ca:a2:9e:6f:5c:39:
                    92:13:d2:5b:0c:1d:74:8b:43:ef:c5:6a:94:18:31:
                    19:76:b6:66:e7:55:4d:16:82:e9:b6:51:03:3a:7f:
                    59:91:6c:5b:a0:f9:06:2c:81:01:ae:5b:73:6b:ed:
                    cf:b3:70:48:13:58:d6:db:ff:bc:1a:4d:c3:95:85:
                    69:eb:a5:d0:31:0e:2f:31:f7:12:ae:22:09:ec:e2:
                    aa:7b:94:2e:c2:4d:d1:a9:13:c5:f8:15:87:ff:7b:
                    89:64:dd:f6:50:e2:58:6d:ee:07:2c:60:5d:60:a9:
                    79:7e:84:37:ee:b3:88:52:1a:9d:c9:80:99:b3:f5:
                    dc:ce:77:44:58:11:0e:87:fb:4c:75:3e:5c:e3:59:
                    4d:2e:66:31:dd:be:8a:f7:33:ab:fe:46:34:d7:af:
                    3d:c6:da:e1:76:44:66:e1:7f:32:f9:a7:92:50:90:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:70:97:E2:AD:27:48:5C:13:DF:71:9D:9A:B0:94:31:10:B5:CE
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24A00F60B00F11EC82217B755A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:d7:4b:64:1d:a3:64:55:8d:2b:bf:cb:78:ac:98:cc:7e:
         b9:79:1d:8e:5a:3f:94:1b:5b:ed:08:3c:28:06:fd:d3:38:1b:
         1f:80:46:02:a5:72:2c:84:46:1e:0f:fc:22:59:aa:bf:cc:04:
         bd:12:78:90:35:f7:1b:f1:ae:af:80:5d:1f:60:86:d0:2e:d5:
         d3:60:ac:2c:6f:68:e1:6d:b6:54:00:5b:aa:38:e8:77:1f:80:
         76:73:c5:d2:7e:49:77:67:51:15:39:c9:ba:91:26:1c:8d:3b:
         c4:de:e7:28:46:66:02:8c:f1:72:0f:0a:e7:49:84:47:ea:3f:
         a8:e4:87:67:ef:75:f0:8f:fa:f9:e4:fa:2f:08:3f:cb:fb:6c:
         d2:4e:3d:98:6b:a9:f1:31:28:2b:5b:b7:ae:9b:12:09:69:2b:
         02:8e:b0:81:e6:26:e7:25:ee:cf:24:61:93:29:49:d0:5a:6f:
         cd:b0:04:3a:85:e8:7a:d0:58:33:09:0b:96:8b:fd:f8:ca:28:
         c2:a7:7f:0b:7a:01:51:40:1d:04:71:99:b9:c0:eb:f4:be:9a:
         28:3e:48:38:24:06:c8:b9:1f:85:95:85:54:15:5f:e6:28:31:
         c5:2a:af:4e:d3:6f:bc:74:e3:9a:27:57:19:c7:72:a1:05:28:
         24:89:ea:b5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAzMzAwOTUyMzlaFw0yMzAzMzAwOTUyMzlaMBgxFjAU
BgNVBAMMDTYyNDQyODZiLTQ3OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7uwbPSiAH11Zxsyqyek0iwsbOsR2twBYJnvKIJQAzHea5UOZqqDND57dF
BwixEP2KPGBtpev0oxx+g15kyXHP6QH22HxqWT9o3+nhOCSkTYIJrMqinm9cOZIT
0lsMHXSLQ+/FapQYMRl2tmbnVU0Wgum2UQM6f1mRbFug+QYsgQGuW3Nr7c+zcEgT
WNbb/7waTcOVhWnrpdAxDi8x9xKuIgns4qp7lC7CTdGpE8X4FYf/e4lk3fZQ4lht
7gcsYF1gqXl+hDfus4hSGp3JgJmz9dzOd0RYEQ6H+0x1PlzjWU0uZjHdvor3M6v+
RjTXrz3G2uF2RGbhfzL5p5JQkCofAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9ANw
l+KtJ0hcE99xnZqwlDEQtc4wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzI0QTAwRjYwQjAwRjExRUM4MjIxN0I3NTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe9QwDQYJKoZIhvcNAQELBQAD
ggEBAAnu10tkHaNkVY0rv8t4rJjMfrl5HY5aP5QbW+0IPCgG/dM4Gx+ARgKlciyE
Rh4P/CJZqr/MBL0SeJA19xvxrq+AXR9ghtAu1dNgrCxvaOFttlQAW6o46HcfgHZz
xdJ+SXdnURU5ybqRJhyNO8Te5yhGZgKM8XIPCudJhEfqP6jkh2fvdfCP+vnk+i8I
P8v7bNJOPZhrqfExKCtbt66bEglpKwKOsIHmJucl7s8kYZMpSdBab82wBDqF6HrQ
WDMJC5aL/fjKKMKnfwt6AVFAHQRxmbnA6/S+mig+SDgkBsi5H4WVhVQVX+YoMcUq
r07Tb7x045onVxnHcqEFKCSJ6rU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org