Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
File:                     2B17DBBAA89411EDA0E8B67CF1222468.roa (raw, json)
Hash identifier:          yAp8m8zLPY56vWdtL+9bgGrW4BeWQUtKiTRwU/90WiY=
Subject key identifier:   88:B2:93:31:68:12:F4:AD:F5:03:8E:93:6E:52:3E:DA:0D:D0:A3:1E
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       099B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
Signing time:             Thu 09 Feb 2023 16:09:45 +0000
ROA not before:           Thu 09 Feb 2023 16:09:41 +0000
ROA not after:            Fri 09 Feb 2024 16:09:41 +0000
asID:                     207990
IP address blocks:        161.123.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  9 16:09:41 2023 GMT
            Not After : Feb  9 16:09:41 2024 GMT
        Subject: CN=63e51ac9-92c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:24:e8:e7:20:39:28:9e:f9:3f:97:f7:2b:
                    17:49:76:67:f8:c3:9e:76:a1:97:5f:8c:54:fc:3b:
                    ca:cc:fb:99:2d:5e:71:e2:fe:ba:7f:9f:31:09:5f:
                    bf:4a:bf:70:6c:9f:f7:9c:df:e7:84:48:8f:eb:33:
                    c8:0a:2c:79:14:ed:38:9e:c2:db:17:96:38:f2:72:
                    6f:8a:d3:6d:e2:df:9f:a0:41:9d:e7:05:2d:ae:8a:
                    b4:fc:bb:33:d5:43:26:b6:0d:25:ac:13:4a:0d:9b:
                    38:93:9a:1a:64:19:db:49:e5:70:9a:94:b6:99:53:
                    fd:12:2c:17:72:47:74:65:06:00:fd:ff:9c:df:24:
                    24:8a:a2:2e:86:45:12:6e:72:30:c4:c8:76:46:a5:
                    2f:30:97:f3:70:e2:8c:84:04:23:29:f9:38:07:51:
                    71:b6:24:40:d3:4b:31:c9:12:c6:04:3e:11:a3:c1:
                    35:cf:1a:46:16:52:10:eb:e5:21:31:d0:b8:c6:ee:
                    ff:08:54:16:6d:95:bb:53:25:4b:e9:12:f5:c6:34:
                    71:3c:af:ec:cd:ca:86:80:db:15:ef:1a:4b:7e:6c:
                    f2:ba:77:f3:d5:73:95:55:f3:f5:a5:2f:a2:26:f2:
                    f1:e6:d3:d6:81:dc:0d:1c:a6:bf:06:fe:2e:fe:70:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:93:31:68:12:F4:AD:F5:03:8E:93:6E:52:3E:DA:0D:D0:A3:1E
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:2f:a3:6c:45:81:3f:78:0d:89:3e:8b:63:cb:7a:20:ed:
         dd:aa:47:55:1b:12:e7:7e:43:df:25:af:c1:2e:e0:05:bd:61:
         77:3a:bb:83:20:99:60:a2:ac:ce:04:e9:59:f1:3e:92:2b:44:
         77:93:ab:82:16:b3:e4:2f:4b:c4:7c:5a:f3:fb:91:60:61:6c:
         ef:20:c5:c6:74:9e:0c:14:da:55:95:54:22:ed:9c:7f:64:80:
         51:e2:ff:7c:0e:49:4a:88:29:b4:9f:aa:a7:80:68:a2:5c:ce:
         70:ac:c9:d4:38:fc:06:22:f7:55:29:f9:cb:1a:92:c6:6b:7a:
         2c:cd:ab:38:c9:cb:8a:8e:e6:90:07:2c:c2:2c:da:3f:ae:d9:
         72:ca:8f:74:a5:95:8c:37:ae:fb:2f:10:82:d2:9e:07:71:be:
         e0:28:d8:a1:06:e8:19:ff:ff:ee:d9:7d:c4:52:d9:07:63:9a:
         e0:2e:39:fb:3c:97:fc:64:2f:ee:4e:2c:4f:65:4c:aa:69:2a:
         2e:31:2a:8e:01:08:c9:e9:c7:01:5e:27:59:95:97:4d:58:56:
         70:39:71:af:c3:ea:a3:7b:7e:25:c6:8c:7e:75:9c:4c:e0:31:
         af:1d:b4:3b:00:1b:2c:79:2c:ae:de:fb:2d:69:f5:60:7f:2f:
         fa:d7:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org