Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51706A3C7F6111EC92FB67765A40D577.roa
File:                     51706A3C7F6111EC92FB67765A40D577.roa (raw, json)
Hash identifier:          TNfVRfo9ezySmvHUr9iDsrwerYRpwLTb8B7N+ocKlSU=
Subject key identifier:   97:77:E6:46:9D:76:DF:55:9C:48:57:43:D3:F8:BE:ED:FF:3B:A0:24
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       054D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51706A3C7F6111EC92FB67765A40D577.roa
Signing time:             Thu 27 Jan 2022 11:07:30 +0000
ROA not before:           Thu 27 Jan 2022 11:07:25 +0000
ROA not after:            Wed 25 Jan 2023 11:07:25 +0000
asID:                     136744
IP address blocks:        161.123.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 27 11:07:25 2022 GMT
            Not After : Jan 25 11:07:25 2023 GMT
        Subject: CN=61f27cf2-9244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:4d:70:e0:fa:c3:20:3a:75:7b:10:57:23:
                    dc:b2:c1:46:14:e4:a2:06:28:f8:de:89:8a:a9:73:
                    26:50:75:31:27:f4:f1:cf:f7:d9:2c:f4:8f:83:57:
                    09:41:fc:9c:ea:1c:44:1f:63:73:2c:59:a8:72:1f:
                    74:22:96:07:fa:48:93:02:9e:b0:a5:0b:53:b6:77:
                    40:25:52:62:03:eb:7a:6a:d3:19:29:af:2e:f7:57:
                    15:e5:93:f8:47:5e:8f:38:db:6a:a3:9a:da:20:3b:
                    4d:3d:9a:53:a8:7b:f7:6d:f2:9d:85:bf:69:d1:31:
                    33:a0:76:f6:fe:e4:a6:9a:83:b9:cd:d9:31:de:b4:
                    8f:c2:f0:b1:0c:94:86:36:7a:3c:17:57:7b:f3:3d:
                    fa:70:e9:aa:93:a2:b1:6b:99:c2:7f:fd:58:02:35:
                    72:7e:31:7b:46:9c:41:80:f2:06:1b:b5:27:6c:df:
                    6d:f4:31:28:86:dc:a2:52:17:f1:ea:f9:25:55:c9:
                    75:84:fa:34:8a:76:96:eb:67:67:fc:0b:b8:a6:c2:
                    2d:9f:65:31:73:8b:8c:18:16:7a:9e:ed:13:5d:84:
                    64:ed:7e:60:10:f5:2f:2b:4d:2b:36:a6:db:56:de:
                    d8:dd:b5:3d:4c:be:54:87:c9:05:f0:df:06:20:47:
                    1e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:E6:46:9D:76:DF:55:9C:48:57:43:D3:F8:BE:ED:FF:3B:A0:24
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51706A3C7F6111EC92FB67765A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:76:63:51:72:24:41:39:44:9a:27:08:29:b2:eb:ae:c5:
         76:7b:df:2f:70:4f:e4:4c:f3:5e:9d:f1:a8:30:9a:6c:c7:19:
         19:f9:e1:ba:0f:6c:d4:ea:2b:2c:ca:a1:be:fb:f4:e2:2d:1f:
         d0:43:88:aa:25:4b:7e:44:58:f8:44:f6:2e:9e:f9:b4:9d:cf:
         ea:87:a3:70:1d:20:57:cb:d3:c6:44:97:e1:40:0d:d3:6c:c7:
         25:0f:f0:73:16:06:40:39:eb:41:e2:b0:31:a5:2e:ba:53:47:
         13:2f:85:9d:57:51:9c:d7:ac:5d:9f:90:00:14:68:31:67:71:
         f6:ce:68:2b:b0:01:96:ca:43:d9:ac:a9:88:96:fd:ba:8a:39:
         ab:ef:42:fa:f8:eb:42:d3:e3:a9:20:d9:80:22:4b:fa:82:eb:
         f4:87:9e:a7:47:f0:4f:68:4c:df:1e:80:15:8d:ca:d4:13:73:
         4c:e2:f0:d0:b4:d6:10:41:ea:b0:06:1c:e4:02:78:97:0d:f7:
         4d:09:7f:73:4a:a0:e9:4e:c6:f9:e5:30:7c:21:39:df:63:46:
         32:02:d6:96:22:de:a4:a6:e8:b2:a5:db:7b:6a:e8:a7:3a:69:
         09:3c:ff:c0:61:85:9f:61:f7:86:41:25:20:b6:e0:b7:3b:9c:
         a4:25:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org