Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/549EAD1CB72A11EC930BB2CD5A40D577.roa
File:                     549EAD1CB72A11EC930BB2CD5A40D577.roa (raw, json)
Hash identifier:          yyAFae3HxuBbxIjSwJbCOF6xeG5kcQZHhcyHBdQzjhA=
Subject key identifier:   28:4B:6D:EA:F9:B8:06:7F:C7:EB:D4:63:AF:6A:DA:A7:2C:A9:33:53
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       064F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/549EAD1CB72A11EC930BB2CD5A40D577.roa
Signing time:             Fri 08 Apr 2022 10:54:58 +0000
ROA not before:           Fri 08 Apr 2022 10:54:54 +0000
ROA not after:            Wed 08 Jun 2022 10:54:54 +0000
asID:                     400377
IP address blocks:        161.123.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Apr  8 10:54:54 2022 GMT
            Not After : Jun  8 10:54:54 2022 GMT
        Subject: CN=62501482-da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:5f:7c:7d:3f:cb:65:8e:84:7d:f5:27:86:
                    08:57:20:ec:6d:cc:02:4c:33:d8:9a:43:c9:b1:ba:
                    08:7d:14:b9:dd:46:24:65:d2:2c:5d:4e:4c:5f:93:
                    87:df:83:35:da:0c:84:c6:f0:9d:4e:56:ed:d2:49:
                    a2:e1:72:60:bf:a4:3a:12:f0:51:ed:a8:05:40:60:
                    bb:b8:9b:5a:c8:78:dc:e6:cc:d3:27:fb:16:04:f7:
                    c7:02:30:b6:f2:36:b5:48:a0:09:df:47:84:fb:52:
                    24:23:25:f8:ab:fa:ae:a2:4a:5c:30:1f:30:4e:96:
                    5a:99:ab:3e:66:e6:69:30:44:9d:d6:d3:d9:21:64:
                    2e:ca:97:b7:71:ee:24:22:16:8e:ee:4c:f1:b2:41:
                    42:55:ff:99:6e:2c:fa:5f:66:eb:d2:f0:30:b8:45:
                    8a:7c:ed:53:13:56:1b:a5:76:6f:44:05:cb:e3:08:
                    a3:03:b9:ec:1b:2a:a1:18:c5:70:1f:27:e0:03:4b:
                    e8:6f:b8:ab:d4:cc:61:5a:fb:c2:7e:e3:2b:ca:8c:
                    d4:85:e1:01:cf:c4:66:c3:55:fd:34:d7:80:23:90:
                    a5:51:ec:22:b1:70:b3:e0:f2:28:b3:69:4a:05:1d:
                    5f:a5:80:3f:d0:c5:83:fd:13:c4:cb:68:3f:9b:08:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:6D:EA:F9:B8:06:7F:C7:EB:D4:63:AF:6A:DA:A7:2C:A9:33:53
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/549EAD1CB72A11EC930BB2CD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:29:c7:11:51:f9:b9:0b:0b:69:bf:51:66:11:61:76:eb:f2:
         2e:e0:b7:44:f2:2a:c9:7d:16:f2:ee:7d:40:ca:a9:4a:1b:bd:
         64:37:a1:bb:06:9c:27:98:22:10:95:2c:ea:69:d0:ff:aa:06:
         22:26:d4:0a:05:d2:7c:d4:a3:4b:7a:41:a0:7c:d5:f9:18:c1:
         3e:00:3d:69:46:9f:24:02:48:f4:12:f8:47:f9:58:df:d5:76:
         b5:69:9e:39:c1:48:ba:37:c0:63:90:79:32:bb:0b:17:86:ae:
         52:e7:99:00:27:22:35:22:4e:fd:10:14:7e:ed:91:56:63:d5:
         65:a6:e4:4d:e4:e2:14:0d:46:bf:1c:4b:7e:45:b2:a2:9e:c8:
         b8:14:b8:6c:bc:db:bb:10:9e:b3:a8:18:35:ae:58:25:49:f9:
         8d:93:4b:fc:5c:de:38:71:75:57:7b:39:56:fb:b2:d8:d0:15:
         62:18:0b:93:9f:10:be:e9:95:4b:7b:a4:83:8d:51:21:54:a9:
         d9:d9:d7:9e:f4:92:5b:ac:34:e5:b8:67:11:2b:d9:17:df:1a:
         a0:e9:72:b2:e2:b8:1c:82:00:b8:04:91:aa:e9:37:0a:ec:7b:
         55:02:e8:99:94:a1:88:4e:7d:b5:be:2f:09:e2:b7:15:6e:f7:
         53:c5:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org