Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/80808C34197C11ED95FB02ABF1222468.roa
File:                     80808C34197C11ED95FB02ABF1222468.roa (raw, json)
Hash identifier:          bCHUcMjjKYwKWjRJlnXRb32zPqznqH8pReY+tpSZ47Y=
Subject key identifier:   E2:C4:B0:BF:3C:66:54:11:27:F5:2C:33:1B:31:01:73:7E:CC:B6:C4
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       07D5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/80808C34197C11ED95FB02ABF1222468.roa
Signing time:             Thu 11 Aug 2022 13:50:04 +0000
ROA not before:           Thu 11 Aug 2022 13:49:58 +0000
ROA not after:            Sun 11 Dec 2022 13:49:58 +0000
asID:                     205431
IP address blocks:        161.123.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 11 13:49:58 2022 GMT
            Not After : Dec 11 13:49:58 2022 GMT
        Subject: CN=62f5090c-a8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:fd:c3:d6:0e:9e:ad:11:e3:4e:c5:ad:42:
                    ac:48:6f:5e:13:3a:c7:34:d6:83:a8:d6:d2:8a:7b:
                    1a:71:2a:a1:25:e5:65:f0:4b:fc:84:a3:26:7b:61:
                    76:89:bb:8f:51:1e:42:ef:d7:b9:82:41:fe:aa:75:
                    57:9e:47:fa:dd:e9:e5:6f:f8:8e:3a:08:b8:89:ab:
                    b6:7b:fd:01:3f:ef:76:4e:0b:7b:e0:de:c0:d8:61:
                    86:29:01:46:ee:32:e9:8e:bf:5e:ab:5b:44:6b:69:
                    74:e4:61:2e:cd:66:7a:52:23:60:f2:f0:a6:e2:7e:
                    35:ca:4d:21:54:73:d0:b4:45:d0:b4:15:90:10:b0:
                    63:a0:9a:ef:59:32:98:e2:46:c0:41:e7:03:09:ad:
                    c9:81:8f:39:fa:e5:36:18:6e:f7:11:f8:d8:83:4f:
                    1b:f5:12:6b:00:cd:f8:fe:f0:76:ba:91:8b:97:ce:
                    b4:99:4f:83:a4:33:89:4a:03:6a:43:5f:52:9a:11:
                    43:60:c2:ee:9a:f7:a2:08:b0:2b:f2:55:9c:78:74:
                    81:45:17:db:fe:e7:ca:34:2b:32:4f:20:e5:fe:4d:
                    10:a7:9f:ed:dd:b4:7a:b0:4e:37:67:9c:aa:a6:c5:
                    69:4c:b7:b3:2d:bc:e2:fd:38:67:7c:04:01:9e:ef:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:B0:BF:3C:66:54:11:27:F5:2C:33:1B:31:01:73:7E:CC:B6:C4
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/80808C34197C11ED95FB02ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:63:e4:83:ec:9b:05:fb:5a:1e:36:bd:4e:15:ee:be:70:32:
         fa:59:a2:a8:c2:ee:25:40:2e:3f:6b:4a:78:f4:7e:b0:ee:7a:
         ea:1c:f2:48:95:6b:6b:95:93:f0:96:53:c6:dc:86:12:34:63:
         21:7f:7a:85:d7:5a:9e:9e:47:5f:5a:7b:92:23:11:92:11:54:
         71:d5:08:cf:89:14:fb:dd:dd:3e:f8:e3:59:25:74:3e:80:fe:
         b1:96:40:b7:98:c5:53:67:3b:9c:64:df:50:82:20:d2:c3:5d:
         78:d7:b1:82:be:7a:38:c1:ea:fd:7a:34:e0:07:80:55:55:e3:
         69:08:19:70:4f:12:1e:b2:59:ed:5e:80:e4:cb:f3:8c:30:ff:
         5b:66:99:53:f6:ea:32:e0:f8:dc:bd:c6:7e:0d:5a:bf:7c:64:
         ca:f6:3c:b0:49:62:2c:9e:e7:94:31:0a:cc:a0:99:bc:2e:7b:
         d1:88:b8:c4:ef:b8:ca:1e:ff:97:fc:a1:a0:bc:15:5a:71:7a:
         94:d8:b5:0a:1d:e1:1e:63:ca:e6:78:c9:6c:5f:da:3a:d6:a2:
         44:6b:64:ec:a8:62:96:b7:89:a2:9e:7f:1d:be:4e:de:c9:14:
         ea:90:2d:a3:3a:a1:69:54:12:ff:53:d8:3e:52:d1:d6:79:2e:
         20:55:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org