Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
File:                     822785181FE511EEBF276F534AD9E6FC.roa (raw, json)
Hash identifier:          E9emZinBwA6kngi3yXzezeivUCj12cV2m7ZXBGSwZJ4=
Subject key identifier:   9D:0C:E0:CC:AB:59:D9:A8:1B:0F:34:64:22:F1:B9:0F:DC:74:2E:01
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0B47
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
Signing time:             Tue 11 Jul 2023 12:21:49 +0000
ROA not before:           Tue 11 Jul 2023 12:21:45 +0000
ROA not after:            Thu 11 Jul 2024 12:21:45 +0000
asID:                     133499
IP address blocks:        161.123.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jul 11 12:21:45 2023 GMT
            Not After : Jul 11 12:21:45 2024 GMT
        Subject: CN=64ad495d-b1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:1b:e6:23:0b:00:ee:3d:2f:7f:5a:1e:e6:
                    15:84:2b:76:0f:c5:f7:81:45:15:b0:6a:87:f8:66:
                    0f:f2:46:4c:73:ba:78:b9:2e:35:a7:74:87:bd:cf:
                    85:f1:57:bb:f3:63:d8:ef:e8:9b:50:85:75:dd:38:
                    47:97:e8:91:0a:8b:3c:aa:a8:cc:97:57:3e:d8:cd:
                    12:ed:0d:44:b8:31:05:4c:7d:84:9a:b4:e2:9a:70:
                    a1:c8:f9:9f:9a:3b:93:79:7a:4c:d2:f3:6e:81:48:
                    52:94:c1:b5:35:79:b7:a8:52:22:03:08:04:9f:85:
                    69:7e:1b:88:71:a4:f2:f6:3b:ee:06:52:11:85:cb:
                    82:2a:4a:e9:44:f5:5d:81:ea:bb:68:29:d4:cf:07:
                    27:80:dd:0b:33:6b:09:e4:7c:fb:fc:f8:08:02:bb:
                    b8:b0:65:7a:61:01:5d:dc:09:d6:57:15:e6:ad:cb:
                    5f:5a:d9:cb:ac:5e:b3:4c:00:a8:04:64:6d:b5:fb:
                    8f:48:83:fc:df:fe:35:73:d6:32:6d:4c:10:a7:db:
                    d4:1d:b7:48:29:c7:e9:8c:16:b4:c4:59:ce:ca:e1:
                    3a:b4:84:4f:72:b7:f1:ad:b4:1f:77:91:80:b3:d8:
                    8e:9f:86:8e:3f:7b:1d:e2:33:b7:ed:21:e0:ff:0f:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0C:E0:CC:AB:59:D9:A8:1B:0F:34:64:22:F1:B9:0F:DC:74:2E:01
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:b2:f0:4d:79:6d:b6:22:b1:82:80:4f:13:26:0b:4e:87:
         9c:34:22:c3:c7:80:34:f6:80:aa:67:d3:77:04:53:15:32:3a:
         8b:6f:3f:a4:31:7b:78:4a:59:88:43:9f:be:dc:e2:64:93:b6:
         8f:a7:cc:08:f6:b8:aa:ff:cd:11:5d:2d:20:54:81:af:20:fe:
         12:68:f8:1a:b0:1e:c4:b7:a4:98:db:4d:b6:2a:43:8e:40:2c:
         5b:50:32:69:e7:f7:fa:fe:bb:cc:66:50:ee:c2:75:88:88:ec:
         ec:92:38:e3:67:75:63:ed:18:a4:ef:6d:b9:f4:dc:0b:ec:6d:
         b6:fe:64:b5:a7:d5:6e:fb:07:4a:31:2f:d7:00:8c:53:42:ad:
         ed:88:0d:05:bf:c8:4e:90:b5:5f:45:66:25:4a:f4:90:f6:03:
         f5:db:60:7d:8a:a4:4a:14:2c:a1:8e:68:1a:cf:5c:58:bd:6b:
         8a:33:af:87:3e:4d:44:cc:15:8b:ec:76:1b:55:5b:cd:2a:75:
         a0:ff:b5:2c:cb:d8:60:e9:9a:61:65:63:80:62:0d:c0:cd:bf:
         80:15:ff:8d:bf:e0:ff:41:3b:0d:62:f2:11:ef:4a:6b:d1:d7:
         1e:4c:0a:74:17:a6:50:8e:35:73:f5:69:30:09:4f:0f:d8:1b:
         2a:3e:d2:6b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA3MTExMjIxNDVaFw0yNDA3MTExMjIxNDVaMBgxFjAU
BgNVBAMTDTY0YWQ0OTVkLWIxZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6qhvmIwsA7j0vf1oe5hWEK3YPxfeBRRWwaof4Zg/yRkxzuni5LjWndIe9
z4XxV7vzY9jv6JtQhXXdOEeX6JEKizyqqMyXVz7YzRLtDUS4MQVMfYSatOKacKHI
+Z+aO5N5ekzS826BSFKUwbU1ebeoUiIDCASfhWl+G4hxpPL2O+4GUhGFy4IqSulE
9V2B6rtoKdTPByeA3QszawnkfPv8+AgCu7iwZXphAV3cCdZXFeaty19a2cusXrNM
AKgEZG21+49Ig/zf/jVz1jJtTBCn29Qdt0gpx+mMFrTEWc7K4Tq0hE9yt/GttB93
kYCz2I6fho4/ex3iM7ftIeD/D2lJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUnQzg
zKtZ2agbDzRkIvG5D9x0LgEwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzgyMjc4NTE4MUZFNTExRUVCRjI3NkY1MzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe14wDQYJKoZIhvcNAQELBQAD
ggEBAFwbsvBNeW22IrGCgE8TJgtOh5w0IsPHgDT2gKpn03cEUxUyOotvP6Qxe3hK
WYhDn77c4mSTto+nzAj2uKr/zRFdLSBUga8g/hJo+BqwHsS3pJjbTbYqQ45ALFtQ
Mmnn9/r+u8xmUO7CdYiI7OySOONndWPtGKTvbbn03Avsbbb+ZLWn1W77B0oxL9cA
jFNCre2IDQW/yE6QtV9FZiVK9JD2A/XbYH2KpEoULKGOaBrPXFi9a4ozr4c+TUTM
FYvsdhtVW80qdaD/tSzL2GDpmmFlY4BiDcDNv4AV/42/4P9BOw1i8hHvSmvR1x5M
CnQXplCONXP1aTAJTw/YGyo+0ms=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org