Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A312FAB02FB711EDADDB4E7EF1222468.roa
File:                     A312FAB02FB711EDADDB4E7EF1222468.roa (raw, json)
Hash identifier:          PSbWlZAZIwMJcySk1HDy4eoJ/DLkevER7zWC1EniqTE=
Subject key identifier:   9B:B4:F6:D4:7F:59:63:24:32:14:C9:91:5A:15:BA:8A:5A:15:8E:AD
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0810
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A312FAB02FB711EDADDB4E7EF1222468.roa
Signing time:             Thu 08 Sep 2022 20:48:48 +0000
ROA not before:           Thu 08 Sep 2022 20:48:44 +0000
ROA not after:            Fri 08 Sep 2023 20:48:44 +0000
asID:                     205431
IP address blocks:        161.123.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep  8 20:48:44 2022 GMT
            Not After : Sep  8 20:48:44 2023 GMT
        Subject: CN=631a5530-ec34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:3a:e9:0e:a7:5a:d3:8e:38:9d:f1:a8:9b:
                    66:f4:a8:6c:9d:8e:2b:10:8a:8a:85:c0:69:ad:4b:
                    17:0f:6a:4c:0e:0f:f5:02:19:30:d2:07:2b:26:75:
                    28:7c:8a:64:ec:ad:a6:7a:f5:a1:d1:f9:34:e5:91:
                    49:e9:aa:49:27:4b:d4:09:b2:9d:0a:a2:68:b0:d0:
                    57:47:a2:61:59:c0:b0:de:39:44:cf:4e:9e:e0:34:
                    61:ac:b9:1f:dd:89:ac:83:01:31:f6:ea:a7:3b:e7:
                    a8:ce:9d:30:75:4f:7a:42:ba:d9:0e:18:0b:16:3a:
                    73:83:a7:1a:56:3b:fe:63:b5:e6:d1:88:c1:f3:d5:
                    cc:e8:53:79:2e:a6:18:0d:59:8c:41:d2:b2:04:22:
                    44:c1:7f:b4:d3:d1:47:c9:77:81:d9:14:9c:94:fb:
                    6e:3f:fd:32:fe:f8:1e:9f:78:8d:c9:64:09:d0:05:
                    43:76:bc:ef:5e:61:fe:e1:f1:b7:cd:7c:b9:53:87:
                    d5:8c:6f:cd:bc:de:ed:09:40:cc:c4:95:8a:ff:0f:
                    43:7a:c5:42:53:5d:4a:39:b2:23:2d:e4:12:fb:ae:
                    f1:6f:b5:97:1c:ce:60:93:10:a2:d9:68:89:8b:1e:
                    0f:ed:2a:16:a4:a6:3c:b2:f7:eb:6d:ff:e6:d1:da:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:F6:D4:7F:59:63:24:32:14:C9:91:5A:15:BA:8A:5A:15:8E:AD
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A312FAB02FB711EDADDB4E7EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:25:f1:6f:84:75:ba:4e:b6:23:c7:db:00:31:d7:82:13:
         4c:31:64:91:98:59:75:fa:97:99:3b:fa:f7:70:0e:cd:26:e3:
         8e:cc:48:8e:7b:34:6f:83:ed:45:47:cf:32:82:bc:59:26:d7:
         ca:ff:cc:72:78:24:95:a3:82:0e:ec:a4:75:3e:6b:75:70:59:
         74:71:92:be:f2:be:fa:9d:bb:93:47:de:14:a1:22:18:77:3e:
         85:e3:69:00:d9:d3:27:55:4e:05:ee:06:61:7e:b2:23:3d:97:
         35:46:9f:ed:be:65:d8:ac:c1:16:c6:23:12:0e:06:79:b5:ba:
         fb:41:75:92:c2:36:54:04:45:d5:4d:81:10:f5:4c:a5:ee:be:
         9b:32:ee:d8:7e:cd:2c:24:4d:18:07:bf:1f:42:28:1f:32:6c:
         f1:75:3b:06:72:f6:d9:7a:66:57:4d:f3:ed:82:1d:5f:c7:b9:
         51:0e:17:4c:6a:9f:57:b0:7b:01:da:fa:df:71:bf:07:71:3e:
         d2:d1:f0:7a:d3:d2:fd:14:62:87:73:b0:76:58:67:51:04:a3:
         70:7e:98:1a:a8:92:ab:fe:7b:e9:f3:56:84:a4:00:b8:7b:7d:
         86:61:b5:1d:0e:79:6b:b9:32:88:49:67:0f:0e:9d:50:1e:cd:
         a5:dc:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org