Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE814BDE3BD111EC93D6C832D8A014CE.roa
File:                     AE814BDE3BD111EC93D6C832D8A014CE.roa (raw, json)
Hash identifier:          HFJblH+JyTCWCYwiWaUbgiaONZkBMfLp4xHJlv9ZV7s=
Subject key identifier:   DC:91:79:C2:E0:1E:F3:95:A5:4F:F7:2E:27:1D:F2:66:46:82:67:13
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       021A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE814BDE3BD111EC93D6C832D8A014CE.roa
Signing time:             Tue 02 Nov 2021 11:40:30 +0000
ROA not before:           Tue 02 Nov 2021 11:40:27 +0000
ROA not after:            Wed 02 Nov 2022 11:40:27 +0000
asID:                     327790
IP address blocks:        161.123.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Nov  2 11:40:27 2021 GMT
            Not After : Nov  2 11:40:27 2022 GMT
        Subject: CN=618123ae-0ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1c:b2:ab:0f:5e:a6:ae:57:d8:3d:d9:a8:85:
                    d9:cd:e5:9f:13:ac:22:35:dd:9f:c3:50:3f:59:ca:
                    54:96:4c:bf:42:1a:0d:ae:8e:bd:31:f5:ea:eb:d0:
                    3a:28:7b:bd:b3:f7:cc:54:95:a7:e0:23:3e:63:8c:
                    c4:d4:61:df:ef:b8:88:7b:f8:12:34:29:87:f1:90:
                    c7:99:a9:51:45:2e:6e:1d:da:a4:b0:c4:5c:72:1c:
                    4c:47:4f:27:a3:29:b8:12:61:44:9c:99:67:83:be:
                    38:54:4f:ae:9f:16:09:97:98:4e:46:22:8e:44:6a:
                    20:25:ff:0d:a8:b1:53:2f:4c:5e:e4:0d:91:93:b7:
                    7a:86:d5:4c:09:87:61:f7:e7:0b:2b:e0:3d:e2:ea:
                    8a:17:bc:5f:a1:7c:93:5c:68:a9:86:06:44:5f:bb:
                    38:07:dc:eb:75:60:40:45:65:2e:82:23:4e:63:20:
                    c4:13:59:67:3d:42:0b:21:71:c2:e8:7a:f8:a1:ec:
                    b9:53:2b:23:3d:f9:bb:a7:e0:cf:9c:71:11:27:28:
                    c6:bd:c9:19:02:d9:70:6a:ad:f7:db:f9:0f:23:e6:
                    65:56:13:6d:91:98:55:74:6a:9f:64:6d:f1:62:c3:
                    de:c9:98:8f:f8:66:f8:b7:e9:c4:71:f4:c0:0f:1c:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:79:C2:E0:1E:F3:95:A5:4F:F7:2E:27:1D:F2:66:46:82:67:13
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE814BDE3BD111EC93D6C832D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:b7:44:4b:f8:ca:7d:6b:2c:91:7b:95:8a:16:14:0c:29:
         40:0b:79:6d:26:19:6a:7f:16:cc:42:ac:5e:7b:5c:8a:93:8e:
         dc:be:03:d2:e2:9a:15:e4:b9:c3:48:bf:68:83:47:0d:23:11:
         17:6e:3d:66:23:3a:9b:f4:92:94:89:de:ef:d5:45:28:d5:e2:
         c9:35:34:49:af:89:3a:08:57:87:6a:f5:b6:83:6d:3d:0a:18:
         16:20:9a:8c:61:60:5f:78:27:58:1d:5e:0d:4f:6c:37:ab:10:
         4c:ea:cc:bf:5e:11:5f:a2:cc:c8:16:85:05:a9:36:59:8b:76:
         d8:b8:0b:57:40:79:9a:41:f3:67:8b:34:bd:c2:3b:6e:68:dd:
         74:f1:21:56:78:b3:e1:5a:d5:87:c7:e5:9a:65:1b:4f:a6:97:
         f1:22:a5:3c:7a:5e:28:ff:54:8b:57:d3:24:23:b2:a2:fa:e3:
         c3:f0:ef:bc:49:39:96:b9:35:b0:e2:7f:86:03:23:67:fc:05:
         50:82:22:4d:65:b4:e3:01:24:63:52:11:9a:70:06:76:87:20:
         12:e5:e8:06:13:69:a9:a8:86:4b:55:8a:85:55:08:fc:a5:81:
         03:3a:9c:10:79:a8:1f:6e:19:b5:bf:bb:91:c9:b2:81:bb:59:
         4c:a5:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org