Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
File:                     D6A125F2327211EC9F94056BD8A014CE.roa (raw, json)
Hash identifier:          RBThPex0LugEeEviLtrksjGRhmwHNd7OHZzgh4GFb6M=
Subject key identifier:   53:B6:26:6F:3C:E2:14:F7:C5:33:BF:B7:90:59:48:DD:C3:FC:1C:66
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01E0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:28:55 +0000
ROA not before:           Thu 21 Oct 2021 13:28:52 +0000
ROA not after:            Fri 21 Oct 2022 13:28:52 +0000
asID:                     60458
IP address blocks:        161.123.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:28:52 2021 GMT
            Not After : Oct 21 13:28:52 2022 GMT
        Subject: CN=61716b17-d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:9b:17:5b:9b:10:55:59:33:64:de:e7:58:
                    79:2f:c9:46:a0:21:93:c8:c1:54:21:20:90:20:47:
                    b4:15:7b:b1:19:c1:13:96:cc:3f:6c:b6:73:b6:10:
                    f6:75:d7:19:bc:1a:dd:53:34:5e:44:54:b4:0b:98:
                    7c:a7:00:8f:4c:ef:ac:21:26:2b:af:de:85:05:90:
                    fa:e2:52:22:4c:3b:1c:53:10:95:8e:51:55:ef:93:
                    de:72:89:04:56:d7:54:71:6c:7e:77:f6:69:0e:3a:
                    d0:76:22:cb:ca:dc:d8:ca:03:a7:41:e1:2d:b1:8c:
                    10:17:dd:94:9b:de:01:e0:5b:53:da:fd:d0:42:95:
                    60:19:a2:71:6e:85:00:e3:80:78:1e:35:71:58:76:
                    95:cd:11:ae:57:51:51:e1:c1:c4:c5:c1:e6:c6:d8:
                    4c:ea:58:4a:77:7b:f1:ed:f0:df:65:30:b6:ab:8a:
                    e7:1f:be:de:73:b9:25:85:34:20:18:1f:43:6d:fb:
                    f7:b5:86:36:7c:ff:28:6f:70:a2:dc:f3:11:05:1e:
                    b1:94:a2:ea:24:c3:0f:a0:1e:c2:2a:23:ef:4f:93:
                    96:2b:7d:f8:78:9e:ee:01:f4:d4:b9:0e:54:c8:ba:
                    6c:2a:78:55:84:e2:8d:fc:82:76:26:ad:7f:be:6d:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B6:26:6F:3C:E2:14:F7:C5:33:BF:B7:90:59:48:DD:C3:FC:1C:66
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:28:0a:74:ae:ef:5b:27:95:aa:e5:87:d7:36:e4:35:5a:
         0a:6d:88:0f:e3:39:79:e2:d1:e8:48:53:cd:25:2c:64:ee:03:
         52:de:5f:3b:73:29:08:8b:65:c7:87:fb:50:4c:32:cf:54:34:
         f4:fe:08:29:8b:da:20:af:71:bf:28:58:a2:3b:f5:cf:94:3d:
         9a:49:f4:a9:12:68:bb:31:ec:8f:d5:06:a2:56:00:b2:47:08:
         dd:a7:e2:f1:51:ea:f7:a0:6d:21:1a:66:87:a1:13:48:48:a9:
         99:ce:83:f4:06:5b:23:a9:f9:4b:ad:3a:da:d1:a0:36:9b:f2:
         4a:73:c8:81:40:50:d2:38:d1:a8:c7:6d:cb:7a:6c:34:0a:30:
         55:2c:0c:02:0e:91:f8:5f:49:61:f7:98:64:97:91:dd:cf:54:
         99:c3:ee:18:03:70:53:05:65:cd:3e:a0:ff:bf:54:63:d8:b8:
         e1:41:70:4c:8d:c8:e6:d0:47:4d:f0:7a:f0:e4:15:72:ca:e0:
         a8:1a:73:40:3d:c0:a0:87:44:90:3a:4f:80:69:32:22:be:b0:
         59:aa:14:eb:df:50:27:a9:3f:94:f2:7d:6a:4e:05:90:e7:26:
         13:2e:5e:f9:bc:5d:da:76:78:d3:d9:f4:3f:d0:e9:fd:8c:64:
         33:9c:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org