Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB149106C41011EDA79957A9F1222468.roa
File:                     DB149106C41011EDA79957A9F1222468.roa (raw, json)
Hash identifier:          Qaa7IlzDCvuXu97yHCH6liXd72gSLdRpbMHYjiXYccc=
Subject key identifier:   12:F7:DE:C1:6D:1B:65:3D:8C:F9:39:B6:3A:32:A2:4C:8A:9C:7B:F4
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A23
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB149106C41011EDA79957A9F1222468.roa
Signing time:             Thu 16 Mar 2023 15:40:19 +0000
ROA not before:           Thu 16 Mar 2023 15:40:14 +0000
ROA not after:            Sat 16 Mar 2024 15:40:14 +0000
asID:                     207990
IP address blocks:        161.123.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2595 (0xa23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 16 15:40:14 2023 GMT
            Not After : Mar 16 15:40:14 2024 GMT
        Subject: CN=64133863-9062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:e2:9f:8b:30:77:3d:d8:cb:ac:29:2e:b4:
                    ad:f2:b4:f4:a8:80:e8:b5:06:7f:64:5f:de:d1:03:
                    22:a7:14:0e:11:39:6e:ef:97:d9:17:10:52:f8:56:
                    e1:95:5f:47:7e:53:94:00:72:a0:f4:22:60:ca:a2:
                    e3:aa:e9:b1:53:cd:02:0c:2c:a1:11:55:2b:64:ca:
                    cd:3b:1e:9d:e3:69:ee:15:a4:3b:d2:3a:92:e8:d1:
                    a9:b9:1b:1a:60:5a:56:98:94:1c:47:fe:be:40:30:
                    80:31:bf:5b:86:a8:ee:0d:71:01:6c:9c:24:07:35:
                    26:25:7c:e3:ac:15:8c:8e:6f:cf:8f:d3:ce:69:e4:
                    eb:f1:81:59:ba:7a:e7:f9:0e:e7:94:23:73:0e:ec:
                    04:5b:d8:d6:eb:84:0d:88:01:39:9c:dd:b9:3f:e4:
                    a9:d1:a3:47:a7:1a:08:09:3a:6c:cc:b4:5e:d9:b4:
                    2f:10:27:55:12:de:10:c1:c8:63:4d:2f:36:98:42:
                    0e:2a:d9:90:9a:ed:89:9e:23:bf:1b:1c:25:24:da:
                    68:f1:27:f1:aa:3d:c7:fd:06:f1:88:f5:fc:d8:34:
                    75:8a:d1:88:d7:e4:b0:0f:ff:fb:e3:a6:f5:d8:a0:
                    f4:32:46:13:2f:18:a8:c9:fe:e7:8f:ce:80:c1:55:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F7:DE:C1:6D:1B:65:3D:8C:F9:39:B6:3A:32:A2:4C:8A:9C:7B:F4
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB149106C41011EDA79957A9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:51:4d:ce:fe:31:32:d1:e2:17:e1:0f:63:a8:87:79:5e:
         34:f5:65:b7:23:3e:1c:b8:89:4c:e5:00:49:74:7f:11:ca:2a:
         1e:e3:37:c7:9e:5f:93:b2:4e:50:bd:7f:42:06:2e:22:f0:99:
         84:0d:9d:cb:10:ae:4c:ea:11:f8:d4:7f:03:af:19:3d:c8:5d:
         03:f7:83:d9:5f:64:b8:ce:d2:a4:84:58:31:bd:29:e0:18:dc:
         00:b0:79:0c:15:4e:b0:d9:16:78:a0:f7:36:57:82:2f:d8:1f:
         22:47:06:1e:86:6f:93:5a:dc:c2:93:2b:b5:b8:72:50:ee:9b:
         e0:08:7d:0b:e1:4c:4d:ac:d4:3a:cb:53:0c:da:78:13:36:d7:
         f6:7d:53:f2:b6:b3:de:81:f8:28:0e:23:ac:45:18:ec:28:64:
         57:68:41:50:20:27:58:f2:cf:af:7b:39:ae:a2:a9:02:d4:47:
         c1:cf:43:af:e6:69:b2:23:46:72:5b:8d:16:1f:9a:5e:db:ee:
         6a:20:4c:d1:7a:f6:27:3c:47:6f:c9:62:58:aa:77:5d:63:77:
         54:8b:a4:13:11:9d:6f:d4:bc:ec:b6:07:fa:12:79:a5:e0:47:
         88:41:a3:7b:17:a9:7f:50:93:48:4b:e0:07:f2:1d:bb:b5:33:
         b0:c9:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org