Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2EE08B0EB0E11ED82BC304B4AD9E6FC.roa
File:                     E2EE08B0EB0E11ED82BC304B4AD9E6FC.roa (raw, json)
Hash identifier:          CZKbcy+6uDzJRTi1uDAIIkf5JYdMidDDhFFP0kapPXc=
Subject key identifier:   34:9C:2B:16:25:CE:11:B3:A0:FD:22:F5:95:53:7E:4C:F2:6E:12:83
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A9C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2EE08B0EB0E11ED82BC304B4AD9E6FC.roa
Signing time:             Fri 05 May 2023 06:34:29 +0000
ROA not before:           Fri 05 May 2023 06:34:25 +0000
ROA not after:            Sun 05 May 2024 06:34:25 +0000
asID:                     399471
IP address blocks:        161.123.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: May  5 06:34:25 2023 GMT
            Not After : May  5 06:34:25 2024 GMT
        Subject: CN=6454a375-276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:63:02:ed:0b:9b:c0:6c:a0:f2:a8:51:44:
                    50:af:0e:85:97:3d:d7:36:47:d8:2d:9a:44:dd:b4:
                    93:7b:ba:7f:44:28:74:a8:aa:d2:4c:7d:59:52:ed:
                    8e:f3:41:72:6f:24:db:54:4d:4c:bf:bf:f9:c5:87:
                    87:4d:a5:c5:da:4b:79:ef:31:46:63:4d:f9:2a:08:
                    da:e0:73:e2:83:38:22:aa:fd:29:13:36:3b:11:86:
                    31:51:ab:08:bb:a5:6a:54:14:b0:e5:f7:10:cd:13:
                    68:96:ed:45:ac:bf:04:9f:b5:e1:39:7c:b2:38:23:
                    f5:b2:e4:66:42:41:7a:be:07:b3:66:be:05:dd:8f:
                    ef:28:3f:0c:c6:8d:45:d1:f0:bb:1c:01:d5:5b:65:
                    ca:88:03:89:43:1f:32:da:87:65:c1:d9:70:fa:a6:
                    a9:c9:42:a9:4c:3d:ec:e6:ac:a5:04:ec:0a:b3:7f:
                    52:0e:45:f4:02:1b:a3:26:75:5d:47:fe:ae:34:be:
                    42:3f:7a:36:3a:92:2b:76:90:0e:cc:bc:14:d9:5d:
                    27:0d:21:c9:a3:33:47:c8:51:ef:11:de:49:9e:3d:
                    d0:aa:8d:44:be:16:f2:ce:cc:77:c2:33:1e:fc:06:
                    3b:af:cf:3a:29:72:04:23:1a:2f:cc:ee:45:59:06:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:2B:16:25:CE:11:B3:A0:FD:22:F5:95:53:7E:4C:F2:6E:12:83
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2EE08B0EB0E11ED82BC304B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:5e:98:7c:6a:7d:cf:3b:34:6b:9a:24:1c:aa:bc:b7:33:
         9d:2e:db:a9:9d:77:c7:89:f2:1e:6a:c8:33:60:4a:73:23:be:
         42:77:06:be:10:e3:60:3c:1b:6e:35:86:65:37:b5:d7:08:c7:
         13:dd:bd:1b:3e:a9:ef:d6:1f:4f:51:fb:08:7a:01:5f:b0:a8:
         89:86:fb:92:44:af:c4:c8:13:9c:76:05:2a:e1:4f:46:dc:16:
         e0:8f:7f:d4:10:7e:e6:8a:2a:2b:f7:b9:e4:17:73:4a:4d:9f:
         ac:7a:13:3b:76:62:a0:9f:80:55:97:54:c2:cc:55:8b:85:91:
         74:a3:1c:b9:7a:33:40:8d:5e:00:3b:64:a6:69:4b:23:05:21:
         4b:95:10:89:f7:a3:4c:0e:b7:32:bc:60:72:c7:7b:57:bf:75:
         dd:1b:7f:84:b0:87:18:8b:af:dd:03:11:5c:e4:87:a7:e0:62:
         5d:e7:6e:2a:e1:4a:fd:cd:c6:81:14:47:98:cd:2c:2d:59:ac:
         4a:b6:5f:f3:ef:76:b0:fd:61:5f:e6:7a:de:58:05:24:c8:3f:
         25:20:2c:d7:84:29:1c:ca:15:54:d2:47:ea:14:46:9b:93:19:
         a7:2b:48:8d:3d:90:7e:db:15:45:9a:fc:7d:9f:7f:7c:ca:73:
         37:4f:38:8a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA1MDUwNjM0MjVaFw0yNDA1MDUwNjM0MjVaMBgxFjAU
BgNVBAMTDTY0NTRhMzc1LTI3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDZmMC7QubwGyg8qhRRFCvDoWXPdc2R9gtmkTdtJN7un9EKHSoqtJMfVlS
7Y7zQXJvJNtUTUy/v/nFh4dNpcXaS3nvMUZjTfkqCNrgc+KDOCKq/SkTNjsRhjFR
qwi7pWpUFLDl9xDNE2iW7UWsvwSfteE5fLI4I/Wy5GZCQXq+B7NmvgXdj+8oPwzG
jUXR8LscAdVbZcqIA4lDHzLah2XB2XD6pqnJQqlMPezmrKUE7Aqzf1IORfQCG6Mm
dV1H/q40vkI/ejY6kit2kA7MvBTZXScNIcmjM0fIUe8R3kmePdCqjUS+FvLOzHfC
Mx78BjuvzzopcgQjGi/M7kVZBi7JAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNJwr
FiXOEbOg/SL1lVN+TPJuEoMwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0UyRUUwOEIwRUIwRTExRUQ4MkJDMzA0QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe5YwDQYJKoZIhvcNAQELBQAD
ggEBAFrIXph8an3POzRrmiQcqry3M50u26mdd8eJ8h5qyDNgSnMjvkJ3Br4Q42A8
G241hmU3tdcIxxPdvRs+qe/WH09R+wh6AV+wqImG+5JEr8TIE5x2BSrhT0bcFuCP
f9QQfuaKKiv3ueQXc0pNn6x6Ezt2YqCfgFWXVMLMVYuFkXSjHLl6M0CNXgA7ZKZp
SyMFIUuVEIn3o0wOtzK8YHLHe1e/dd0bf4SwhxiLr90DEVzkh6fgYl3nbirhSv3N
xoEUR5jNLC1ZrEq2X/PvdrD9YV/met5YBSTIPyUgLNeEKRzKFVTSR+oURpuTGacr
SI09kH7bFUWa/H2ff3zKczdPOIo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org