Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E55DF98AB72911ECB9697ACC5A40D577.roa
File:                     E55DF98AB72911ECB9697ACC5A40D577.roa (raw, json)
Hash identifier:          MaWWmlW1mcBInPbC/gxMEPcMIpBvFzdmCEh6OvY+Bcs=
Subject key identifier:   E2:2A:39:5F:1D:1F:31:C1:BA:C3:CE:35:48:A3:55:4C:56:57:77:5D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       064D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E55DF98AB72911ECB9697ACC5A40D577.roa
Signing time:             Fri 08 Apr 2022 10:51:51 +0000
ROA not before:           Fri 08 Apr 2022 10:51:47 +0000
ROA not after:            Sat 08 Apr 2023 10:51:47 +0000
asID:                     400377
IP address blocks:        161.123.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Apr  8 10:51:47 2022 GMT
            Not After : Apr  8 10:51:47 2023 GMT
        Subject: CN=625013c7-a1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:e5:85:4e:a5:63:17:c9:ee:c9:e5:6d:2b:
                    b7:a9:4d:21:a6:99:74:d5:f1:0b:b5:5f:20:70:46:
                    e5:14:4a:8e:e0:72:4c:8d:8d:63:9f:11:f7:0b:b4:
                    2c:14:d2:a5:ce:d9:57:b7:29:92:44:64:72:42:2f:
                    61:df:22:e2:0b:92:bd:cd:8b:08:a8:9b:c8:56:15:
                    5b:44:2e:78:48:c3:cf:cd:ee:93:44:49:fa:80:55:
                    2e:0c:e9:b1:f0:ca:1f:be:35:b1:7d:6b:c9:99:55:
                    92:a1:9b:b7:60:7e:a0:f8:52:4b:48:24:a8:df:31:
                    c3:f1:f5:c7:2d:b8:a6:74:b8:18:7a:7d:fb:fc:84:
                    19:ce:92:e3:06:7f:2b:38:dc:37:62:6e:fe:f4:f3:
                    55:8f:ac:73:fa:b2:89:a1:1e:cd:cd:56:53:82:13:
                    15:e2:4f:60:90:72:35:7e:6a:09:e0:fe:e3:17:b8:
                    9e:54:f1:c3:be:b6:46:82:f8:5f:16:89:12:43:21:
                    31:d5:ae:8b:fc:9d:14:68:a5:d5:46:97:ca:62:ba:
                    6a:21:b3:dd:3a:40:17:47:3a:c3:7e:1c:f5:ca:e7:
                    b2:1e:f7:b8:d3:3e:f3:25:2e:e5:11:15:84:fd:f1:
                    4f:9d:bc:a5:01:49:2c:c0:93:4e:98:ef:c4:80:b9:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:39:5F:1D:1F:31:C1:BA:C3:CE:35:48:A3:55:4C:56:57:77:5D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E55DF98AB72911ECB9697ACC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:db:12:8e:a6:3a:b7:e8:1f:bc:da:c0:3a:10:fe:55:9f:f8:
         3e:c8:2f:7a:e2:1a:6a:e8:bd:19:53:8e:c8:ce:70:ac:10:97:
         50:07:58:4b:43:c3:95:88:bd:1b:9e:b4:80:db:bf:51:de:ac:
         3c:49:57:a6:40:b3:64:0d:5e:18:06:83:26:f7:60:71:50:35:
         3f:c9:71:37:2c:5b:cc:bb:6a:21:9a:1c:84:fd:c5:96:bd:69:
         ba:4a:0c:cc:b4:e7:01:43:68:da:2f:4c:c4:cd:2c:c6:61:8e:
         6f:dc:45:20:0f:9c:e3:0b:18:7b:be:b7:8c:b6:d5:e6:6d:ab:
         e8:a9:23:2f:b9:b8:5b:5c:e8:24:9c:ac:65:4b:02:7a:a1:62:
         db:d8:e7:a6:8b:b1:af:ba:a9:70:c5:37:a3:28:93:01:23:53:
         98:19:da:0a:b8:5e:fb:dd:13:5d:1b:2a:d1:d1:be:06:89:69:
         5c:cf:84:ba:1e:6c:e1:e2:75:35:ee:f2:ea:9d:4c:3a:41:8c:
         bc:68:df:d8:e8:20:92:0b:b9:71:2e:b2:8a:0e:3d:5c:90:cb:
         3d:a4:3c:0f:07:31:19:d0:20:47:f6:3e:cd:7b:7c:d8:d3:9e:
         19:04:02:12:7f:7b:f6:6e:74:0c:65:89:84:71:27:29:5a:f9:
         0a:11:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org