Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
File:                     E651DCC6F16211EC96D17DB5F1222468.roa (raw, json)
Hash identifier:          EXKCS2KnfAX0swo1pJ6FOlENbZ44WLa7tLFAh5GTkuc=
Subject key identifier:   92:D6:1D:7D:FA:7D:90:FD:C4:A9:C1:42:CE:C9:40:AA:45:63:97:AC
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       076F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
Signing time:             Tue 21 Jun 2022 13:06:01 +0000
ROA not before:           Tue 21 Jun 2022 13:05:58 +0000
ROA not after:            Wed 21 Jun 2023 13:05:58 +0000
asID:                     203999
IP address blocks:        161.123.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 21 13:05:58 2022 GMT
            Not After : Jun 21 13:05:58 2023 GMT
        Subject: CN=62b1c239-3725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:9b:94:e8:3c:52:c7:f9:46:2e:e9:41:b3:
                    0f:4f:a6:40:16:43:d8:2d:60:a8:0f:c8:ed:3a:2f:
                    5a:dd:5c:c7:68:6c:64:a1:e6:5b:cc:27:2a:3e:2a:
                    b0:ff:38:77:c9:8c:42:2f:d5:ef:26:0f:54:d6:b5:
                    bf:07:ec:d6:db:19:93:b4:a8:eb:29:87:43:ab:8a:
                    d3:d6:46:88:77:1d:65:66:52:5c:ca:39:5b:da:d5:
                    9f:b0:b6:26:a8:ef:89:e4:c0:46:e2:74:83:45:fa:
                    d0:fb:ec:07:f4:4b:7b:ef:c3:b3:f5:af:0a:04:a1:
                    58:f1:08:f4:3e:f5:32:dd:e2:c6:17:b7:88:d3:d8:
                    3d:aa:21:6a:fb:d4:26:2c:81:8a:d0:38:b5:1b:c2:
                    b6:a1:37:56:b0:d1:05:b9:cc:b9:21:9c:d8:05:89:
                    e7:cf:71:e3:1a:9e:41:28:fa:2d:7a:11:e2:d7:83:
                    cd:6f:fa:b1:de:c7:43:4c:70:e0:1f:ae:60:b6:92:
                    d5:5b:0b:8e:fe:ad:57:fa:13:5f:a8:f1:dd:a3:b1:
                    d5:03:73:e6:e4:e4:c6:2d:ed:f4:43:e6:aa:b7:72:
                    85:fa:9a:4e:ef:3f:9e:e7:6d:1d:ed:88:63:20:86:
                    e9:e2:9f:22:e3:8d:61:e4:ea:75:e7:a4:85:ab:b6:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:1D:7D:FA:7D:90:FD:C4:A9:C1:42:CE:C9:40:AA:45:63:97:AC
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:b1:9d:43:2c:cb:82:fa:00:0b:75:e3:11:0f:33:de:e8:
         3c:88:65:21:b5:db:8d:7f:67:c5:aa:3a:93:0e:8f:63:37:b3:
         0d:b8:a1:c7:4a:6c:de:56:7a:ba:7e:62:b4:c1:cb:82:e1:43:
         f3:bc:b0:90:b3:0e:ee:c9:6b:19:77:72:b7:05:f9:e3:0d:cf:
         b7:fc:0e:f3:0e:4c:fd:0e:64:1b:86:cc:e3:e0:d8:51:25:4e:
         c8:42:c2:4c:17:b9:15:6a:4d:fb:47:7a:bf:4c:27:a0:7a:38:
         e6:7a:f3:ff:e3:f7:73:23:e5:4b:0d:84:99:f7:82:ec:21:f5:
         15:99:89:ab:6d:b4:93:c2:92:2a:5b:44:09:a7:af:23:07:55:
         d3:29:cd:eb:b5:e5:5c:c9:b4:1c:30:9c:67:68:b0:2d:82:fc:
         b7:2b:be:c0:a4:c9:8c:80:7e:e3:69:27:05:50:ee:c1:63:16:
         de:3b:10:5a:cf:4d:d5:82:80:1a:5b:e0:d5:e0:a6:bf:0f:ec:
         9f:07:42:4c:26:42:a3:13:7e:69:84:76:b7:2e:c3:07:a3:f8:
         fa:79:f8:02:86:2f:39:47:4f:6d:fe:ef:c1:b7:53:fb:55:a4:
         df:c7:8d:5b:58:55:06:8b:88:28:a4:60:a1:63:b2:d4:b3:d6:
         e9:86:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org