Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6FF5E20919711EDA530D0D4F1222468.roa
File:                     E6FF5E20919711EDA530D0D4F1222468.roa (raw, json)
Hash identifier:          ORDmZu4kZMNKzPwebbKr7YoDm25cAA4AJQEc7GZ2s2A=
Subject key identifier:   E6:9E:C3:42:91:7F:66:F2:5A:60:C5:01:CE:1D:5A:D7:71:E8:D1:77
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       094A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6FF5E20919711EDA530D0D4F1222468.roa
Signing time:             Wed 11 Jan 2023 10:08:32 +0000
ROA not before:           Wed 11 Jan 2023 10:08:28 +0000
ROA not after:            Thu 11 Jan 2024 10:08:28 +0000
asID:                     133499
IP address blocks:        161.123.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 11 10:08:28 2023 GMT
            Not After : Jan 11 10:08:28 2024 GMT
        Subject: CN=63be8aa0-7f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:22:9a:7c:48:a9:99:7f:00:e3:69:ae:68:
                    d9:fc:26:32:fc:37:4f:f7:77:18:02:e7:27:02:ea:
                    e5:13:4f:83:dc:41:6f:f0:8c:1d:21:95:87:8a:90:
                    61:40:60:09:13:8b:89:53:ff:b8:f5:42:83:5b:06:
                    e5:0d:a3:29:0c:4a:20:10:d5:3b:fa:b2:29:bf:bb:
                    99:bd:d5:c2:da:ef:8f:5a:6e:f8:7e:0d:63:af:4b:
                    eb:6b:8e:62:4d:ef:19:d0:e5:ba:d3:71:46:5a:d7:
                    f6:b4:c3:25:92:0c:8c:b6:49:e3:3a:c3:ec:27:63:
                    a9:95:66:7d:79:58:5b:d1:b8:a9:70:f4:00:41:3f:
                    bc:ba:23:7b:c9:d1:63:22:2c:c7:f4:14:d4:91:5a:
                    94:f1:96:1f:bd:7d:ac:50:24:8e:7f:5e:50:29:5a:
                    84:59:87:ff:ee:dd:e7:ce:c5:59:ce:a4:81:03:fe:
                    23:88:5f:35:9d:58:d5:e2:3c:b4:17:aa:a2:29:fd:
                    0b:11:c3:1f:43:dc:ca:96:bc:4e:0f:b7:d2:34:64:
                    53:20:29:51:9c:6e:97:63:cf:03:a1:9a:4a:6e:3b:
                    c9:8e:1b:a9:02:fb:5f:59:dd:bf:a1:a5:ef:23:fd:
                    d6:88:77:46:86:31:84:cb:3f:f6:7c:fa:d8:3e:a2:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:C3:42:91:7F:66:F2:5A:60:C5:01:CE:1D:5A:D7:71:E8:D1:77
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6FF5E20919711EDA530D0D4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:fb:b4:b0:7e:67:05:de:2c:1e:97:d5:ef:05:00:8b:b0:
         9e:b6:3d:ba:4a:aa:b7:79:04:ba:44:3f:cf:bb:21:be:0e:c2:
         fd:64:9e:e8:52:7c:55:92:66:b8:61:c6:49:3e:a9:85:7f:86:
         50:66:5a:65:ce:b9:c8:00:22:cc:7a:a7:67:5c:b6:4e:5c:da:
         e9:51:bd:19:f2:e6:b4:71:eb:3c:4e:80:af:54:76:3a:c9:8f:
         8b:a2:d9:9a:4e:00:86:de:3c:4d:b4:1d:05:72:ed:b7:20:71:
         e9:16:47:b2:c7:7b:df:45:4d:22:8b:60:0a:6e:68:a5:66:49:
         d5:56:66:0f:c2:ee:50:4f:d7:69:d0:f1:b0:13:a4:41:c8:1b:
         59:6a:6e:7f:5c:69:00:bf:e5:3c:e7:c6:a3:ab:59:1b:df:6d:
         8e:0e:69:5b:ed:6b:f8:74:ba:b9:19:f4:fc:bb:3b:f4:a1:93:
         2f:95:eb:c5:a4:a6:df:ea:2f:94:29:d0:0b:32:3e:15:a2:85:
         45:79:42:9e:fd:2a:fb:48:59:42:69:b8:47:27:07:01:20:7d:
         b1:86:36:df:f8:77:06:ba:5a:fd:0a:9e:51:44:c1:15:43:13:
         c2:d6:d0:c5:ac:e1:e8:ed:b5:f0:2e:7f:fa:c4:06:f7:55:1e:
         25:39:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org