Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038313030.roa
File:                     3139332e3136332e31392e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          BSSKTjmbNCKubCqu+0lNU3oCOyASKAGkKPyPSbBQ/QE=
Subject key identifier:   0E:40:5E:95:57:F4:96:A3:35:25:29:07:E5:AB:E0:67:07:27:5B:B1
Certificate issuer:       /CN=ecdd07eef76f1a5c4ec4d944293e096e967ca3d0
Certificate serial:       0B7439D0C3A74E54474B0BA646855BBD5A6C8BF9
Authority key identifier: EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer
Subject info access:      rsync://0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 12 Jul 2022 22:57:06 +0000
ROA not before:           Tue 12 Jul 2022 22:52:06 +0000
ROA not after:            Tue 11 Jul 2023 22:57:06 +0000
asID:                     8100
IP address blocks:        193.163.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:39:d0:c3:a7:4e:54:47:4b:0b:a6:46:85:5b:bd:5a:6c:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd07eef76f1a5c4ec4d944293e096e967ca3d0
        Validity
            Not Before: Jul 12 22:52:06 2022 GMT
            Not After : Jul 11 22:57:06 2023 GMT
        Subject: CN=0E405E9557F496A335252907E5ABE06707275BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:41:e1:73:7f:2f:ae:0d:08:8e:2e:4f:6e:
                    6f:bb:d4:3c:f5:eb:ca:65:d0:9b:4c:d0:1e:d5:5c:
                    b0:ef:a8:39:21:eb:02:b0:11:05:26:ca:d6:f9:96:
                    fb:a0:15:7f:c4:35:3d:de:0b:c2:06:0e:1e:b2:ac:
                    d0:de:d7:32:43:bc:3b:8b:a8:5a:03:82:bf:a9:e3:
                    49:ea:0d:f7:7f:6b:41:31:1d:e3:d5:da:9f:70:52:
                    77:c4:1a:c2:7a:99:dd:b1:db:cc:fd:b4:f4:01:2a:
                    c4:a0:ff:66:1f:32:e4:7a:61:d1:07:27:e3:d5:e1:
                    7f:3b:b3:9c:6e:7f:06:24:a6:58:8b:d8:59:38:5c:
                    c8:09:50:d3:27:36:e5:77:9a:33:a9:64:93:23:80:
                    bb:f4:f3:c3:d8:68:1f:2e:6e:07:22:e6:8c:49:ff:
                    a5:5a:84:69:dc:9b:0e:e6:22:d1:78:98:a2:ab:b5:
                    ad:93:3e:dc:67:70:ae:31:6d:81:c0:48:1d:c7:e9:
                    ba:dc:76:f1:58:8d:41:ff:0b:17:07:93:e7:04:45:
                    ec:84:2e:2e:78:c8:fc:d8:fd:3b:50:7f:a0:4a:0b:
                    02:b3:f5:92:ff:0a:aa:81:67:2c:84:12:64:6d:22:
                    de:cb:ec:5c:b1:cd:08:c6:51:90:b3:fd:f2:f2:c0:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:40:5E:95:57:F4:96:A3:35:25:29:07:E5:AB:E0:67:07:27:5B:B1
            X509v3 Authority Key Identifier:
                keyid:EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/10/ECDD07EEF76F1A5C4EC4D944293E096E967CA3D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:54:ae:f5:1f:1a:52:b7:1e:e3:4f:12:1d:51:78:b2:02:18:
         fb:87:0f:00:b0:9e:aa:22:b8:50:13:5d:91:8b:44:49:d8:00:
         eb:51:d4:6c:4c:a7:91:e1:b8:de:c5:1f:c9:f7:d2:ae:57:4b:
         48:17:81:f5:43:2d:7a:07:2c:32:3f:ef:a0:fc:04:ce:f5:4e:
         2d:ee:58:b2:3a:12:64:f7:41:8a:eb:22:bf:b5:58:d3:0d:f1:
         a8:92:3d:d4:7a:c9:06:6e:37:c1:d4:a5:08:64:ec:3f:ca:11:
         af:82:9e:38:c5:29:e9:f4:02:92:e4:1e:28:ce:36:80:df:2c:
         76:e9:09:c5:85:fd:10:42:93:16:ed:76:83:95:8f:8c:e8:22:
         bc:90:4a:ff:95:91:0d:90:62:13:f6:20:03:e1:e7:d3:8a:a3:
         03:50:38:28:ef:64:af:ef:1e:39:72:b8:88:dd:f9:b8:65:cb:
         d5:b7:c2:f0:e6:8e:6b:db:e5:77:c0:3f:34:f5:e0:a2:04:f0:
         a0:bc:85:51:16:56:52:d2:8f:5f:be:fe:f2:53:67:9c:01:b7:
         5f:8a:b5:10:a3:4f:73:fb:3f:74:e2:ff:eb:14:5f:bc:d5:84:
         a7:26:c4:85:2c:09:55:58:fc:f7:88:c1:04:4d:d5:aa:d7:c4:
         82:b8:90:12
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUC3Q50MOnTlRHSwumRoVbvVpsi/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWNkZDA3ZWVmNzZmMWE1YzRlYzRkOTQ0MjkzZTA5NmU5
NjdjYTNkMDAeFw0yMjA3MTIyMjUyMDZaFw0yMzA3MTEyMjU3MDZaMDMxMTAvBgNV
BAMTKDBFNDA1RTk1NTdGNDk2QTMzNTI1MjkwN0U1QUJFMDY3MDcyNzVCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdq0Hhc38vrg0Iji5Pbm+71Dz1
68pl0JtM0B7VXLDvqDkh6wKwEQUmytb5lvugFX/ENT3eC8IGDh6yrNDe1zJDvDuL
qFoDgr+p40nqDfd/a0ExHePV2p9wUnfEGsJ6md2x28z9tPQBKsSg/2YfMuR6YdEH
J+PV4X87s5xufwYkpliL2Fk4XMgJUNMnNuV3mjOpZJMjgLv088PYaB8ubgci5oxJ
/6VahGncmw7mItF4mKKrta2TPtxncK4xbYHASB3H6brcdvFYjUH/CxcHk+cEReyE
Li54yPzY/TtQf6BKCwKz9ZL/CqqBZyyEEmRtIt7L7FyxzQjGUZCz/fLywKM5AgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUDkBelVf0lqM1JSkH5avgZwcnW7EwHwYDVR0j
BBgwFoAU7N0H7vdvGlxOxNlEKT4JbpZ8o9AwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzEwL0VDREQwN0VFRjc2
RjFBNUM0RUM0RDk0NDI5M0UwOTZFOTY3Q0EzRDAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83TjBIN3ZkdkdseE94TmxFS1Q0SmJwWjhvOUEuY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMTAvMzEz
OTMzMmUzMTM2MzMyZTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMxMzAz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMGjEzANBgkqhkiG9w0BAQsFAAOCAQEAaVSu9R8aUrce408S
HVF4sgIY+4cPALCeqiK4UBNdkYtESdgA61HUbEynkeG43sUfyffSrldLSBeB9UMt
egcsMj/voPwEzvVOLe5YsjoSZPdBiusiv7VY0w3xqJI91HrJBm43wdSlCGTsP8oR
r4KeOMUp6fQCkuQeKM42gN8sdukJxYX9EEKTFu12g5WPjOgivJBK/5WRDZBiE/Yg
A+Hn04qjA1A4KO9kr+8eOXK4iN35uGXL1bfC8OaOa9vld8A/NPXgogTwoLyFURZW
UtKPX77+8lNnnAG3X4q1EKNPc/s/dOL/6xRfvNWEpybEhSwJVVj894jBBE3VqtfE
griQEg==
-----END CERTIFICATE-----