Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20333938343635.roa
File:                     38392e3130362e3230372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Xf6Ko3ypDUvZM+HytXC0F4gq0+4lKsOJbooByjCZjUo=
Subject key identifier:   FC:03:CE:B6:13:50:10:D0:07:C9:C8:03:F6:56:FB:5B:5B:66:57:60
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       406CF1BD287B654440AE1E7DEE377D4A6902F684
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20333938343635.roa
Signing time:             Tue 12 Jul 2022 22:57:16 +0000
ROA not before:           Tue 12 Jul 2022 22:52:16 +0000
ROA not after:            Tue 11 Jul 2023 22:57:16 +0000
asID:                     398465
IP address blocks:        89.106.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6c:f1:bd:28:7b:65:44:40:ae:1e:7d:ee:37:7d:4a:69:02:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Jul 12 22:52:16 2022 GMT
            Not After : Jul 11 22:57:16 2023 GMT
        Subject: CN=FC03CEB6135010D007C9C803F656FB5B5B665760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:23:11:82:74:87:54:9e:8f:07:88:f4:7a:
                    85:f7:cd:f2:fe:bd:5c:a5:f3:fd:3f:e8:22:dc:b7:
                    de:32:08:02:bf:af:bc:7f:c6:4c:01:ee:70:99:f6:
                    ca:b9:db:29:e1:9c:95:38:b3:bb:dc:bd:26:19:c4:
                    cb:eb:d1:d9:11:c0:47:de:d7:62:1b:66:bc:67:9a:
                    78:56:89:6c:1c:b5:8e:3b:91:a4:b6:19:8d:9b:39:
                    a8:ea:5f:4e:ad:1b:32:3c:47:dd:00:1c:f4:e4:2d:
                    35:16:ed:9b:c2:26:a5:0e:bc:a9:66:8f:bb:4f:39:
                    a7:d8:da:07:81:5a:66:6d:9a:89:14:dd:31:59:a7:
                    aa:24:e6:a9:d4:64:07:af:c7:99:64:87:d1:b5:2b:
                    8d:84:55:e1:b8:7d:8a:86:e2:a7:27:40:dd:d0:aa:
                    60:3c:80:76:52:bc:96:3e:18:70:aa:69:9d:a3:a9:
                    a9:3c:18:32:73:bf:73:1b:49:25:22:d7:4e:a9:7b:
                    68:89:6e:eb:d6:8a:18:b6:dd:4a:28:f9:49:7d:b9:
                    34:87:35:9b:2f:fc:5c:c4:4f:63:0e:f6:ae:49:5a:
                    a6:87:64:d8:53:72:66:0b:6f:33:61:ea:17:67:e9:
                    1f:a7:18:c4:d5:3c:6f:ca:da:ba:d0:7a:eb:02:a1:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:03:CE:B6:13:50:10:D0:07:C9:C8:03:F6:56:FB:5B:5B:66:57:60
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:c5:29:97:cd:cf:69:47:1e:6a:ac:75:b2:56:12:62:62:
         4f:ca:98:7e:c6:4c:ed:cc:d7:a7:e9:8e:c7:4c:f8:72:f2:c9:
         d2:66:ab:4b:6f:38:0d:cd:82:c3:e6:a4:bd:3b:49:e8:b2:f4:
         f4:01:96:4a:2c:3f:51:3b:b1:c1:fd:24:21:f8:4e:37:8a:59:
         73:2f:fb:6b:09:0a:73:96:f9:c6:8d:ea:07:47:d8:e7:74:05:
         74:d6:4e:bc:10:c5:5f:36:62:3d:70:75:7f:39:2e:8b:e7:83:
         ae:69:2b:c4:23:fb:ba:f2:cf:ba:e3:52:a4:44:1e:09:b1:37:
         84:64:63:97:8f:48:34:1d:97:79:09:ad:b3:05:7e:87:80:7f:
         79:2b:70:e5:13:78:b9:71:15:79:85:53:09:a0:a1:40:7b:51:
         79:71:4d:58:ab:fa:93:84:84:8e:df:de:a9:34:88:a2:b7:b8:
         bd:ff:3a:58:43:0c:07:ba:0c:28:10:6e:dc:18:d6:62:de:ad:
         13:c0:46:a5:94:03:34:84:ad:dc:b2:1f:57:bd:ac:71:d1:b9:
         c2:95:6e:8b:82:c4:30:cc:84:af:c7:8a:ea:86:25:fc:56:18:
         cc:97:e4:38:79:16:e6:78:43:15:75:68:78:d0:1a:44:6c:13:
         b2:8f:64:9d
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUQGzxvSh7ZURArh597jd9SmkC9oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yMjA3MTIyMjUyMTZaFw0yMzA3MTEyMjU3MTZaMDMxMTAvBgNV
BAMTKEZDMDNDRUI2MTM1MDEwRDAwN0M5QzgwM0Y2NTZGQjVCNUI2NjU3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiryMRgnSHVJ6PB4j0eoX3zfL+
vVyl8/0/6CLct94yCAK/r7x/xkwB7nCZ9sq52ynhnJU4s7vcvSYZxMvr0dkRwEfe
12IbZrxnmnhWiWwctY47kaS2GY2bOajqX06tGzI8R90AHPTkLTUW7ZvCJqUOvKlm
j7tPOafY2geBWmZtmokU3TFZp6ok5qnUZAevx5lkh9G1K42EVeG4fYqG4qcnQN3Q
qmA8gHZSvJY+GHCqaZ2jqak8GDJzv3MbSSUi106pe2iJbuvWihi23Uoo+Ul9uTSH
NZsv/FzET2MO9q5JWqaHZNhTcmYLbzNh6hdn6R+nGMTVPG/K2rrQeusCofPlAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQU/APOthNQENAHycgD9lb7W1tmV2AwHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMHAGCCsGAQUF
BwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzgz
OTJlMzEzMDM2MmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5Mzgz
NDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABZas8wDQYJKoZIhvcNAQELBQADggEBAIt8xSmXzc9p
Rx5qrHWyVhJiYk/KmH7GTO3M16fpjsdM+HLyydJmq0tvOA3NgsPmpL07Seiy9PQB
lkosP1E7scH9JCH4TjeKWXMv+2sJCnOW+caN6gdH2Od0BXTWTrwQxV82Yj1wdX85
Lovng65pK8Qj+7ryz7rjUqREHgmxN4RkY5ePSDQdl3kJrbMFfoeAf3krcOUTeLlx
FXmFUwmgoUB7UXlxTVir+pOEhI7f3qk0iKK3uL3/OlhDDAe6DCgQbtwY1mLerRPA
RqWUAzSErdyyH1e9rHHRucKVbouCxDDMhK/HiuqGJfxWGMyX5Dh5FuZ4QxV1aHjQ
GkRsE7KPZJ0=
-----END CERTIFICATE-----