Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2037303138.roa
File:                     38392e3130362e3230372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          rcAxX6Ixwq3NEjVeVlVt577dY1Efl71j9gTX4HrnmvI=
Subject key identifier:   E6:59:2F:B7:C8:BD:FF:80:1E:8C:D5:6E:AB:C7:C1:8F:C1:0F:CB:8E
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       1D002AAC7A0CB79C113D40325722841AB914D9FE
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 12 Jul 2022 22:57:16 +0000
ROA not before:           Tue 12 Jul 2022 22:52:16 +0000
ROA not after:            Tue 11 Jul 2023 22:57:16 +0000
asID:                     7018
IP address blocks:        89.106.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:00:2a:ac:7a:0c:b7:9c:11:3d:40:32:57:22:84:1a:b9:14:d9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Jul 12 22:52:16 2022 GMT
            Not After : Jul 11 22:57:16 2023 GMT
        Subject: CN=E6592FB7C8BDFF801E8CD56EABC7C18FC10FCB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:17:c2:c8:22:3e:17:26:e8:f5:37:24:7d:
                    11:cd:6f:f6:03:9f:68:64:76:a1:6d:b6:ef:95:ee:
                    42:ff:e3:9d:dc:3a:46:68:cf:5a:ff:1b:30:53:23:
                    1e:ae:89:01:8c:41:6f:69:87:8a:dd:d0:cd:11:8e:
                    ae:7a:dc:47:42:17:31:fe:2b:43:9b:27:4f:40:e9:
                    f4:7c:cd:a4:c7:a8:4c:7d:3b:c5:d3:cd:3e:0c:5b:
                    c7:d5:0b:c2:7e:28:03:d5:8d:d3:a2:6e:54:dd:1a:
                    ae:e5:60:2b:a8:f0:41:dd:f2:f0:d5:90:3e:42:b5:
                    c0:7a:41:f4:bc:00:54:f6:6b:86:07:cc:50:c4:e3:
                    62:97:c7:2f:bf:42:fb:b0:58:91:2d:c7:34:86:36:
                    77:74:01:da:a2:0e:80:0c:80:cb:5c:15:cf:f2:e4:
                    f5:cc:df:6e:80:8f:02:1a:f1:fb:35:d8:1f:f7:3e:
                    30:b8:fc:29:03:b1:85:93:39:a0:41:0e:48:2f:58:
                    e8:a2:59:e7:63:2a:67:9a:92:de:e6:fa:81:18:2b:
                    29:e3:b9:6b:14:84:52:30:fe:de:6d:b5:c1:51:e5:
                    7a:aa:86:37:00:12:3b:68:33:3a:8a:81:fa:1a:ac:
                    48:b2:1f:39:db:fd:db:98:cd:a9:3e:16:f3:1c:f8:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:2F:B7:C8:BD:FF:80:1E:8C:D5:6E:AB:C7:C1:8F:C1:0F:CB:8E
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/38392e3130362e3230372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:e4:c2:61:49:98:3e:15:3a:45:1b:2a:18:43:56:82:da:
         d3:cf:d4:49:2c:e3:76:90:ab:17:1e:83:89:1e:aa:af:90:91:
         dd:df:09:eb:96:1b:5e:c3:cb:e4:d4:ba:4e:aa:71:27:f3:b8:
         2b:2d:46:43:a4:30:df:bb:51:5e:d3:5f:9a:fb:7c:cf:f7:16:
         10:da:be:94:5a:32:52:37:06:2f:aa:a5:3f:d0:f4:9f:de:96:
         ff:69:9e:83:6a:6e:d1:49:d3:61:1d:dd:ed:bb:a4:2d:02:b7:
         9b:8a:5a:65:c7:4a:b5:4c:6a:ec:f9:4d:72:40:e4:3e:1c:4a:
         65:9f:9c:98:31:a5:e7:8a:15:f5:ff:10:4c:9f:17:61:f1:15:
         21:30:f1:0e:b1:43:8e:4f:38:f5:92:6f:1f:99:b2:22:29:8c:
         5b:ac:2a:38:66:bc:69:ff:9a:ae:c2:e3:74:bd:5c:ac:8b:88:
         c3:1d:f4:7c:fe:38:c6:32:1d:4d:11:72:69:4b:fa:e9:e5:7c:
         4b:ba:f0:aa:67:be:37:7d:d5:77:bc:62:87:c6:63:e8:3d:de:
         86:ad:8b:a7:51:01:bb:9e:7e:c4:5a:64:c8:9c:a4:4e:29:e0:
         cf:19:55:b0:ca:62:61:ef:82:4a:d1:20:3f:fc:a5:d0:74:53:
         9d:26:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----