Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323135313236.roa
File:                     326131343a373538313a373030303a3a2f33372d3337203d3e20323135313236.roa (raw, json)
Hash identifier:          84KTWm5aNoLZMunZ8c0gkYKBT5aK3URy8OSLUUOY9iU=
Subject key identifier:   9C:99:97:6E:A8:86:A3:E2:72:FF:99:3A:E0:85:4C:33:55:D6:2E:82
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       1C66AF7D4C85C4CF032236039C76561F4EBC89C0
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:15:43 +0000
ROA not before:           Wed 04 Feb 2026 20:10:43 +0000
ROA not after:            Wed 03 Feb 2027 20:15:43 +0000
asID:                     215126
IP address blocks:        2a14:7581:7000::/37 maxlen: 37
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:66:af:7d:4c:85:c4:cf:03:22:36:03:9c:76:56:1f:4e:bc:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:10:43 2026 GMT
            Not After : Feb  3 20:15:43 2027 GMT
        Subject: CN=9C99976EA886A3E272FF993AE0854C3355D62E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:95:93:41:68:83:72:b8:48:83:e8:5b:16:
                    59:c7:fe:06:21:ef:04:73:74:73:34:2e:b7:9e:03:
                    0a:fb:da:ea:f3:4a:93:2a:22:58:08:b8:38:aa:24:
                    1d:c7:2a:cf:d7:88:c7:95:f2:b8:91:f4:9e:1e:39:
                    73:fe:38:be:b2:27:a1:5c:21:e3:6b:7f:b7:b3:22:
                    7b:88:25:c4:a9:1a:41:61:b8:8f:da:b6:14:a9:a5:
                    dc:d9:ad:da:24:b0:a1:88:68:1d:21:28:a5:35:22:
                    85:dd:2e:94:07:99:0e:28:ff:5d:67:58:e7:48:01:
                    e5:fc:1d:f2:2d:f3:c2:11:d0:b9:9a:50:f2:fe:5b:
                    fd:7e:26:91:87:ce:f4:64:6f:1b:a0:ad:cd:13:e5:
                    c7:78:d7:a8:31:09:4c:bc:16:ef:9f:4a:46:e0:19:
                    9f:d3:a3:52:d4:f7:60:54:b9:d3:e9:d0:16:d5:58:
                    9f:59:b1:0d:a2:87:9a:f9:80:96:66:e5:c3:ef:45:
                    74:f5:99:1a:4b:48:f5:18:2a:9e:1a:da:9b:53:15:
                    0e:3b:3c:68:36:01:a1:da:9c:24:b9:8b:d7:4d:5d:
                    8f:42:0d:81:81:1b:05:0a:b9:c2:45:a6:ac:43:44:
                    ba:77:e6:7a:4a:3f:45:48:3c:49:ad:0b:f8:01:3d:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:99:97:6E:A8:86:A3:E2:72:FF:99:3A:E0:85:4C:33:55:D6:2E:82
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:74:bf:86:4d:51:7a:ae:af:ef:de:67:6d:50:a6:47:ea:
         8d:c1:9f:39:b7:c4:bb:53:99:9e:f2:73:01:d1:84:65:e0:c8:
         d7:88:36:0f:d2:51:b3:fe:f2:4b:61:d0:8e:b6:22:df:d1:54:
         03:91:3c:b8:4e:d5:36:a6:53:a5:be:d6:e7:77:1b:5e:29:9b:
         b2:97:8e:9b:60:8e:25:4d:13:63:85:0a:cc:df:01:91:aa:5f:
         66:a8:44:7f:af:87:b3:8c:28:6c:17:0f:93:6f:22:6b:3d:da:
         07:9e:8a:a5:9d:ed:72:8b:0f:73:05:59:a7:31:73:e1:66:f8:
         a8:6d:e9:65:d8:9e:e8:a8:03:36:51:4f:aa:36:e9:5e:44:f8:
         94:c6:49:92:86:01:26:e2:1d:30:17:81:b7:c5:ee:2a:83:5e:
         70:e2:7e:c0:fa:f2:40:4e:3e:73:d4:27:a5:97:e7:ae:c5:96:
         c2:5f:4c:f9:49:23:39:7b:eb:f2:98:ad:8d:bc:18:38:b1:7a:
         c9:ce:c5:68:a5:af:5d:b1:d9:2d:7c:b1:0c:93:5c:f1:4b:69:
         4f:73:3b:40:02:c4:a6:8f:26:e5:d6:f7:e9:be:57:7c:cb:4a:
         e0:db:ab:34:9f:73:e8:d2:52:be:69:10:24:10:82:79:99:d9:
         99:9e:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----