Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323135313236.roa
File:                     326131343a373538313a373030303a3a2f34302d3430203d3e20323135313236.roa (raw, json)
Hash identifier:          B09aLOMNQMIOaMdkHSnjn7wWy60l+HCCM05mkpteM8Q=
Subject key identifier:   A3:B3:E4:75:FB:20:6C:8F:8B:EF:03:18:0B:65:F0:EC:E3:7A:EC:FF
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       447884044A40162E7E4359DC1BFFB9110F5D843E
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:18:16 +0000
ROA not before:           Wed 04 Feb 2026 20:13:16 +0000
ROA not after:            Wed 03 Feb 2027 20:18:16 +0000
asID:                     215126
IP address blocks:        2a14:7581:7000::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:78:84:04:4a:40:16:2e:7e:43:59:dc:1b:ff:b9:11:0f:5d:84:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:13:16 2026 GMT
            Not After : Feb  3 20:18:16 2027 GMT
        Subject: CN=A3B3E475FB206C8F8BEF03180B65F0ECE37AECFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:58:18:43:40:b6:fb:34:76:be:fa:eb:5d:
                    53:3c:88:da:c8:c8:1a:60:d1:49:aa:01:ec:77:76:
                    19:d8:fa:a8:08:14:fa:90:84:f8:3c:74:ec:a0:61:
                    81:73:49:09:63:5e:8f:de:a2:29:29:23:2b:3e:8f:
                    ea:d7:4b:2c:db:c3:bf:f0:3b:cb:a8:74:58:75:0b:
                    d6:fa:30:39:a9:4e:7b:6d:fb:d5:e8:1d:6a:1b:b3:
                    a2:6f:19:d5:94:5b:c7:63:0e:ca:ac:b2:8f:7b:5e:
                    73:cf:ea:5a:3e:6b:f2:58:d4:07:a5:d8:79:5b:f6:
                    dd:93:b6:6c:16:30:c1:a9:f2:45:9b:1b:dd:37:9f:
                    fa:49:51:77:72:5f:7d:e3:41:8f:61:82:6b:98:f7:
                    67:67:da:80:80:2e:f5:f9:92:e3:f1:b6:40:b5:2d:
                    24:d5:18:b0:1a:95:22:55:21:a1:e4:95:79:ff:67:
                    d4:43:9b:12:02:f5:4a:e8:c7:3d:4d:5a:04:17:6a:
                    46:a7:d2:c3:7b:cb:0f:89:2b:8c:07:c6:cc:b7:89:
                    cd:77:f2:80:f6:fd:45:09:08:f1:fa:7b:b1:82:f1:
                    96:b4:02:bb:d9:0d:d7:2e:44:db:4b:76:5f:5e:65:
                    bf:ed:45:f2:8c:0b:07:27:d2:81:15:bf:74:a4:2f:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:E4:75:FB:20:6C:8F:8B:EF:03:18:0B:65:F0:EC:E3:7A:EC:FF
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:31:4f:ff:51:d7:e5:dc:60:c7:53:87:df:4b:97:c6:e0:06:
         ae:34:69:d4:68:ec:54:34:1c:50:da:a5:eb:c9:4b:65:2a:b7:
         53:c0:b2:b8:55:66:fa:b5:6f:b7:51:36:c9:65:91:69:21:a9:
         48:fa:96:98:43:be:fd:5a:31:53:de:a0:e9:95:06:8a:95:fa:
         18:5e:32:6c:ce:5d:81:23:ca:ec:59:c6:e5:64:4b:60:61:04:
         74:0f:c8:d5:49:8f:cd:17:fe:b7:c1:c0:8a:52:8f:8f:b6:2d:
         24:87:67:14:3b:71:cc:60:63:ca:8e:04:9f:2a:ea:7b:f3:dd:
         9b:3e:07:09:8f:93:18:13:0e:99:15:ef:04:9f:94:7d:6b:4b:
         c3:3b:f5:29:95:52:4f:8a:c7:1c:35:b2:9a:fa:b6:3f:2d:2e:
         2a:fe:71:b8:47:47:54:73:9a:57:c6:40:ea:7c:a7:2d:1e:71:
         8c:e4:e6:c1:50:78:13:0a:d0:96:ba:da:e8:57:0f:d8:02:f1:
         9a:8d:0e:47:80:a8:4c:bb:75:56:71:f1:07:aa:0a:4d:d7:71:
         e2:54:fa:70:b6:8f:a8:eb:1d:52:45:94:da:f1:2d:61:54:f1:
         bf:6c:7b:29:2b:47:7d:28:39:b1:12:d1:34:fd:a0:5e:61:8f:
         46:1a:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----