Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373030313a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          O0ldgeOZ624RvcnjRXiTCYOdg2Onm+jWRksfw5QQghM=
Subject key identifier:   5F:EF:B8:14:BD:4D:46:8F:A1:2C:BB:51:A8:05:69:AD:92:55:7F:23
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       51B8FEDC4CADFE46F4CA086D528AB8400DDCE4C1
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:22:26 +0000
ROA not before:           Wed 04 Feb 2026 20:17:26 +0000
ROA not after:            Wed 03 Feb 2027 20:22:26 +0000
asID:                     215126
IP address blocks:        2a14:7581:7001::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b8:fe:dc:4c:ad:fe:46:f4:ca:08:6d:52:8a:b8:40:0d:dc:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:17:26 2026 GMT
            Not After : Feb  3 20:22:26 2027 GMT
        Subject: CN=5FEFB814BD4D468FA12CBB51A80569AD92557F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:d6:a9:ce:46:fe:47:38:1e:56:a8:8c:ea:
                    28:9b:5e:54:b7:1d:07:d9:40:90:f5:c6:d7:e0:ab:
                    d6:4a:18:92:43:3b:99:95:6b:0c:f1:dd:c9:29:2a:
                    93:47:de:bc:5d:31:21:2a:af:7a:61:f7:4b:84:48:
                    30:3e:20:54:78:36:7d:26:99:12:6e:73:d7:2b:45:
                    67:1e:79:ee:0a:7c:f4:06:7e:43:ae:d0:58:44:24:
                    3c:42:cb:43:77:b3:74:55:0e:4b:8d:94:6c:54:76:
                    cb:7d:27:5f:65:2f:25:9d:9f:4d:50:77:9f:d9:09:
                    ea:d0:56:74:92:dc:ea:f9:f0:9f:4d:92:42:d5:4a:
                    86:67:87:26:77:97:ad:71:9d:d5:0d:11:3c:98:87:
                    f4:17:5a:12:f4:94:7b:51:97:c5:5f:6e:2d:37:5d:
                    5d:95:b5:e6:08:4a:09:13:7d:c3:fb:c4:46:37:d1:
                    23:2b:58:d0:fb:ef:f7:2e:cd:c8:f7:d7:8e:98:95:
                    cc:6f:da:a2:42:94:2c:a4:51:b3:1c:67:94:79:40:
                    df:a0:38:08:66:09:3d:8b:c4:1c:23:2b:8a:37:88:
                    48:5d:10:25:a8:6b:48:75:e0:43:c7:86:4d:fb:35:
                    7b:38:af:d5:de:68:10:fb:4a:9c:88:cc:64:74:56:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:B8:14:BD:4D:46:8F:A1:2C:BB:51:A8:05:69:AD:92:55:7F:23
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:04:bc:36:17:3e:f7:d0:a2:e8:e6:df:24:0a:02:43:e3:bb:
         96:1c:86:c7:fe:e7:fd:77:32:44:25:69:fa:64:b1:5e:33:7a:
         48:64:2a:cd:8f:bf:18:89:73:38:84:94:ec:83:52:9e:4c:5f:
         e4:45:86:61:af:b5:7b:1a:90:32:69:04:1d:ed:28:62:ae:3f:
         22:4e:03:c3:71:1a:e2:4c:36:73:a7:b3:54:49:be:82:b4:28:
         d0:98:50:37:a4:b7:ab:9f:04:b4:f1:49:4c:de:58:58:5b:98:
         bc:8a:1c:44:7f:36:b6:da:30:d9:1f:5e:b8:dc:44:3d:c9:7e:
         6b:99:6d:e6:82:2c:35:88:06:5f:54:0d:62:32:a0:81:31:ff:
         9b:6b:d8:28:7d:00:0d:ac:3d:b2:77:d5:1f:1e:56:74:ec:06:
         b3:1a:94:4b:d8:1e:45:a1:1e:87:49:ce:42:1c:c6:d3:89:8b:
         3f:4e:6e:71:4b:a6:b1:b8:98:3c:a4:f3:94:9b:b8:f6:1a:6c:
         c0:6d:ca:5b:bd:2e:c4:79:dc:36:96:f0:94:83:13:41:fe:30:
         b2:b6:36:f9:4b:ee:08:3e:30:97:a7:49:f8:67:f5:b0:e9:da:
         8d:aa:02:75:ca:19:a4:34:c9:f9:02:58:76:32:32:db:e2:77:
         ba:c1:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----