Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373130343a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          o7OjhRrwIqPFGbZBRk/XcNL2jjLVjcqkC7o9fQ9+ZDo=
Subject key identifier:   FC:99:10:F6:A7:9F:17:D0:36:FB:C3:AD:42:B0:43:28:02:5E:B2:95
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       40BF87046D40FDD739ECC5EBEE8742F267DE6FE5
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:31:33 +0000
ROA not before:           Wed 04 Feb 2026 20:26:33 +0000
ROA not after:            Wed 03 Feb 2027 20:31:33 +0000
asID:                     215126
IP address blocks:        2a14:7581:7104::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bf:87:04:6d:40:fd:d7:39:ec:c5:eb:ee:87:42:f2:67:de:6f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:26:33 2026 GMT
            Not After : Feb  3 20:31:33 2027 GMT
        Subject: CN=FC9910F6A79F17D036FBC3AD42B04328025EB295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:34:74:de:16:e1:91:43:63:cb:a2:cc:36:
                    ba:3b:3e:51:15:e9:fc:64:65:1c:3e:33:27:8c:e8:
                    89:1a:85:77:8d:68:a9:e6:8f:88:67:25:df:11:ec:
                    74:30:c7:fa:7d:cd:e3:83:ec:54:fe:7b:27:dc:2f:
                    15:c2:20:da:41:00:29:9c:e1:7c:fa:e2:99:5e:a4:
                    3b:d4:b8:94:c9:db:af:40:03:a8:a7:90:96:18:7b:
                    c8:aa:a7:18:cd:47:21:eb:2c:37:d3:c0:26:25:46:
                    64:29:7a:15:36:20:8d:24:e9:84:b7:4e:bf:2b:22:
                    47:60:db:f5:9e:6d:92:d4:be:3b:0f:d1:7f:7e:89:
                    e6:9c:7b:78:e7:38:62:28:bc:66:99:0f:d5:3d:19:
                    78:ae:f2:d8:cb:3a:92:f5:6f:5e:49:ca:3d:d8:3d:
                    d1:41:69:af:2d:01:6a:e3:ba:83:0d:24:cb:ca:c0:
                    b2:98:f6:47:65:09:c1:ad:11:dd:8c:a6:35:3e:ef:
                    3d:cc:25:77:d1:eb:02:6b:74:2a:05:c0:66:3c:70:
                    9d:ae:e8:ff:89:87:bf:b0:a5:e5:3d:ba:6a:02:53:
                    01:b9:d8:e4:3e:61:b0:03:b8:bc:50:3a:ea:4f:2b:
                    c8:bc:ba:ba:ba:a4:8d:f1:13:40:67:c2:98:4c:5b:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:99:10:F6:A7:9F:17:D0:36:FB:C3:AD:42:B0:43:28:02:5E:B2:95
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7104::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:91:0e:83:58:51:2a:8a:5f:48:96:ed:91:f2:38:94:d2:33:
         ca:1f:3f:1f:cd:ee:2f:05:90:29:a9:97:aa:fd:75:37:ae:71:
         61:92:3b:4f:13:e2:37:c3:8b:c1:a2:e6:8c:8a:fd:49:7a:6b:
         93:fc:1a:57:49:78:84:43:44:bd:77:95:de:46:3d:67:31:d1:
         36:56:89:30:75:89:7c:8e:80:de:8c:d7:69:bd:34:1b:cd:48:
         ca:44:98:93:49:7f:21:1e:f6:f4:f6:03:cb:3b:25:1a:be:13:
         bd:7e:85:8f:52:19:86:39:c2:8c:59:37:48:c6:1d:a6:b8:78:
         a1:07:75:e4:17:75:29:cd:5f:15:c3:4f:55:22:d9:55:1d:37:
         38:1e:c7:70:a8:8f:1f:09:2a:79:13:1e:77:bd:b9:e5:74:07:
         ce:4e:2f:8c:d0:13:a5:99:1c:28:0e:50:a6:34:76:2d:ad:e2:
         b4:48:b8:7b:21:17:ec:2b:64:fa:7d:97:b1:d9:cb:d5:b4:28:
         99:18:fe:b9:8f:e9:74:73:4f:f3:0a:11:0b:fa:72:8e:35:b3:
         00:0e:66:05:73:b2:3c:10:a9:bc:a2:1f:33:e5:71:b6:0c:c0:
         5c:90:34:22:d6:35:e8:bb:a8:0c:dc:10:eb:39:4d:70:4a:ea:
         c5:95:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----