Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373131303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          vKJFzxxFBblIRK0w6uFf5tz2ZmVKTGM2sTXnS2bAz9g=
Subject key identifier:   9F:0B:33:A7:0A:72:96:97:38:41:7A:C4:6B:01:98:F7:CA:3E:59:D6
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       02518EBE23FE9FC54FB6B030AFEC91D9297481FC
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 28 Jan 2026 23:57:42 +0000
ROA not before:           Wed 28 Jan 2026 23:52:42 +0000
ROA not after:            Wed 27 Jan 2027 23:57:42 +0000
asID:                     215126
IP address blocks:        2a14:7581:7110::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:8e:be:23:fe:9f:c5:4f:b6:b0:30:af:ec:91:d9:29:74:81:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Jan 28 23:52:42 2026 GMT
            Not After : Jan 27 23:57:42 2027 GMT
        Subject: CN=9F0B33A70A72969738417AC46B0198F7CA3E59D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:6f:b3:a7:16:61:f1:8b:4b:95:64:b0:e0:
                    84:96:61:55:70:da:fa:31:bd:3e:fd:8b:08:fd:09:
                    21:82:1c:65:2c:ca:be:a5:89:03:8e:0b:bb:6a:2b:
                    3a:d5:9a:f5:e4:6e:62:ad:d1:8d:43:26:5c:a6:0c:
                    dc:5d:94:65:ba:7f:ab:88:43:9e:c4:97:79:38:da:
                    77:3b:81:8b:81:00:fe:02:d4:05:87:f8:99:34:a8:
                    61:0b:b4:6d:f9:0d:21:9f:4a:7b:68:1d:f2:4c:c0:
                    56:76:1d:ce:71:27:0d:43:49:52:cc:92:5d:e4:8a:
                    0a:8a:4e:dd:7c:f6:19:92:36:8d:49:d2:6e:b9:51:
                    e6:1d:f8:98:d2:f6:8d:a2:77:f8:4b:f6:0b:65:5f:
                    8c:93:3a:26:b0:ad:1b:2c:86:c9:85:24:5d:ff:7f:
                    88:ad:c8:80:97:9a:ba:c0:7c:25:5e:f9:8b:5d:9e:
                    cc:d2:4c:7e:ba:19:6d:53:1d:f6:39:fc:65:a1:87:
                    bc:ac:8c:19:e8:50:ab:d4:b2:8a:50:4e:44:04:4a:
                    24:ea:7d:f3:02:e2:73:ce:2e:44:de:3b:e8:7f:ba:
                    33:f1:37:9e:62:23:5e:80:30:0a:79:b6:4e:14:cc:
                    fe:2e:0f:4d:73:4e:ee:fc:53:b7:2e:56:c2:60:f1:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:33:A7:0A:72:96:97:38:41:7A:C4:6B:01:98:F7:CA:3E:59:D6
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7110::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:cb:3b:97:93:f6:89:d5:35:3b:4e:19:44:3c:1e:92:de:
         45:72:9b:1d:c3:df:6d:19:07:9d:b9:ae:16:c0:01:3c:33:b9:
         52:e9:85:5f:10:fb:e8:72:30:6a:e0:9b:aa:9d:66:10:a3:d7:
         34:91:2f:37:f7:7d:44:ac:77:31:92:76:92:fc:69:e7:09:01:
         bc:8a:b7:e5:78:7a:c9:3a:54:18:b0:86:2f:7b:24:9b:2b:84:
         df:1f:62:7d:45:43:ce:cf:83:9c:c5:88:e1:b7:2d:a9:09:9e:
         35:fb:90:81:c7:c0:13:cc:5c:85:41:19:09:b0:16:2c:c2:44:
         73:c0:30:e3:5e:01:4e:89:34:af:74:b1:cd:2e:93:25:fa:20:
         1d:d5:85:d6:c3:bd:e8:1c:42:96:ac:01:ab:f9:63:37:9e:bd:
         a1:0c:ba:38:c3:08:37:e0:ef:12:e9:fa:5a:88:0c:9e:e8:91:
         10:5b:7d:1f:5d:91:8c:05:fe:81:9e:49:61:0b:6a:e0:e9:6e:
         a9:5b:68:6c:a2:49:9f:f1:85:01:e5:66:59:27:8c:f8:a1:f4:
         17:b7:b0:f4:53:2e:bb:29:7c:45:4d:1a:b6:e5:e1:c0:41:88:
         5f:75:8d:7d:ef:bb:32:9f:82:fd:81:7e:03:34:23:d4:dd:fe:
         b2:66:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----