Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373230333a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          4LZbUmS1Y1pZidKuywwZ/A25PIJX0tlJabaWXdPzxzU=
Subject key identifier:   3B:47:62:91:D6:73:90:57:FF:BA:A2:DA:B6:7C:F5:46:A2:21:DE:DE
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       73B710E1C5E37398D56385596AB6423081397A09
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:32:53 +0000
ROA not before:           Wed 04 Feb 2026 20:27:53 +0000
ROA not after:            Wed 03 Feb 2027 20:32:53 +0000
asID:                     215126
IP address blocks:        2a14:7581:7203::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b7:10:e1:c5:e3:73:98:d5:63:85:59:6a:b6:42:30:81:39:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:27:53 2026 GMT
            Not After : Feb  3 20:32:53 2027 GMT
        Subject: CN=3B476291D6739057FFBAA2DAB67CF546A221DEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:f1:d0:08:28:5b:d7:86:ba:2b:7d:8b:39:
                    9a:72:d8:e7:da:e3:34:dd:a0:c0:b5:e9:f3:db:a8:
                    19:0f:81:ce:95:9d:3d:81:82:60:fd:c8:0b:f0:2d:
                    76:5e:b0:67:c6:54:97:cf:c2:34:57:27:7c:59:ab:
                    28:9b:c2:14:6c:93:73:95:e7:4f:f7:69:36:1f:bd:
                    29:bc:92:cc:48:f4:da:5e:8f:e3:77:16:cc:c0:63:
                    51:42:47:9a:be:39:7c:3b:47:7c:f1:55:5c:32:7b:
                    f1:73:81:92:77:5d:79:77:5a:18:ec:a9:cc:5b:0b:
                    1d:1d:c2:86:5a:6c:c9:88:b4:5c:ac:3c:f0:4a:5e:
                    58:a1:85:0d:06:a4:5c:59:cc:d5:37:8c:c3:df:d3:
                    dd:35:75:e8:7c:8e:fa:d2:ac:ca:1b:98:d7:d1:5b:
                    1b:2b:fc:06:2d:0e:ae:d6:ab:af:07:15:56:c5:8b:
                    ed:07:77:9d:f0:a0:e9:f7:7c:0a:89:50:80:6d:03:
                    15:ac:d4:22:33:79:39:2d:93:cc:2b:5a:5f:a7:c3:
                    e2:43:d4:4f:a6:de:ee:8b:6e:c3:a2:d8:cf:3d:c4:
                    99:6b:49:ba:28:59:7e:6c:f3:db:0f:92:c9:42:5b:
                    98:d2:fc:b9:ee:e3:f4:90:d2:b7:c2:ad:5c:1e:1c:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:62:91:D6:73:90:57:FF:BA:A2:DA:B6:7C:F5:46:A2:21:DE:DE
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7203::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:be:56:bc:ef:16:a1:fb:42:21:89:90:3f:63:72:81:e9:
         eb:03:15:31:0f:52:fb:27:82:b3:55:e8:ed:2e:15:8f:2a:96:
         2e:46:a0:8b:5c:0a:8a:de:bf:a2:f5:5a:44:ab:d1:aa:fc:e7:
         96:08:a0:47:a0:53:9c:f7:a0:60:1f:a9:b4:a0:e0:cd:2f:61:
         71:07:dd:e0:e4:a6:ca:c6:65:10:33:ee:28:a7:cb:13:b0:0c:
         5a:55:8e:b0:6f:27:80:a3:2a:36:73:6b:d9:a8:62:2e:55:2e:
         55:0a:f9:2b:ad:2f:2b:69:03:76:6d:37:b4:91:2d:2e:91:2e:
         0e:b4:ee:bc:84:ed:9a:1a:da:93:5d:5f:7c:2e:87:c4:0e:60:
         94:17:9c:e4:3a:f5:11:c1:90:86:5e:e3:34:5e:c0:f2:50:1e:
         71:4c:a1:e3:f9:81:f8:3c:45:e4:01:4a:9c:26:c5:dc:b5:a7:
         06:12:ad:f8:11:8d:95:ba:af:85:2a:63:3c:90:a9:b8:74:1d:
         52:ad:e6:e3:4c:83:1b:b5:28:81:5c:28:53:b3:22:14:c2:b6:
         ce:17:e2:c2:3a:39:4c:ce:bf:3c:81:3f:5d:75:0b:6c:19:81:
         dc:91:4d:68:51:bb:4f:71:ad:43:9e:72:3e:65:08:2e:64:50:
         e9:d2:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----