Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373330303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          34/DJJmtvJj5rBe4Faq32rij8crLnm5rlqDClWICcj4=
Subject key identifier:   4E:5F:9E:E9:91:EB:71:A8:EC:F0:95:37:64:70:2E:F2:9B:5D:12:F2
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       0CCC4EEF7AD528D75784F6BB4E57B8A63E2B25F2
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:35:01 +0000
ROA not before:           Wed 04 Feb 2026 20:30:01 +0000
ROA not after:            Wed 03 Feb 2027 20:35:01 +0000
asID:                     215126
IP address blocks:        2a14:7581:7300::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:4e:ef:7a:d5:28:d7:57:84:f6:bb:4e:57:b8:a6:3e:2b:25:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:30:01 2026 GMT
            Not After : Feb  3 20:35:01 2027 GMT
        Subject: CN=4E5F9EE991EB71A8ECF0953764702EF29B5D12F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:74:8a:06:cf:24:fd:9d:8c:6d:d9:07:fe:
                    1a:de:32:c4:f9:1b:25:66:77:46:01:fd:60:7f:da:
                    83:38:59:32:e5:9b:fa:88:89:4a:4d:5a:2d:bf:fe:
                    dc:98:bd:10:28:39:28:7d:41:66:2a:52:9b:7b:55:
                    1e:ca:6b:17:f9:a1:90:53:d6:ec:41:34:20:f1:83:
                    c1:6b:ad:70:9c:20:d6:e5:bc:b1:3a:ef:36:49:96:
                    1c:87:29:0f:11:0f:2a:74:c8:a4:a3:65:df:93:a2:
                    0f:09:ff:9e:20:e4:7c:44:3d:61:e4:e1:86:0e:86:
                    03:3b:5c:df:7b:03:53:7d:a8:52:96:d4:7b:2c:24:
                    3f:0d:9f:92:d6:f1:cc:c4:f8:e7:b8:78:cb:8c:08:
                    fd:c1:8e:93:e6:79:8b:b0:b5:0d:cb:38:fa:6d:29:
                    bf:1f:3e:cd:a0:11:aa:77:69:60:31:73:ff:34:d5:
                    3d:3c:dc:de:f6:5b:95:d4:2b:42:45:f0:11:66:f5:
                    1b:d8:97:cc:9d:52:4d:f8:f0:73:9b:df:06:7d:68:
                    08:17:c5:4b:2c:ed:5e:b1:82:8d:3b:c4:2c:6c:38:
                    a1:ce:5e:be:ae:0c:0c:00:bf:20:e8:83:42:19:fc:
                    58:53:f4:b5:eb:71:07:7a:a1:4d:39:82:80:9e:cb:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5F:9E:E9:91:EB:71:A8:EC:F0:95:37:64:70:2E:F2:9B:5D:12:F2
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7300::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:28:0f:05:93:4e:dd:c2:f9:90:92:eb:72:d9:97:d4:d5:
         72:68:ff:d7:16:1e:2b:15:28:b0:ea:72:f7:95:0a:25:54:c6:
         6d:ba:98:6a:6f:4f:10:07:2a:d0:fa:65:96:9c:63:4c:17:dc:
         18:2e:34:bb:dc:b8:52:c3:1c:78:09:6f:d3:90:95:d2:0d:ef:
         99:83:b1:de:0b:d7:f1:af:aa:f4:d7:99:dc:ed:76:ac:38:4e:
         fa:90:87:51:38:56:2f:38:d9:9d:e2:da:cf:be:8c:70:83:a1:
         53:90:14:95:29:c6:1a:11:74:8e:5b:33:6a:7b:15:8b:02:02:
         de:68:4c:63:24:d7:b8:69:17:bf:0c:64:a1:c7:fc:b0:87:fe:
         b3:b7:4c:a8:4e:b6:4b:0c:5e:af:74:17:9d:3d:15:f1:5d:82:
         4e:b3:e9:6e:11:20:33:a6:00:86:48:cd:30:4f:40:b5:70:69:
         d9:50:2c:07:e0:98:19:11:5d:71:9e:cf:2e:0d:46:f1:f3:43:
         00:e0:90:5d:b7:95:88:53:17:09:31:ac:79:6d:89:df:a6:9b:
         61:cf:d2:a4:cb:50:19:55:ba:8d:4f:54:b9:23:59:27:99:cf:
         32:b9:da:fb:ec:62:02:88:88:ee:ed:af:cb:3a:15:5c:ec:05:
         19:d7:16:fe
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUDMxO73rVKNdXhPa7Tle4pj4rJfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDMwMDFaFw0yNzAyMDMyMDM1MDFaMDMxMTAvBgNV
BAMTKDRFNUY5RUU5OTFFQjcxQThFQ0YwOTUzNzY0NzAyRUYyOUI1RDEyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEHSKBs8k/Z2MbdkH/hreMsT5
GyVmd0YB/WB/2oM4WTLlm/qIiUpNWi2//tyYvRAoOSh9QWYqUpt7VR7Kaxf5oZBT
1uxBNCDxg8FrrXCcINblvLE67zZJlhyHKQ8RDyp0yKSjZd+Tog8J/54g5HxEPWHk
4YYOhgM7XN97A1N9qFKW1HssJD8Nn5LW8czE+Oe4eMuMCP3BjpPmeYuwtQ3LOPpt
Kb8fPs2gEap3aWAxc/801T083N72W5XUK0JF8BFm9RvYl8ydUk348HOb3wZ9aAgX
xUss7V6xgo07xCxsOKHOXr6uDAwAvyDog0IZ/FhT9LXrcQd6oU05goCeyxqBAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUTl+e6ZHrcajs8JU3ZHAu8ptdEvIwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzMzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMAMA0GCSqGSIb3DQEBCwUAA4IBAQCU
0SgPBZNO3cL5kJLrctmX1NVyaP/XFh4rFSiw6nL3lQolVMZtuphqb08QByrQ+mWW
nGNMF9wYLjS73LhSwxx4CW/TkJXSDe+Zg7HeC9fxr6r015nc7XasOE76kIdROFYv
ONmd4trPvoxwg6FTkBSVKcYaEXSOWzNqexWLAgLeaExjJNe4aRe/DGShx/ywh/6z
t0yoTrZLDF6vdBedPRXxXYJOs+luESAzpgCGSM0wT0C1cGnZUCwH4JgZEV1xns8u
DUbx80MA4JBdt5WIUxcJMax5bYnfppthz9Kky1AZVbqNT1S5I1knmc8yudr77GIC
iIju7a/LOhVc7AUZ1xb+
-----END CERTIFICATE-----