Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430303a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656430303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          EhMvxb2vWfc9lFXXZGl7CmavGLniiX9q5ciF8omyJJM=
Subject key identifier:   54:AA:2B:51:C2:5B:0C:3B:80:67:2C:DF:70:7C:29:8F:5A:F5:38:DE
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       20D2810D1700F94EF622B2D9B9199132B0B47DA8
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:03 +0000
ROA not before:           Sun 29 Mar 2026 19:17:03 +0000
ROA not after:            Sun 28 Mar 2027 19:22:03 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed00::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:81:0d:17:00:f9:4e:f6:22:b2:d9:b9:19:91:32:b0:b4:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:03 2026 GMT
            Not After : Mar 28 19:22:03 2027 GMT
        Subject: CN=54AA2B51C25B0C3B80672CDF707C298F5AF538DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:a9:c4:89:59:f6:85:bf:31:cb:4b:67:4d:
                    cf:29:8e:f7:15:c8:71:a4:08:b3:0a:2d:2f:0e:e4:
                    b5:07:32:e3:a8:12:c9:53:d3:7e:24:6a:76:b3:1c:
                    9c:80:67:a5:60:51:1a:8b:98:e2:64:b8:9a:fe:c4:
                    d5:ad:79:27:93:4e:67:cf:90:c7:1c:5a:e2:f9:ba:
                    2e:40:33:ab:31:62:bc:10:eb:8a:90:69:bf:c1:a7:
                    20:38:4c:55:2d:be:da:a9:62:f1:c4:7d:5c:f8:44:
                    aa:34:90:c9:6d:78:c0:76:b9:3b:45:35:13:39:d4:
                    f0:e6:5b:03:60:2a:c7:87:69:83:36:01:a2:a9:ad:
                    27:79:f8:5f:ed:58:9a:8a:77:e9:64:49:84:47:68:
                    9a:49:c8:04:b2:51:92:15:2f:ee:84:40:7d:45:9a:
                    df:5f:be:77:12:33:fb:97:5f:50:f0:83:6c:a7:14:
                    39:8d:03:16:aa:83:38:cc:3c:77:d5:8a:b5:2c:6b:
                    c1:07:40:f2:1e:f8:f4:aa:a7:3e:3d:f5:03:26:26:
                    fa:2d:55:4c:bd:eb:6f:27:54:69:71:00:b8:74:03:
                    a4:00:86:3b:1f:c3:67:73:d9:0f:ff:4f:7c:f8:1c:
                    36:94:2c:7a:34:f8:6b:fa:e0:eb:53:e9:ca:14:11:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AA:2B:51:C2:5B:0C:3B:80:67:2C:DF:70:7C:29:8F:5A:F5:38:DE
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed00::/46

    Signature Algorithm: sha256WithRSAEncryption
         01:be:4d:1f:b4:05:52:29:e7:2d:49:2b:ef:2e:30:dd:0f:13:
         4f:5e:ab:76:f6:86:55:45:e4:bc:14:36:f8:05:27:8d:b3:3c:
         83:54:9b:36:a9:15:96:02:11:cc:5c:8d:a9:df:06:a2:6b:05:
         96:c0:dd:98:80:7e:09:05:93:2b:26:1e:0a:70:58:61:3c:09:
         f6:16:84:03:5a:69:a9:03:42:f7:74:5d:d4:17:c3:45:28:2d:
         c2:6d:c2:74:16:c1:b8:33:50:45:de:19:fc:c6:8b:1f:aa:75:
         17:79:55:fb:e5:b5:4c:06:b3:8c:05:8c:a9:7c:06:12:aa:03:
         06:95:7a:9a:ec:52:1c:35:f4:99:68:b0:46:08:0a:0d:f3:56:
         21:e9:d3:5a:2d:1c:0b:de:f8:ec:dd:38:97:c1:88:e0:5a:f3:
         42:7e:75:f7:98:27:47:24:85:d4:f4:a0:04:a8:ac:bf:be:48:
         a2:04:15:7e:dd:f1:04:f5:ae:3d:a2:09:33:50:8c:dd:c1:b2:
         ba:9f:17:a5:6e:d9:05:59:8b:1d:36:31:48:43:9a:45:e9:70:
         20:a2:ac:fb:b7:a3:bf:37:a0:fd:78:6d:8a:69:44:b3:ce:2a:
         62:5f:08:73:ae:86:a3:5e:35:59:14:48:c1:09:46:f6:54:ad:
         63:77:94:f3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUINKBDRcA+U72IrLZuRmRMrC0fagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDNaFw0yNzAzMjgxOTIyMDNaMDMxMTAvBgNV
BAMTKDU0QUEyQjUxQzI1QjBDM0I4MDY3MkNERjcwN0MyOThGNUFGNTM4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJW6nEiVn2hb8xy0tnTc8pjvcV
yHGkCLMKLS8O5LUHMuOoEslT034kanazHJyAZ6VgURqLmOJkuJr+xNWteSeTTmfP
kMccWuL5ui5AM6sxYrwQ64qQab/BpyA4TFUtvtqpYvHEfVz4RKo0kMlteMB2uTtF
NRM51PDmWwNgKseHaYM2AaKprSd5+F/tWJqKd+lkSYRHaJpJyASyUZIVL+6EQH1F
mt9fvncSM/uXX1Dwg2ynFDmNAxaqgzjMPHfVirUsa8EHQPIe+PSqpz499QMmJvot
VUy9628nVGlxALh0A6QAhjsfw2dz2Q//T3z4HDaULHo0+Gv64OtT6coUEfFpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUVKorUcJbDDuAZyzfcHwpj1r1ON4wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzMDMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0AMA0GCSqGSIb3DQEBCwUAA4IBAQAB
vk0ftAVSKectSSvvLjDdDxNPXqt29oZVReS8FDb4BSeNszyDVJs2qRWWAhHMXI2p
3waiawWWwN2YgH4JBZMrJh4KcFhhPAn2FoQDWmmpA0L3dF3UF8NFKC3CbcJ0FsG4
M1BF3hn8xosfqnUXeVX75bVMBrOMBYypfAYSqgMGlXqa7FIcNfSZaLBGCAoN81Yh
6dNaLRwL3vjs3TiXwYjgWvNCfnX3mCdHJIXU9KAEqKy/vkiiBBV+3fEE9a49ogkz
UIzdwbK6nxelbtkFWYsdNjFIQ5pF6XAgoqz7t6O/N6D9eG2KaUSzzipiXwhzroaj
XjVZFEjBCUb2VK1jd5Tz
-----END CERTIFICATE-----