Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430343a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656430343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          fVyrd4VEqRr2kSXMtf+qHaVIpPuQPEKBg2l5A/qG7c4=
Subject key identifier:   8B:56:0F:60:02:AC:98:3E:68:F0:BE:57:B3:52:23:22:22:2B:20:A6
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       105637A82A67A2DDF4A69789B8DCF63E54442C23
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:14 +0000
ROA not before:           Sun 29 Mar 2026 19:17:14 +0000
ROA not after:            Sun 28 Mar 2027 19:22:14 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed04::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:56:37:a8:2a:67:a2:dd:f4:a6:97:89:b8:dc:f6:3e:54:44:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:14 2026 GMT
            Not After : Mar 28 19:22:14 2027 GMT
        Subject: CN=8B560F6002AC983E68F0BE57B3522322222B20A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:35:35:6c:aa:78:8b:1a:80:52:2c:fb:c2:
                    97:df:79:b2:15:27:ac:7e:91:fd:51:34:08:2f:3b:
                    8b:28:d8:16:c5:95:be:11:42:80:ac:fe:f3:69:e2:
                    aa:cb:cf:b0:97:ff:64:b8:55:ec:cf:6d:35:be:52:
                    c6:4b:25:8f:0a:2b:c8:f2:d2:1f:6c:b0:60:ce:01:
                    e6:bf:33:56:34:1e:c3:fa:61:25:9b:4a:3b:79:6f:
                    21:e3:3b:c0:a6:2e:1f:4e:4b:d1:9d:51:0a:a9:a8:
                    b5:0c:9c:a1:20:42:ad:4f:73:d2:7c:3b:5e:1d:9a:
                    30:4b:0b:58:33:e1:bc:4f:c1:e5:e9:57:b1:0a:90:
                    fe:16:8b:47:28:7d:13:4c:23:d3:8c:73:f4:97:b6:
                    c3:8a:40:5b:5c:c1:e0:d5:30:e4:3c:dc:f3:de:2d:
                    9c:da:3c:3d:73:29:65:04:14:f0:bf:e8:5d:ec:fd:
                    3d:b4:73:35:d7:47:8e:16:77:16:34:50:dc:67:54:
                    4a:3a:06:b1:00:4e:f5:60:1c:29:7e:56:77:95:4c:
                    58:22:ba:76:4d:ab:68:0f:7c:cf:5e:cd:8b:ba:59:
                    2d:ba:98:9a:68:e3:50:dc:68:1f:9c:b1:81:4c:3b:
                    4b:74:1b:7a:6d:d9:07:57:80:67:aa:1b:69:52:2f:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:56:0F:60:02:AC:98:3E:68:F0:BE:57:B3:52:23:22:22:2B:20:A6
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed04::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:9f:9a:16:c5:a7:25:fb:28:cb:7b:35:53:2f:c6:21:88:
         b3:16:99:3e:76:2d:30:3a:08:31:f7:4d:14:03:51:f1:68:45:
         66:96:7d:04:ac:9b:a3:23:8f:bb:5b:e9:01:47:0c:93:41:32:
         79:54:20:42:6b:ad:ec:fe:2f:ae:d7:40:a7:ef:60:83:1f:87:
         69:d5:7d:d7:bc:91:02:0c:21:4f:71:7c:54:ed:60:9c:1f:2d:
         90:ad:ff:08:2b:7b:72:18:c6:2b:bc:9b:a8:d9:8e:90:c2:4b:
         60:e8:07:8f:83:80:3d:64:6e:23:fc:45:40:cb:d8:9c:45:51:
         9f:3a:e3:d8:85:fe:22:7c:1c:74:61:6b:46:9b:dd:75:09:6d:
         79:2c:61:d2:82:34:6c:9e:ed:98:b3:1b:ba:2d:f8:fa:85:e9:
         42:c7:b0:0a:e2:ad:39:66:cf:42:7c:03:e4:f3:59:25:ae:cf:
         fb:3e:7c:15:64:50:3a:22:fc:e9:f1:1e:17:9c:72:f1:ec:62:
         98:6d:8a:11:f3:77:75:5d:ae:08:f2:dd:d5:59:a6:a7:82:65:
         09:19:93:f4:9f:44:2e:db:ee:68:ef:2f:4a:49:48:47:a8:cb:
         83:cf:b2:dd:7a:f6:39:0e:b1:c4:f4:ad:a0:c2:e8:71:cf:cc:
         c4:1a:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----