Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          RUjpxPHoomc/vD+uMWf0qyYyZvbaLDnfJZWBnlGjjBk=
Subject key identifier:   8D:9F:1E:E3:FF:F0:70:2C:34:63:DC:BC:AE:37:1F:06:22:1B:5A:75
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       7216F6C7C3C0EFAB40F2BCF3FD344571B5352C37
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:04 +0000
ROA not before:           Sun 29 Mar 2026 19:17:04 +0000
ROA not after:            Sun 28 Mar 2027 19:22:04 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed08::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:f6:c7:c3:c0:ef:ab:40:f2:bc:f3:fd:34:45:71:b5:35:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:04 2026 GMT
            Not After : Mar 28 19:22:04 2027 GMT
        Subject: CN=8D9F1EE3FFF0702C3463DCBCAE371F06221B5A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:0d:7a:89:8e:a2:be:9b:f1:0b:0e:92:34:
                    5d:9d:6d:5d:46:c6:b0:bb:62:a7:e6:db:d1:b3:46:
                    1c:5b:d8:02:57:b3:91:53:29:a0:28:1c:96:4d:83:
                    71:bb:84:8f:88:4e:25:08:73:2c:ca:6d:a1:e9:dc:
                    4d:d5:99:7f:ef:f8:6d:14:4a:23:47:54:08:25:d9:
                    57:ad:43:d2:9f:bd:f8:80:ac:95:fa:d2:ac:3c:f3:
                    10:a3:3b:88:a4:08:65:d7:9d:36:67:81:70:fc:38:
                    50:66:41:35:5f:70:93:d4:d7:54:52:7e:d7:df:c4:
                    b6:70:5f:63:22:f5:37:49:12:1b:42:e7:92:58:da:
                    5e:24:6d:09:b1:a0:78:38:d2:ff:58:c8:b5:a3:91:
                    cc:b3:2a:75:15:ad:a1:2b:9a:6f:15:42:62:20:60:
                    16:6e:80:ed:42:e8:97:5b:ca:e3:16:2a:10:ed:78:
                    f6:89:c4:45:86:87:08:9e:4d:71:ad:6d:2a:08:e9:
                    50:d9:d4:ef:dd:c9:56:1b:9c:29:d9:f8:7e:d9:56:
                    a8:23:b0:d0:18:4a:44:52:16:44:b3:fa:37:4f:04:
                    14:ef:20:dd:46:66:47:22:7a:12:71:1f:b1:32:a7:
                    93:47:16:69:13:c3:2a:25:b3:c0:84:5f:39:e1:18:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:1E:E3:FF:F0:70:2C:34:63:DC:BC:AE:37:1F:06:22:1B:5A:75
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed08::/46

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:ab:e3:e4:e8:7e:c9:1e:52:7e:b3:5f:65:7f:72:1b:b9:
         b5:00:29:69:10:69:8c:d7:cf:a6:76:ae:42:0a:02:c2:28:a1:
         a7:5f:83:df:7b:3e:23:04:6e:4a:df:69:b7:5b:da:bf:3b:d6:
         e4:de:a8:83:32:e9:e3:2e:bd:d5:a0:c9:51:75:3b:a3:26:ae:
         cc:aa:de:6e:7c:4f:2b:df:8d:a2:d5:44:04:61:97:e5:1d:82:
         9d:93:21:8a:ef:70:1f:64:e0:d3:18:a5:09:a2:e7:8b:11:74:
         ea:03:48:62:01:09:2e:3f:ea:06:00:bf:48:a0:3b:2d:7b:3a:
         86:87:f6:34:99:f9:ed:df:80:71:2a:60:4e:8b:d3:06:a2:d2:
         39:f8:7f:a9:45:5a:25:b1:88:d2:97:2b:c6:e9:75:ae:73:23:
         31:c6:23:82:ce:df:03:79:3e:53:9d:bc:37:4f:f7:8c:4c:32:
         cd:aa:34:a5:db:25:54:f0:5b:2f:e5:ff:40:0b:e8:3f:47:d2:
         ff:ac:0e:e3:5a:65:d8:57:d7:79:7e:52:49:b8:75:75:a8:d5:
         a5:18:c6:36:06:28:7b:31:cc:bd:9d:65:cb:80:4d:30:41:b9:
         36:60:f7:ff:a4:7d:2d:d8:cf:0a:9b:a9:e6:bf:6f:03:fa:bc:
         c9:fe:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----