Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430633a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656430633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          CRU3A6zUdxH7WMVQ/NZBjZbfHntHy8PRNfzhYa2Bvdg=
Subject key identifier:   80:34:D4:DF:7C:E2:04:BC:0F:8F:41:45:E8:C5:C2:D9:C3:5D:1E:F1
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       201A928244107EF3AB4C819817E2535F3BF703C2
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:05 +0000
ROA not before:           Sun 29 Mar 2026 19:17:05 +0000
ROA not after:            Sun 28 Mar 2027 19:22:05 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed0c::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:92:82:44:10:7e:f3:ab:4c:81:98:17:e2:53:5f:3b:f7:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:05 2026 GMT
            Not After : Mar 28 19:22:05 2027 GMT
        Subject: CN=8034D4DF7CE204BC0F8F4145E8C5C2D9C35D1EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:c2:a4:c2:fe:36:9f:13:44:67:f2:4d:42:
                    c0:db:c7:39:97:df:82:28:40:4d:84:39:96:d1:d0:
                    e1:e7:25:29:27:28:8c:fd:11:68:f4:62:d5:61:74:
                    12:50:f7:38:8c:57:ac:ed:e3:9f:22:3c:0f:c9:be:
                    33:f0:ce:61:0c:76:de:4c:cd:fb:6a:75:48:b2:21:
                    6e:79:c3:39:e8:f5:ea:d3:dc:02:40:08:24:d8:57:
                    d2:7e:c4:70:0f:61:a1:c3:0a:ae:32:f6:3e:cf:28:
                    94:eb:35:57:29:27:1c:71:7e:50:5a:ce:63:e8:8a:
                    ff:32:88:88:0b:0c:c7:1a:84:ab:bc:98:b0:ad:a5:
                    b4:c0:39:b9:d0:e7:6c:c5:88:5d:d7:88:c9:2b:53:
                    dc:4e:a3:e4:d0:f9:97:ee:b4:bc:cd:a3:78:17:40:
                    6b:78:9b:fe:38:9b:4f:82:f1:6e:15:0a:ab:f4:1a:
                    7b:8e:77:2b:45:da:80:fd:00:a7:37:45:1e:b7:cf:
                    23:4d:27:5a:2f:07:d7:bd:9b:31:2f:51:2f:0b:5b:
                    0e:26:3c:f7:88:e9:67:4b:57:8c:0b:d8:de:6c:a5:
                    10:9e:c3:a9:db:35:2b:16:24:b6:eb:76:8c:fb:d0:
                    bb:23:11:27:fb:4e:08:77:9b:a8:f2:ee:5c:e2:c7:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:D4:DF:7C:E2:04:BC:0F:8F:41:45:E8:C5:C2:D9:C3:5D:1E:F1
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed0c::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:b4:2c:a5:57:07:01:b7:86:48:9d:33:77:69:41:24:95:
         70:b0:26:54:69:44:bc:39:5c:e3:23:d0:fa:2c:16:ab:65:8c:
         be:d9:79:76:c9:d3:7a:63:a3:c0:17:7f:b1:ed:b6:5f:e7:7a:
         e2:bd:25:e2:68:b5:e7:a5:93:6b:cb:1b:d7:e2:d0:64:70:7f:
         76:61:7e:38:3c:9a:48:67:7d:1e:23:4c:bb:9e:4e:ff:62:85:
         13:27:a2:3b:9b:ed:5d:7d:18:ba:9c:1f:db:8a:7d:5b:de:e3:
         1c:26:e4:dc:a3:83:b5:f4:34:07:98:2f:52:41:05:e5:13:dd:
         bc:bf:39:3a:3a:d9:af:3d:a6:62:bf:35:26:ca:06:80:f8:df:
         92:14:1b:9d:fb:35:d5:d8:f1:45:eb:db:b2:ba:f3:d2:ca:45:
         85:39:1b:c4:e0:d4:ed:7d:72:4a:04:74:43:38:7d:7a:a9:87:
         20:08:6a:d1:0b:f5:8f:a1:b2:10:5e:27:2d:07:a6:e7:9f:f3:
         48:af:e1:8d:86:2c:30:a1:44:dd:43:df:d3:ea:86:e2:b3:75:
         03:1d:81:06:b3:9c:e8:bd:89:0d:fc:a9:13:57:de:ac:61:cd:
         e5:24:de:3a:5f:22:d9:8b:3d:d6:e5:7e:6a:dc:cf:d6:03:5b:
         fb:81:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----