Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          hpbMuHJaQAOvjunz48eXAy7OHKtWinIldLuI/Z8AQYk=
Subject key identifier:   6E:79:DE:33:D6:C1:C3:FB:A3:91:F3:C2:DB:71:EB:DD:A4:7C:72:BF
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       4E2F6E4A99E048C48BFDDB118FD6633C03D77552
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:11 +0000
ROA not before:           Sun 29 Mar 2026 19:17:11 +0000
ROA not after:            Sun 28 Mar 2027 19:22:11 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed54::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:6e:4a:99:e0:48:c4:8b:fd:db:11:8f:d6:63:3c:03:d7:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:11 2026 GMT
            Not After : Mar 28 19:22:11 2027 GMT
        Subject: CN=6E79DE33D6C1C3FBA391F3C2DB71EBDDA47C72BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:80:59:ff:46:bc:e8:f5:13:5e:b9:a4:b6:
                    13:bb:cd:62:1c:c9:eb:7e:70:d5:dd:3d:b3:cc:fd:
                    95:11:c8:99:7e:97:7b:80:7f:7e:f4:f6:65:af:0e:
                    96:ef:99:c8:99:09:34:1f:de:cc:d9:bb:a5:72:82:
                    0c:d6:0e:d1:89:42:c9:51:ed:70:c1:e7:59:b4:74:
                    9a:9a:4a:67:7e:97:1f:5f:71:34:f2:35:df:65:62:
                    f2:e5:8a:e9:85:83:9d:b4:2f:54:e3:52:29:10:35:
                    9b:a5:5c:2b:c9:a3:c4:e2:9d:27:4c:ce:99:be:0f:
                    57:82:e2:3d:fc:c8:15:8e:5e:8a:aa:04:66:79:c2:
                    58:96:81:80:64:05:4c:72:1f:b2:4a:38:28:48:37:
                    1e:24:03:7e:1c:81:08:cb:e6:0c:49:44:5f:95:15:
                    4f:e8:df:c4:37:fd:6b:1f:71:23:33:13:41:46:b2:
                    40:5b:77:a3:32:7a:33:4a:8c:57:69:f4:d0:46:c8:
                    65:46:79:d1:ee:35:6c:d6:ca:d3:14:b2:b6:e6:94:
                    5f:3f:fe:93:5d:4c:e2:de:fd:e2:50:c0:e6:25:6b:
                    fe:d2:bb:4c:6e:b7:45:e9:cd:ef:99:9f:f2:8d:9b:
                    d9:86:3b:2c:65:cf:c6:e5:0a:45:48:65:69:d0:b6:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:DE:33:D6:C1:C3:FB:A3:91:F3:C2:DB:71:EB:DD:A4:7C:72:BF
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed54::/46

    Signature Algorithm: sha256WithRSAEncryption
         80:48:c4:23:ea:a7:ad:5d:80:a0:82:47:0b:b5:09:a7:63:f8:
         c5:1e:db:af:14:87:4c:08:11:55:f0:2d:91:d6:ff:6b:24:af:
         8c:e2:62:60:8a:73:9c:6a:5d:c5:d2:52:87:ee:51:5d:4e:11:
         85:bd:47:5a:43:f0:4b:49:85:69:2c:75:a9:ea:b5:b9:61:6f:
         42:b7:93:29:d1:e8:20:52:a1:af:59:61:ff:14:a3:1d:47:69:
         d2:34:77:53:49:63:45:10:b5:8b:08:3a:97:83:7f:19:72:d8:
         d9:7e:ec:33:27:a0:ae:1f:ff:f2:b3:11:4f:80:e9:74:7a:17:
         b6:31:8b:ee:03:75:09:80:32:6d:bd:3f:fc:9c:9c:02:e2:84:
         9b:9b:1c:bb:40:cb:f6:51:21:8c:16:a5:75:f8:be:76:17:e7:
         2f:37:30:2e:54:6e:8e:d4:4d:ac:0e:a7:5c:4e:22:13:84:b6:
         1e:51:f8:fd:3b:a1:28:81:c3:65:a3:5e:fd:3f:5c:ab:a4:58:
         a3:49:c2:42:77:3e:36:44:ea:f2:77:03:5c:77:a5:f5:65:6b:
         89:f1:c6:34:38:68:86:b6:90:ee:34:dc:8d:fe:8f:9a:1c:72:
         6a:12:88:65:cf:46:e1:a4:5a:68:f8:71:c6:eb:ae:fd:43:65:
         2f:6b:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----