Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435383a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656435383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          soF0F10V6EdjzTL8gZU0ni9J34z/N0NFahBo7cAS59o=
Subject key identifier:   81:A4:EC:A5:85:B1:C7:F4:F9:29:94:DA:DB:9E:4C:05:87:A7:F0:69
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       2C25540866ED3CD53FB9D91BAA0A27BE335462B8
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:04 +0000
ROA not before:           Sun 29 Mar 2026 19:17:04 +0000
ROA not after:            Sun 28 Mar 2027 19:22:04 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed58::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:25:54:08:66:ed:3c:d5:3f:b9:d9:1b:aa:0a:27:be:33:54:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:04 2026 GMT
            Not After : Mar 28 19:22:04 2027 GMT
        Subject: CN=81A4ECA585B1C7F4F92994DADB9E4C0587A7F069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:4f:b3:34:f8:3b:5f:a9:cb:fd:64:9b:e8:
                    d6:a9:d9:7c:15:04:56:58:56:a9:11:26:ed:f0:59:
                    19:66:78:38:6f:fc:e1:8e:40:08:92:c8:f5:3d:97:
                    8f:99:56:ab:9f:88:d8:f9:4c:2a:12:3a:70:7d:52:
                    42:59:b1:40:d5:c1:f2:99:5e:54:d4:1a:02:5f:9d:
                    54:62:1a:48:63:8d:5a:31:f1:b7:f8:13:39:70:88:
                    6f:69:a8:0e:5f:1e:4e:08:b6:98:6d:13:25:bd:33:
                    3f:5a:5b:d6:af:c5:b7:44:bb:a5:69:c2:59:a6:81:
                    6f:28:a7:5d:37:50:45:46:b3:90:91:da:e6:26:6b:
                    93:11:28:bd:68:81:05:10:65:b1:8b:ca:72:fb:37:
                    88:b4:fd:c0:12:88:69:49:3b:a8:f7:36:6e:03:02:
                    e7:05:52:e1:3a:44:32:70:d6:2a:a0:66:f2:93:9c:
                    4c:4b:97:2a:f3:d7:9c:b6:7e:be:30:d4:76:70:26:
                    65:26:fa:10:bf:94:60:52:10:65:c8:8a:d1:8f:a9:
                    06:3f:48:3c:f3:9b:a2:11:7c:f7:b8:19:48:72:e8:
                    d6:0e:d0:b3:71:3b:f8:50:2f:2c:b6:c5:3c:3e:66:
                    47:fe:7d:00:54:b9:3e:b2:88:1e:00:81:77:fd:65:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:EC:A5:85:B1:C7:F4:F9:29:94:DA:DB:9E:4C:05:87:A7:F0:69
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed58::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:06:65:3b:0c:01:d2:ad:54:2c:b1:15:c4:4c:11:94:ab:1b:
         1d:de:3b:9a:31:62:17:52:21:2e:5b:0c:ce:8c:37:b6:2d:9e:
         9a:0a:57:2f:c9:55:b5:fd:97:e8:94:4a:6f:6a:1d:4c:f4:69:
         cb:6b:e9:94:0e:f0:75:09:9a:07:b6:bf:cf:0c:42:6d:f8:b3:
         34:cb:6a:cb:6f:11:13:e1:d2:3b:1c:3f:87:87:4d:8d:77:9d:
         91:68:bb:d7:8a:79:05:f9:ee:40:7d:f4:3a:78:67:4e:74:86:
         b8:99:4c:b4:4d:66:b0:37:f7:c0:19:3b:60:c9:4d:fe:b8:9d:
         79:63:26:8f:ce:ae:2b:bc:c5:7d:3b:ea:d7:b6:45:37:33:82:
         cf:fe:b5:5f:ef:5e:9b:b7:3b:4e:25:68:2f:d9:c9:d0:38:1b:
         e9:14:de:c3:af:e1:7c:91:e3:2f:bf:40:99:89:b8:3d:9e:cc:
         7e:eb:5b:93:61:c5:71:b5:9a:91:4d:d1:05:f5:b3:95:48:6f:
         fe:d5:42:0f:95:ac:d7:6b:f2:4e:9b:80:7f:8b:76:01:6c:42:
         cb:4d:cc:45:8a:a3:e5:9f:a1:df:c4:d0:41:44:aa:7c:af:16:
         78:29:48:05:42:5d:a9:ff:2f:18:7b:dd:1f:58:55:65:43:31:
         08:f0:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----