Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          csMxoi5+YX7+vBh/PSOqmcWyHanRoc/vKkWte/NnoQc=
Subject key identifier:   DD:C4:20:2D:46:0D:87:09:74:D0:F7:0C:7C:C1:05:7A:BE:5A:6D:22
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       6D121342F249F39826E5D70EF252F3059994D3AE
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:14 +0000
ROA not before:           Sun 29 Mar 2026 19:17:14 +0000
ROA not after:            Sun 28 Mar 2027 19:22:14 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed5c::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:12:13:42:f2:49:f3:98:26:e5:d7:0e:f2:52:f3:05:99:94:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:14 2026 GMT
            Not After : Mar 28 19:22:14 2027 GMT
        Subject: CN=DDC4202D460D870974D0F70C7CC1057ABE5A6D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:0c:a9:ea:f0:62:8b:fb:f1:6e:16:5a:77:
                    8b:42:d9:96:ed:f7:83:6f:0b:e1:ec:91:ea:bf:11:
                    00:72:9c:35:b5:e2:96:18:9a:40:5f:9c:80:06:a5:
                    13:b3:fd:b8:12:dc:5a:60:c5:8d:8e:51:20:af:4a:
                    75:2b:c4:a3:30:9c:d9:7e:6c:8a:1e:e0:ad:98:8a:
                    80:42:73:62:54:11:da:b4:2a:71:ef:92:a6:f0:4b:
                    45:d3:0f:de:5d:be:66:28:6f:a9:42:ee:56:a7:57:
                    c9:a4:d5:4d:ef:8f:ea:2b:23:c8:c2:d7:cd:b4:6e:
                    ce:5c:3c:02:0b:05:30:78:24:d4:0e:0c:fb:08:5d:
                    84:ce:0d:47:c2:23:9a:ec:9c:76:7e:fc:c3:0b:ad:
                    1a:fc:ee:bf:93:4c:6f:d3:c5:ed:78:63:c2:cc:0a:
                    93:2d:68:ef:1a:dc:a5:18:e4:a0:e0:1e:fb:67:f2:
                    b2:22:47:30:83:2f:66:d7:37:74:53:f4:e9:a9:bb:
                    a6:a0:85:2e:ab:4b:92:16:be:28:87:6a:e5:88:63:
                    1a:74:c0:08:03:1f:e4:b0:6b:a3:9a:81:a2:51:5d:
                    fc:53:de:5a:eb:02:a0:32:cc:4a:2c:d2:1b:9b:6e:
                    4a:5f:17:0e:67:20:2d:9e:2d:7b:a9:82:87:5e:0f:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:20:2D:46:0D:87:09:74:D0:F7:0C:7C:C1:05:7A:BE:5A:6D:22
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed5c::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:6c:6a:13:7e:1c:7c:4e:9a:c3:c7:52:8b:32:9e:22:55:
         c0:f8:34:1a:ca:fb:c8:39:7b:23:24:20:78:67:30:7f:f2:13:
         ee:f8:fb:ee:1c:89:72:d6:15:f3:d9:ae:9f:6b:4a:7f:6e:8f:
         67:8d:bc:b0:22:b6:a5:e3:88:95:e4:78:39:85:b0:0e:1e:60:
         8a:e1:5f:3b:09:97:5f:8f:67:da:1c:01:4f:d0:24:3b:93:55:
         94:7b:dd:bf:dc:56:d3:ed:db:d0:d2:65:c8:67:cc:e5:11:03:
         07:ed:b3:c7:3e:ec:d2:10:7f:67:6e:09:c5:07:24:28:4b:fa:
         1d:4d:15:72:5c:01:63:ee:62:29:58:ee:14:08:ae:58:ef:8f:
         06:76:0c:e1:c7:8e:5f:53:8a:95:e9:67:03:53:2f:02:df:48:
         3d:1e:c0:32:4d:c9:ae:3f:b7:9b:35:2d:31:95:0f:39:ad:32:
         75:cb:b6:b5:44:93:02:dd:e3:37:ab:1d:79:70:b4:0b:cb:b8:
         28:4b:0c:52:f6:95:9c:70:83:6b:9c:df:f3:85:b1:ea:0c:c3:
         35:c3:66:1d:6d:99:50:8d:28:be:a6:b3:51:5b:2f:14:82:07:
         73:16:28:eb:2e:75:4f:aa:ab:bc:e0:ab:ea:8d:d8:ca:1a:90:
         c9:48:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----