Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436303a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656436303a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          FMPpEdzVpSrLjdUG4i2sGQLE0yV8hQWO74Dv6ODmm/o=
Subject key identifier:   A1:BD:E3:E0:0B:D2:C7:34:B1:AA:EC:82:C1:B8:A1:FC:03:80:5F:E8
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       23679EAF78D6F03C73CF3777FBE30D2864C006B6
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436303a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:11 +0000
ROA not before:           Sun 29 Mar 2026 19:17:11 +0000
ROA not after:            Sun 28 Mar 2027 19:22:11 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed60::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:67:9e:af:78:d6:f0:3c:73:cf:37:77:fb:e3:0d:28:64:c0:06:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:11 2026 GMT
            Not After : Mar 28 19:22:11 2027 GMT
        Subject: CN=A1BDE3E00BD2C734B1AAEC82C1B8A1FC03805FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:25:fe:48:a1:7a:a3:82:d8:b3:b6:8f:67:
                    b0:6a:34:e2:ae:d5:30:51:17:1c:c1:fe:10:86:c6:
                    e8:3a:b7:4b:ec:4a:df:30:f0:40:dd:47:14:93:e2:
                    ec:6c:31:1f:96:73:c3:4c:65:cc:a8:48:12:80:cf:
                    d0:f5:de:2e:36:d4:b2:fd:dd:3d:05:02:75:39:f1:
                    f5:1e:fa:a9:c6:e9:d2:a2:2b:af:f6:dc:15:45:5d:
                    ee:c6:d4:c0:c3:64:e2:a5:c1:11:e1:46:61:49:58:
                    cd:3b:dc:de:03:2c:13:1b:d6:67:aa:51:0e:36:63:
                    12:98:87:a5:23:c1:9d:ce:42:2c:53:8b:21:a5:e8:
                    7d:2e:19:04:6d:1a:ed:5c:99:28:84:40:b9:b5:8d:
                    a9:a1:86:e4:12:34:66:a4:d0:66:74:6e:5d:7e:36:
                    4a:b6:d2:8c:5a:ec:61:54:b5:4e:8f:78:28:5f:52:
                    5a:07:48:d5:25:ee:a5:fc:90:be:cb:76:70:36:d0:
                    96:ba:b1:f2:24:bf:e9:de:ae:0c:87:cf:09:9e:e1:
                    cc:14:61:e3:8e:d0:29:93:28:1a:b9:0a:4e:c7:35:
                    84:d6:1c:59:11:46:7f:75:ec:af:6d:a5:a8:1d:c7:
                    d0:4d:51:d7:a0:52:d3:8e:cb:e4:d4:76:d5:e6:30:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BD:E3:E0:0B:D2:C7:34:B1:AA:EC:82:C1:B8:A1:FC:03:80:5F:E8
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436303a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed60::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:ac:29:ad:55:8f:68:15:c7:fa:be:70:71:9b:02:d8:1b:
         2c:bd:50:75:04:b7:48:50:01:3c:5a:2c:08:12:07:17:8e:a6:
         a9:7b:5e:f6:b9:49:f5:ed:30:f7:a2:a8:64:ea:91:2e:82:97:
         2b:8e:c7:16:bd:7d:75:ee:de:30:8b:45:07:10:38:04:10:d6:
         9e:37:4c:89:27:88:13:eb:f0:35:a9:49:32:71:8d:33:5e:17:
         8e:06:29:fc:31:2b:f4:e8:01:9d:62:0b:81:78:9c:a9:bf:c6:
         b6:14:a8:0f:39:01:7d:f7:cf:55:4e:85:af:4f:97:60:65:79:
         e2:82:e0:ae:6b:b2:eb:f9:4d:be:21:01:82:2e:3c:37:a2:51:
         10:b8:b0:31:3a:d5:15:75:a5:6d:f7:e9:5d:92:d5:12:7f:f7:
         0e:2a:21:3f:4d:a4:90:e6:84:fc:6c:c7:5b:a0:1b:f1:a3:4d:
         35:ac:87:4f:76:28:9b:28:3f:3a:db:2a:66:81:02:4e:9c:a1:
         24:de:db:e4:78:19:06:50:85:49:91:6a:fc:b1:a8:95:29:a7:
         c8:7f:f4:03:ae:73:c5:d7:7e:9f:7d:1e:bd:92:c9:c2:63:6b:
         f9:3e:0e:74:08:fc:1d:99:c6:26:6f:12:37:e8:7b:0f:ab:81:
         41:ad:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----