Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          JODhrkWmjG/NwQTmF15iK6Jk3y5+PiMnvrIVwEuYzo8=
Subject key identifier:   11:93:0A:CC:39:A1:C5:A3:A9:9C:64:F7:CB:3A:55:45:52:1A:7D:9E
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       2C5150893406DF301C6246145E87CD7F559D15A1
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:06 +0000
ROA not before:           Sun 29 Mar 2026 19:17:06 +0000
ROA not after:            Sun 28 Mar 2027 19:22:06 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed64::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:51:50:89:34:06:df:30:1c:62:46:14:5e:87:cd:7f:55:9d:15:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:06 2026 GMT
            Not After : Mar 28 19:22:06 2027 GMT
        Subject: CN=11930ACC39A1C5A3A99C64F7CB3A5545521A7D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:f5:db:8d:6e:f3:2e:3b:5b:0c:b6:41:9b:
                    c5:bd:73:8f:93:8a:04:86:83:95:81:b5:a6:ad:1c:
                    a8:5f:2f:d5:e1:79:6a:ec:e2:e8:e9:d8:2f:3d:11:
                    ec:70:52:49:21:90:b5:72:84:d6:c1:65:4d:4e:14:
                    9e:cb:cf:db:b5:07:53:89:31:97:e2:2b:9e:f3:23:
                    61:e1:10:9b:0b:b7:1d:38:2e:eb:31:fc:3e:c5:9f:
                    66:51:e6:42:39:08:95:20:89:7c:16:67:9e:13:19:
                    68:a3:24:77:da:20:00:ed:d5:4e:c0:c6:86:7b:8b:
                    2d:09:5b:93:5e:85:eb:17:23:0d:c6:f2:f8:1a:94:
                    ea:8f:c4:ab:b5:67:a7:d2:86:60:25:a2:8d:9a:6e:
                    de:16:9d:d0:fa:0c:8f:de:1f:70:61:67:76:39:ac:
                    77:38:46:2d:a7:a2:7d:f9:90:c5:46:3e:72:60:30:
                    01:c3:03:b0:07:32:e3:b2:a1:7f:b3:1d:11:42:ed:
                    2e:f2:2b:f8:e2:ea:25:75:56:e0:47:77:e9:80:ed:
                    b9:cb:cc:8f:47:a8:ba:1f:44:62:54:db:3d:2d:98:
                    52:2d:73:68:be:b6:33:e6:1a:d3:50:74:5a:d9:f2:
                    60:13:2f:e7:eb:33:bc:a6:46:e1:c9:42:37:d6:a0:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:0A:CC:39:A1:C5:A3:A9:9C:64:F7:CB:3A:55:45:52:1A:7D:9E
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed64::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:ea:03:fd:1c:f3:83:63:10:f6:1f:69:6c:ae:1e:fe:19:
         8b:9b:0a:93:37:70:3f:3c:ca:8b:fc:83:40:0f:fb:f8:96:b2:
         1e:53:db:ca:22:d8:82:3e:64:fa:c9:0a:93:aa:eb:64:6d:14:
         50:4b:cf:68:80:a6:48:01:33:68:f4:20:aa:b2:86:6f:fa:76:
         d6:6f:80:86:6d:50:7a:27:1f:17:ab:2d:94:34:14:9b:b1:bf:
         77:55:ae:a3:9a:08:a9:87:1c:16:3c:8b:af:b2:98:4c:39:07:
         44:11:ef:76:e5:40:f3:c8:7a:e9:ff:f5:fc:17:5f:5c:f9:ae:
         c9:a3:62:1e:87:92:5a:3d:38:37:bf:f6:d3:62:c3:2a:21:ef:
         64:78:82:d6:1d:f8:4b:a4:ac:f0:8a:a5:55:a9:49:05:cd:6c:
         83:7c:fb:97:02:af:82:1c:d0:cf:1a:13:fa:84:ad:6f:44:14:
         dd:00:83:1e:a6:2b:13:ca:56:cc:78:34:02:57:c9:eb:74:b5:
         17:0c:1f:76:ef:7e:a7:75:9e:27:9d:a5:b8:48:c1:7e:a7:7a:
         31:07:2f:e0:8e:c0:ca:0f:da:40:ad:8c:a1:4d:ed:bb:8c:cf:
         6f:72:9d:7c:fd:77:e1:bb:60:ef:80:6c:70:60:bc:18:65:9a:
         8b:37:de:48
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIULFFQiTQG3zAcYkYUXofNf1WdFaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDZaFw0yNzAzMjgxOTIyMDZaMDMxMTAvBgNV
BAMTKDExOTMwQUNDMzlBMUM1QTNBOTlDNjRGN0NCM0E1NTQ1NTIxQTdEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIvXbjW7zLjtbDLZBm8W9c4+T
igSGg5WBtaatHKhfL9XheWrs4ujp2C89EexwUkkhkLVyhNbBZU1OFJ7Lz9u1B1OJ
MZfiK57zI2HhEJsLtx04Lusx/D7Fn2ZR5kI5CJUgiXwWZ54TGWijJHfaIADt1U7A
xoZ7iy0JW5NehesXIw3G8vgalOqPxKu1Z6fShmAloo2abt4WndD6DI/eH3BhZ3Y5
rHc4Ri2non35kMVGPnJgMAHDA7AHMuOyoX+zHRFC7S7yK/ji6iV1VuBHd+mA7bnL
zI9HqLofRGJU2z0tmFItc2i+tjPmGtNQdFrZ8mATL+frM7ymRuHJQjfWoGNpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUEZMKzDmhxaOpnGT3yzpVRVIafZ4wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzNjM0M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1kMA0GCSqGSIb3DQEBCwUAA4IBAQAp
+eoD/Rzzg2MQ9h9pbK4e/hmLmwqTN3A/PMqL/INAD/v4lrIeU9vKItiCPmT6yQqT
qutkbRRQS89ogKZIATNo9CCqsoZv+nbWb4CGbVB6Jx8Xqy2UNBSbsb93Va6jmgip
hxwWPIuvsphMOQdEEe925UDzyHrp//X8F19c+a7Jo2Ieh5JaPTg3v/bTYsMqIe9k
eILWHfhLpKzwiqVVqUkFzWyDfPuXAq+CHNDPGhP6hK1vRBTdAIMepisTylbMeDQC
V8nrdLUXDB92736ndZ4nnaW4SMF+p3oxBy/gjsDKD9pArYyhTe27jM9vcp18/Xfh
u2DvgGxwYLwYZZqLN95I
-----END CERTIFICATE-----