Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463323a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656463323a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          RYvhC8yjJPq+PpdskK0VKTGPzc56MmCdoOFwS5UZwWQ=
Subject key identifier:   60:C2:2A:45:F5:9F:27:CC:9F:49:BD:1C:50:51:65:08:AD:BD:A4:DC
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       7EB05FBF2A7AAA9B64F34192A43272BE54E2C06C
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463323a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:12 +0000
ROA not before:           Sun 29 Mar 2026 19:17:12 +0000
ROA not after:            Sun 28 Mar 2027 19:22:12 +0000
asID:                     215956
IP address blocks:        2a14:7580:edc2::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b0:5f:bf:2a:7a:aa:9b:64:f3:41:92:a4:32:72:be:54:e2:c0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:12 2026 GMT
            Not After : Mar 28 19:22:12 2027 GMT
        Subject: CN=60C22A45F59F27CC9F49BD1C50516508ADBDA4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:43:86:39:0e:a4:24:78:28:6b:ae:e7:8f:
                    42:d7:91:8e:32:53:03:97:a0:f6:ea:ef:4e:21:4a:
                    03:7b:a0:bd:a8:3b:f9:36:41:fa:bf:a1:3e:63:b4:
                    bc:db:75:9e:56:87:79:6b:8d:27:1f:95:b5:57:e5:
                    4a:2b:ae:3e:61:4d:b2:85:09:c0:5d:c7:aa:e2:8f:
                    2a:fc:6f:47:91:ab:11:02:b6:f6:54:14:8e:7a:2b:
                    b5:97:7f:a6:ca:ff:47:87:e7:11:b2:20:44:bb:41:
                    1f:0d:41:55:3f:2e:2c:fd:39:d0:dc:01:2c:e9:74:
                    49:cd:0e:26:30:19:fb:35:5c:73:42:6d:02:88:98:
                    8a:12:bc:7e:0f:44:de:8c:91:28:47:c4:b8:4c:bb:
                    6a:44:61:21:ba:e8:99:ff:69:f1:b2:e1:6b:3a:c3:
                    4d:35:e1:de:3b:b7:06:44:cc:21:37:5e:1d:cf:45:
                    02:5c:05:8c:00:94:07:f4:68:de:f3:21:c1:43:ff:
                    3f:b6:0a:87:ac:1c:13:5f:24:67:21:9c:ec:f6:48:
                    1f:1a:9c:e2:e1:83:9b:99:22:03:b9:0f:97:df:c8:
                    e5:0d:f6:61:aa:2d:09:2b:b0:95:c1:4e:ea:06:29:
                    23:c9:fa:0f:2b:f1:72:f4:d1:44:d4:c8:38:28:f7:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:2A:45:F5:9F:27:CC:9F:49:BD:1C:50:51:65:08:AD:BD:A4:DC
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463323a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edc2::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:84:61:e5:a8:dd:67:9a:37:da:cd:26:3b:7d:d3:ab:3c:
         50:60:c1:bc:ae:15:fc:f2:56:4c:c4:31:fe:01:b3:fc:5a:86:
         f8:29:f1:48:87:38:f2:28:1d:4a:99:e7:c0:ec:e2:a1:51:5a:
         af:a4:24:51:2c:f7:96:f0:e3:20:ad:d4:28:97:f1:52:4d:32:
         70:08:1a:13:1b:7d:bc:d7:7f:be:fc:53:9c:48:d1:0d:37:01:
         8d:93:d1:53:3d:4a:13:5f:41:fa:df:ff:10:64:1a:c2:99:a4:
         45:53:90:65:ec:52:d4:ff:fa:63:2a:05:48:12:3d:9d:a7:b8:
         f9:be:6b:e7:42:07:b2:99:5d:e3:17:ba:f6:4f:8d:5a:27:db:
         33:21:84:f5:91:6c:8f:dc:99:9b:c4:14:79:b6:eb:12:2e:80:
         b0:93:8b:66:db:44:47:e4:21:a9:08:b6:6d:01:71:b0:6a:1f:
         db:8a:b3:f8:9f:ce:7f:96:d4:ea:72:2d:90:cc:52:2e:ed:9c:
         03:54:2b:1b:8f:1e:fa:19:14:dc:45:11:0a:05:2a:40:9d:b4:
         9f:00:8b:1a:12:a9:b0:78:77:01:ec:44:28:3b:19:dc:dc:1d:
         cd:29:da:55:b6:04:d4:19:c3:fb:0d:98:08:38:8c:fd:5c:a6:
         cf:a1:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----