Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          FvoRx3NVomcuMYeHnJ+QAo98urggzmM45EXBGsq7NlI=
Subject key identifier:   27:1F:CD:69:2B:A9:D2:C0:F4:9B:06:95:78:B7:7A:72:0E:75:5E:0F
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       476013CF271428371B82AB8ED949BBB922B27A96
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:13 +0000
ROA not before:           Sun 29 Mar 2026 19:17:13 +0000
ROA not after:            Sun 28 Mar 2027 19:22:13 +0000
asID:                     215956
IP address blocks:        2a14:7580:edc4::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:60:13:cf:27:14:28:37:1b:82:ab:8e:d9:49:bb:b9:22:b2:7a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:13 2026 GMT
            Not After : Mar 28 19:22:13 2027 GMT
        Subject: CN=271FCD692BA9D2C0F49B069578B77A720E755E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:9e:70:e0:b5:f0:d2:bd:61:17:da:4f:de:
                    57:91:09:c4:5b:1a:23:3c:bd:65:13:de:eb:3b:03:
                    84:f9:1e:7d:42:96:fb:f0:6e:2f:58:a6:51:97:7b:
                    24:68:98:cd:5b:19:81:41:c6:29:3b:6c:78:7a:1e:
                    cf:5f:c6:f0:b0:a0:18:f4:91:9f:03:9f:81:61:92:
                    4e:69:93:d1:ed:af:f6:32:00:c9:46:ae:fc:50:75:
                    f1:ab:89:16:0b:c2:5e:69:b4:46:ad:5c:69:ec:87:
                    3e:a5:12:6b:bc:14:5c:d5:ea:e4:3a:f2:e1:8a:eb:
                    9f:5d:e1:e5:54:bd:18:56:75:bc:7a:bd:b9:e3:23:
                    f4:bc:78:29:75:6f:dd:bd:c8:2b:17:56:9d:93:38:
                    c1:75:ad:1e:dc:76:37:fb:da:ab:80:17:f2:ec:2a:
                    99:8e:f8:ed:08:a3:b3:ed:8a:27:10:42:9c:7e:d7:
                    56:25:45:9b:e5:bd:1c:30:c4:3d:be:3f:b0:9d:98:
                    61:6a:c8:9b:e7:13:6f:74:60:85:6f:dd:7a:8f:c2:
                    b0:9a:1e:90:21:40:17:c9:86:ed:66:cf:cc:1e:13:
                    8d:b8:32:70:86:2a:12:ee:ed:62:9e:dc:b5:80:18:
                    e5:35:aa:78:e8:d0:93:bd:58:75:02:0b:e9:f3:05:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:CD:69:2B:A9:D2:C0:F4:9B:06:95:78:B7:7A:72:0E:75:5E:0F
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edc4::/47

    Signature Algorithm: sha256WithRSAEncryption
         a6:91:90:9e:bf:b9:c8:e1:46:48:5e:87:85:e2:4f:88:89:53:
         2f:32:98:db:ea:8e:42:96:c6:e8:89:4e:f4:12:e1:1e:99:92:
         45:14:6d:26:0a:14:b9:e2:c2:9f:18:2e:df:61:f2:56:54:21:
         9d:33:f8:72:bf:79:57:e4:18:e0:f3:aa:0b:ed:2c:a8:ce:d6:
         94:b2:09:c6:bc:b8:8b:25:f4:8a:f0:1e:53:1a:6e:48:da:d1:
         6d:8e:46:5d:b3:1d:be:05:6e:28:38:98:18:c9:e0:72:2c:4f:
         6f:0e:4b:bc:96:5a:3f:b2:72:8a:24:49:6e:62:7a:61:ac:98:
         5c:72:7b:2f:61:97:ca:7c:bd:12:2d:cb:38:f9:65:52:33:8c:
         78:60:7d:dc:83:bc:93:35:71:ec:6e:e2:6c:02:02:4f:45:ec:
         19:d8:bc:c1:e7:37:62:90:3b:26:15:2f:6f:e4:77:11:f2:76:
         26:8e:15:aa:50:4e:81:c5:a0:8e:4c:78:36:4e:97:a6:b6:40:
         fa:82:96:c2:c8:b5:8a:c8:78:ec:67:ff:83:25:60:db:c1:4c:
         3e:16:69:a7:1d:77:1b:6b:22:9c:b1:2d:2a:57:09:e0:eb:2c:
         8f:12:c0:9e:89:8e:c3:c1:4e:24:1a:bd:61:ed:ca:d2:c3:b6:
         eb:da:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----