Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466303a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656466303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          +A2/QGfeSFUrNtHCL/dAMEBd1fS13Ui1SQgZVuy4iR4=
Subject key identifier:   88:AE:93:AB:EE:54:F7:C2:27:3D:B7:2F:37:81:EF:2B:49:53:AB:F0
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       033AAD4A98966C19A26996C4B12F74595A7182C8
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:05 +0000
ROA not before:           Sun 29 Mar 2026 19:17:05 +0000
ROA not after:            Sun 28 Mar 2027 19:22:05 +0000
asID:                     215956
IP address blocks:        2a14:7580:edf0::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3a:ad:4a:98:96:6c:19:a2:69:96:c4:b1:2f:74:59:5a:71:82:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:05 2026 GMT
            Not After : Mar 28 19:22:05 2027 GMT
        Subject: CN=88AE93ABEE54F7C2273DB72F3781EF2B4953ABF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:31:f8:34:5f:f8:42:cb:08:ab:97:7f:a7:
                    0d:93:7b:5a:c3:80:a0:5b:2c:43:b5:a6:28:8f:23:
                    72:8b:4d:96:2c:7b:7a:74:21:f1:40:ed:64:be:42:
                    38:c2:fc:fe:7c:88:00:3f:99:2e:56:c3:f4:0c:61:
                    8d:c3:90:6a:58:80:d1:41:c2:f1:a5:f0:fd:b6:fe:
                    13:93:a0:14:26:29:82:1f:bd:e9:40:4a:b1:41:2c:
                    00:16:91:fa:3b:66:91:e7:d4:2b:1b:da:cc:8f:b4:
                    0e:6e:40:6e:fa:f9:14:05:e1:46:fb:52:f9:b1:99:
                    fa:62:82:47:59:af:2a:5b:50:fd:9c:af:39:38:17:
                    85:df:c4:ea:45:0d:64:77:bf:94:f9:85:3a:29:94:
                    9e:19:7b:7d:ca:02:d2:b3:51:4c:19:72:ff:74:23:
                    e3:39:9a:7c:04:e7:a1:15:f0:f6:3e:7c:33:d8:de:
                    ea:01:4e:88:8e:dd:99:1d:da:62:4a:cb:ba:a5:89:
                    f9:a4:32:af:94:d9:46:4f:1d:0e:1a:45:3d:92:99:
                    f3:1c:31:33:fc:d6:fc:de:93:67:2a:80:1a:ea:1c:
                    27:5c:1f:0f:c7:44:1c:2e:76:8c:89:56:03:f2:db:
                    90:dc:37:49:11:c3:af:88:06:85:19:a8:19:68:b0:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:93:AB:EE:54:F7:C2:27:3D:B7:2F:37:81:EF:2B:49:53:AB:F0
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edf0::/46

    Signature Algorithm: sha256WithRSAEncryption
         20:98:e6:4c:5d:67:bd:68:81:b8:ac:c3:d8:08:c0:4f:2e:6b:
         c2:ef:58:26:bb:4c:89:7a:5e:f0:a6:c5:fd:16:73:c1:1d:53:
         5f:01:ce:18:fc:8b:df:7b:f2:1c:a6:77:e1:96:97:46:e5:5a:
         51:a2:d4:28:7f:de:ac:46:60:15:f7:4a:f2:ec:05:08:01:0e:
         16:ba:7a:ce:01:15:09:b8:bf:9d:b1:1a:e9:74:ed:d0:5f:87:
         0e:a2:98:97:7f:ce:b4:c2:53:c2:a2:7f:93:7e:e4:98:de:44:
         d5:62:fb:a7:89:80:37:a3:f9:02:28:44:69:de:85:00:2d:c9:
         82:cc:b2:31:d5:1b:e0:fa:f0:92:b6:03:63:b5:e0:87:b5:06:
         79:4a:24:48:d4:5a:e8:f8:e3:94:d8:a4:33:ad:31:55:51:f5:
         f1:89:ca:d2:13:16:b4:02:e9:45:cb:cd:82:f3:61:0e:32:93:
         76:f0:1c:f3:ea:e6:f5:22:dc:ba:be:20:d5:6c:85:a7:9e:8b:
         d7:41:5c:99:8e:93:5a:77:2b:a5:03:41:5c:c3:d5:c3:4d:83:
         fd:a6:32:e5:0a:b9:2e:c7:95:a7:f4:a9:9e:c7:91:eb:ff:7d:
         2a:c0:a7:1a:6c:0a:d2:77:b0:66:a7:96:1a:35:70:e0:9a:7b:
         3c:27:20:98
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUAzqtSpiWbBmiaZbEsS90WVpxgsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDVaFw0yNzAzMjgxOTIyMDVaMDMxMTAvBgNV
BAMTKDg4QUU5M0FCRUU1NEY3QzIyNzNEQjcyRjM3ODFFRjJCNDk1M0FCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeDH4NF/4QssIq5d/pw2Te1rD
gKBbLEO1piiPI3KLTZYse3p0IfFA7WS+QjjC/P58iAA/mS5Ww/QMYY3DkGpYgNFB
wvGl8P22/hOToBQmKYIfvelASrFBLAAWkfo7ZpHn1Csb2syPtA5uQG76+RQF4Ub7
UvmxmfpigkdZrypbUP2crzk4F4XfxOpFDWR3v5T5hToplJ4Ze33KAtKzUUwZcv90
I+M5mnwE56EV8PY+fDPY3uoBToiO3Zkd2mJKy7qlifmkMq+U2UZPHQ4aRT2SmfMc
MTP81vzek2cqgBrqHCdcHw/HRBwudoyJVgPy25DcN0kRw6+IBoUZqBlosPQxAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUiK6Tq+5U98InPbcvN4HvK0lTq/AwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQ2NjMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO3wMA0GCSqGSIb3DQEBCwUAA4IBAQAg
mOZMXWe9aIG4rMPYCMBPLmvC71gmu0yJel7wpsX9FnPBHVNfAc4Y/Ivfe/Icpnfh
lpdG5VpRotQof96sRmAV90ry7AUIAQ4WunrOARUJuL+dsRrpdO3QX4cOopiXf860
wlPCon+TfuSY3kTVYvuniYA3o/kCKERp3oUALcmCzLIx1Rvg+vCStgNjteCHtQZ5
SiRI1Fro+OOU2KQzrTFVUfXxicrSExa0AulFy82C82EOMpN28Bzz6ub1Ity6viDV
bIWnnovXQVyZjpNadyulA0Fcw9XDTYP9pjLlCrkux5Wn9Kmex5Hr/30qwKcabArS
d7Bmp5YaNXDgmns8JyCY
-----END CERTIFICATE-----