Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          Lz2EKIV9CP4wmy394hxP4Cv8SJC9SwcVcIPYstlCZ5w=
Subject key identifier:   31:29:3A:50:B7:23:0D:36:19:C0:98:BD:0D:CC:6A:94:5E:25:0C:09
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       02A20EEE9FAA81FD9B8E7CEF9EB2B4986194AB35
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:08 +0000
ROA not before:           Sun 29 Mar 2026 19:17:08 +0000
ROA not after:            Sun 28 Mar 2027 19:22:08 +0000
asID:                     215956
IP address blocks:        2a14:7580:edf7::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a2:0e:ee:9f:aa:81:fd:9b:8e:7c:ef:9e:b2:b4:98:61:94:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:08 2026 GMT
            Not After : Mar 28 19:22:08 2027 GMT
        Subject: CN=31293A50B7230D3619C098BD0DCC6A945E250C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:0b:62:ae:fd:4a:57:c4:cd:16:40:5a:da:
                    4f:69:da:8e:ee:5d:6b:65:a0:b7:9a:8d:0d:90:c7:
                    d5:8d:fd:87:3d:d0:29:4a:a2:26:80:5b:3e:3e:48:
                    e0:72:f8:74:a1:71:07:e6:1f:71:76:ef:36:10:03:
                    fa:fa:f3:65:4f:64:60:4c:eb:b1:54:4b:90:33:df:
                    f2:d8:5e:5a:d8:44:75:ba:10:b5:1d:be:91:98:9f:
                    e5:20:f4:71:07:b0:35:27:f6:85:dc:45:ec:ec:01:
                    90:8a:61:b7:c7:1d:3d:ba:e3:f3:f9:29:18:25:e7:
                    06:0e:77:28:10:aa:c3:ea:21:c6:70:61:56:0c:bb:
                    11:5f:36:00:a5:88:d0:7c:47:e6:16:54:0a:56:95:
                    5e:cc:5c:7c:56:e8:4c:f4:e0:87:b9:53:b6:0d:17:
                    c1:1e:79:ec:2d:dd:e4:b8:41:37:8c:38:2a:08:a2:
                    5e:1d:49:25:35:c3:48:0d:42:0c:f4:b4:ca:4a:6c:
                    de:b3:f5:32:01:04:04:25:ea:ff:c2:06:7d:f5:0e:
                    42:f1:3c:7d:7b:6d:7c:6f:37:38:90:e4:78:65:51:
                    e0:b5:77:25:57:37:15:b9:14:5a:92:2f:43:ac:43:
                    a8:66:05:b1:d9:d1:63:19:7f:72:b8:2c:7d:bc:a6:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:3A:50:B7:23:0D:36:19:C0:98:BD:0D:CC:6A:94:5E:25:0C:09
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edf7::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:75:ce:c6:d4:29:24:e4:ae:eb:b5:ed:d3:21:ef:a7:07:b5:
         fd:b5:8d:09:8d:22:8a:12:7a:9f:dd:4d:cc:3a:ac:c3:3c:38:
         40:5a:33:f2:e9:ef:3f:01:58:41:9a:3d:8b:58:46:60:dd:2d:
         c9:3a:5f:72:66:d8:d4:ee:46:66:eb:30:81:97:07:d2:81:04:
         89:fa:a1:ca:6b:d1:b3:ae:c6:39:b8:e0:ba:53:7d:cf:36:3b:
         1c:e0:54:1e:9e:41:e6:d1:ac:ef:f9:21:0e:15:3a:8f:42:08:
         d7:33:cc:58:13:eb:7a:f8:47:67:81:98:8f:f3:f3:02:28:e4:
         03:87:6b:dd:2d:83:45:82:64:c2:4d:41:b3:56:67:10:19:50:
         db:ef:73:51:86:d1:16:09:d2:e3:26:87:8e:28:fe:96:1d:7e:
         8d:fd:19:72:25:18:97:1e:08:1d:73:8e:86:20:91:a7:7d:55:
         49:9f:3a:ab:d3:02:77:43:46:d2:66:2a:23:7f:68:66:e2:3e:
         ab:70:2f:e2:9f:99:72:b9:14:b7:07:e8:1f:36:de:20:e7:3c:
         8d:29:49:e0:55:2d:c6:c6:e7:79:b1:9e:79:d3:3d:78:5f:11:
         0f:9c:fe:ef:ea:66:c8:f3:ae:02:c1:76:fc:d9:5f:6d:17:60:
         97:e8:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----