Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          4PZB7jIVbMuN3yrXVctICdH2oJTuEPq5f+kkPPNUReM=
Subject key identifier:   0D:55:71:D0:5C:DC:EA:B2:A6:9D:DE:CB:5C:24:22:45:F6:DB:A5:30
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       509D8DAAFE4A4B244826FA760927677DF9044E4F
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:06 +0000
ROA not before:           Sun 29 Mar 2026 19:17:06 +0000
ROA not after:            Sun 28 Mar 2027 19:22:06 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee00::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:8d:aa:fe:4a:4b:24:48:26:fa:76:09:27:67:7d:f9:04:4e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:06 2026 GMT
            Not After : Mar 28 19:22:06 2027 GMT
        Subject: CN=0D5571D05CDCEAB2A69DDECB5C242245F6DBA530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:f8:32:a9:5b:2d:79:60:15:d2:96:d9:dd:
                    ab:8c:4a:52:fc:69:a8:3b:62:61:df:98:e1:89:17:
                    29:96:39:97:d2:ab:c0:a2:3b:06:d4:60:95:78:e9:
                    b4:83:c6:9d:c2:3d:f3:c3:63:e4:22:43:3f:42:02:
                    62:ea:91:0d:d1:ae:46:62:e1:f4:aa:9f:cc:70:86:
                    21:ee:91:6f:3b:b1:35:7b:ea:22:f5:22:c5:f1:da:
                    13:36:97:0e:3c:e9:cb:2a:4b:59:cb:0e:02:0f:cb:
                    ca:7d:d1:93:7d:e0:2f:a5:86:04:1f:ac:96:e1:3e:
                    71:de:a6:c6:28:a5:a3:7d:fb:16:10:6e:20:2a:0b:
                    5d:37:b2:ea:04:b5:7f:45:71:e8:48:e0:0a:9b:d6:
                    7d:f3:77:d7:2c:ae:07:8a:c9:e8:89:44:5a:43:bc:
                    c4:55:b9:6f:57:25:7d:81:9c:48:bf:a7:45:5f:65:
                    e2:66:95:3c:68:b1:a0:66:6a:ea:6a:4f:09:1a:9c:
                    0f:04:5a:e9:8b:46:a3:f9:1c:28:fc:33:74:1f:26:
                    6c:42:f2:a7:20:bb:5f:fd:e8:92:60:25:fa:9a:eb:
                    57:b1:59:63:68:8d:2b:8e:dd:f2:5b:db:60:a7:36:
                    dd:f9:fb:0d:cd:0d:83:30:38:13:76:e4:8a:1e:51:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:71:D0:5C:DC:EA:B2:A6:9D:DE:CB:5C:24:22:45:F6:DB:A5:30
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:36:2d:fa:6f:bc:48:85:ab:20:f5:ef:11:86:60:f6:a2:
         e2:d6:ae:bf:7d:05:dc:de:07:95:93:14:cc:49:60:96:0d:1f:
         7d:ad:9e:fd:37:ca:2a:df:56:cd:81:90:07:d3:9b:53:91:4e:
         25:76:ca:93:36:c3:84:76:e5:30:0c:9d:07:61:96:0d:77:fd:
         4a:9b:bc:6a:5b:ff:55:19:b0:83:8d:b2:10:b0:6f:05:be:42:
         a6:05:9e:b4:28:96:6b:e3:07:37:be:ab:b2:fb:26:84:43:f9:
         b9:2d:18:b4:41:07:83:6f:5b:19:d5:4f:ec:4f:8d:7f:c4:af:
         ca:92:24:e5:97:f6:17:13:9f:57:84:34:59:a9:1f:0a:4e:45:
         c0:f4:9f:8d:bf:5e:4e:0c:6d:15:68:4d:7a:33:3e:f1:96:6a:
         6f:5f:43:b8:23:4c:49:d4:db:ce:5d:b4:c4:47:73:5a:c1:5c:
         f6:b6:89:62:91:43:b8:5c:92:be:1b:fe:48:8a:96:b0:40:84:
         56:4a:63:c4:01:c1:d6:16:f7:ca:42:11:a3:82:47:ef:e8:9a:
         ac:f4:a6:ef:ef:7a:bf:91:39:38:ba:d8:aa:ad:12:8c:7d:db:
         3c:84:cb:e2:8d:b1:19:a1:d9:a5:bf:7a:6e:7d:b5:f6:e4:3d:
         93:2b:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----