Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530333a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530333a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          JcmsEI3UYFs57tddW8CHIIoId/fDCwX0VMj75SIeqfA=
Subject key identifier:   EA:F5:48:A6:88:B8:48:EE:84:E8:41:A9:E0:4B:A7:9A:71:DD:37:D4
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       3D1D63102D4E440D035897BFCE427772A0DCEC23
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530333a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:08 +0000
ROA not before:           Sun 29 Mar 2026 19:17:08 +0000
ROA not after:            Sun 28 Mar 2027 19:22:08 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee03::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1d:63:10:2d:4e:44:0d:03:58:97:bf:ce:42:77:72:a0:dc:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:08 2026 GMT
            Not After : Mar 28 19:22:08 2027 GMT
        Subject: CN=EAF548A688B848EE84E841A9E04BA79A71DD37D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:78:6c:4c:7a:c1:ac:27:49:3c:90:07:de:
                    c2:14:92:08:40:3b:d6:c6:d5:3e:48:7b:88:3e:15:
                    d1:cf:aa:7e:de:ca:9d:d8:22:02:e5:b3:88:09:92:
                    64:50:06:e2:b9:62:3f:82:6b:18:4c:e9:1c:23:78:
                    48:2c:96:5a:07:30:a1:04:71:0d:ce:4f:7f:27:2d:
                    2a:9d:39:e2:f7:99:c1:18:49:23:09:c8:11:fe:d6:
                    a1:6a:33:8e:17:84:b8:4c:c3:28:6f:f2:b2:af:54:
                    01:ba:9d:45:fb:06:1e:80:d3:b1:b3:c9:d5:85:3e:
                    54:9d:55:16:77:c5:fd:5e:bc:a7:1f:fb:6a:5c:de:
                    b9:91:91:77:a1:78:4c:58:0d:48:6e:90:3b:0c:d2:
                    73:1f:8a:d2:3a:3c:6e:2d:40:b4:3e:56:9b:7f:43:
                    b9:e8:c1:42:5b:11:08:af:05:9e:2f:8e:be:22:2c:
                    1f:ca:8a:d3:74:6a:45:77:db:4b:be:08:d4:df:81:
                    dc:92:2b:a5:97:90:84:f4:0e:ce:f9:92:f4:6b:8c:
                    98:8e:94:25:21:62:c9:0a:db:75:58:54:61:ac:1d:
                    c3:69:61:f5:83:76:5a:14:f8:84:c8:9f:15:e2:53:
                    87:42:c7:8a:be:0b:28:0e:3a:bf:a9:21:39:d5:9e:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:48:A6:88:B8:48:EE:84:E8:41:A9:E0:4B:A7:9A:71:DD:37:D4
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530333a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee03::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:26:9d:d4:64:92:1a:f9:ed:58:c1:b4:71:3f:8a:d7:8c:
         0b:c7:cf:0f:63:74:d9:c8:5b:65:fa:12:ae:92:08:b9:14:e4:
         d4:2e:18:cb:54:84:45:a1:0d:ff:b1:41:73:61:f5:10:58:b0:
         73:ca:24:b2:06:2d:83:eb:7e:ae:a2:bc:b5:fc:21:63:9f:54:
         e0:d1:c0:27:8c:cc:2b:21:de:be:03:ba:83:07:04:f8:1d:d7:
         0a:dc:c8:fb:58:e0:d1:cf:42:22:34:a2:f9:ce:2a:0a:86:62:
         28:2b:6b:78:35:c2:49:af:49:ad:17:28:74:ae:84:96:9d:8d:
         53:00:03:96:78:f9:ab:00:c6:d2:16:6f:f2:ca:6b:71:22:f1:
         44:1b:84:07:7d:18:03:04:69:41:93:17:05:90:5d:eb:c3:cb:
         b7:4d:59:d7:d6:ba:5d:92:2f:fd:81:16:51:d1:7b:43:b9:06:
         47:44:02:08:90:09:ff:0a:7c:01:73:3f:75:18:53:13:0c:1e:
         d1:86:06:9e:59:fc:1c:3f:a4:7c:14:ca:a2:b8:4c:3b:0d:6f:
         61:d6:b4:8c:f6:3f:c4:a7:a4:ca:4a:34:a5:0b:0b:ed:cd:85:
         7b:b9:43:0e:80:3e:6a:6a:4c:e0:af:24:6f:13:84:63:6f:67:
         20:64:2e:1c
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUPR1jEC1ORA0DWJe/zkJ3cqDc7CMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDhaFw0yNzAzMjgxOTIyMDhaMDMxMTAvBgNV
BAMTKEVBRjU0OEE2ODhCODQ4RUU4NEU4NDFBOUUwNEJBNzlBNzFERDM3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrnhsTHrBrCdJPJAH3sIUkghA
O9bG1T5Ie4g+FdHPqn7eyp3YIgLls4gJkmRQBuK5Yj+CaxhM6RwjeEgslloHMKEE
cQ3OT38nLSqdOeL3mcEYSSMJyBH+1qFqM44XhLhMwyhv8rKvVAG6nUX7Bh6A07Gz
ydWFPlSdVRZ3xf1evKcf+2pc3rmRkXeheExYDUhukDsM0nMfitI6PG4tQLQ+Vpt/
Q7nowUJbEQivBZ4vjr4iLB/KitN0akV320u+CNTfgdySK6WXkIT0Ds75kvRrjJiO
lCUhYskK23VYVGGsHcNpYfWDdloU+ITInxXiU4dCx4q+CygOOr+pITnVnkxnAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU6vVIpoi4SO6E6EGp4EunmnHdN9QwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4DMA0GCSqGSIb3DQEBCwUAA4IBAQAO
9yad1GSSGvntWMG0cT+K14wLx88PY3TZyFtl+hKukgi5FOTULhjLVIRFoQ3/sUFz
YfUQWLBzyiSyBi2D636uory1/CFjn1Tg0cAnjMwrId6+A7qDBwT4HdcK3Mj7WODR
z0IiNKL5zioKhmIoK2t4NcJJr0mtFyh0roSWnY1TAAOWePmrAMbSFm/yymtxIvFE
G4QHfRgDBGlBkxcFkF3rw8u3TVnX1rpdki/9gRZR0XtDuQZHRAIIkAn/CnwBcz91
GFMTDB7RhgaeWfwcP6R8FMqiuEw7DW9h1rSM9j/Ep6TKSjSlCwvtzYV7uUMOgD5q
akzgryRvE4Rjb2cgZC4c
-----END CERTIFICATE-----