Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          XyilP1TwiMGs4Qpf9QaEhU6HhqeaAmwqG0660RxF5lg=
Subject key identifier:   74:A9:E6:4D:1F:D5:2D:40:EF:3D:DF:03:8B:8F:0A:3E:B7:E9:31:65
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       3D3BB3EAB9FBC3508C02FF0E2B063C772D6318FA
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:07 +0000
ROA not before:           Sun 29 Mar 2026 19:17:07 +0000
ROA not after:            Sun 28 Mar 2027 19:22:07 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee04::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:b3:ea:b9:fb:c3:50:8c:02:ff:0e:2b:06:3c:77:2d:63:18:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:07 2026 GMT
            Not After : Mar 28 19:22:07 2027 GMT
        Subject: CN=74A9E64D1FD52D40EF3DDF038B8F0A3EB7E93165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:9b:fc:f3:7d:86:b7:ca:d9:55:6c:f9:40:
                    d1:df:35:c8:63:9f:cf:ba:e3:ba:21:a4:1a:9a:c4:
                    32:f4:fa:a1:d9:81:d5:09:d4:81:c6:01:dd:8b:29:
                    27:66:83:37:a7:17:43:6e:68:3d:8f:e0:da:03:ae:
                    13:69:1a:8d:6f:24:22:41:66:7b:39:a2:dc:9d:36:
                    de:b2:5e:8e:dc:c0:0c:15:43:9b:97:77:d1:d4:4f:
                    c9:ce:23:e1:97:7e:31:79:b0:65:47:91:00:de:32:
                    36:e6:a4:43:33:fd:3d:26:cb:ae:87:7a:50:c8:43:
                    93:88:6a:db:45:27:98:77:bd:16:83:fe:52:ff:b1:
                    57:5a:b2:e6:20:82:22:d9:8a:86:a2:68:94:e8:3c:
                    be:36:31:09:17:ab:0b:35:8c:6d:a7:40:67:f7:48:
                    ec:71:9a:77:2e:94:67:c5:6e:a3:34:2d:f8:26:e1:
                    9c:66:6e:2d:5d:2d:d3:67:4f:17:60:a9:de:a9:91:
                    43:24:c0:3e:f3:ac:cc:7f:5a:5a:e3:c8:c0:6b:ef:
                    c2:60:ce:89:1b:a7:66:5c:52:8c:31:9f:77:cc:85:
                    d8:4e:90:5d:de:62:d0:83:39:e8:06:74:a7:03:a5:
                    3d:7d:d1:0f:ac:c4:a6:4c:55:34:21:81:bc:13:08:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:E6:4D:1F:D5:2D:40:EF:3D:DF:03:8B:8F:0A:3E:B7:E9:31:65
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee04::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:55:ab:85:f0:69:10:5d:ab:de:d6:e3:bc:1c:81:8a:3d:
         cf:c1:ae:a6:56:48:fc:b0:a6:f9:14:f1:80:25:e0:48:8d:1c:
         99:25:bf:8b:43:7c:2e:da:f4:42:e7:f7:a2:40:fd:98:c0:7f:
         40:43:6b:70:b5:a1:a7:76:4b:bc:12:91:84:2e:ed:d6:b7:51:
         00:42:d2:32:17:0d:f9:ae:59:f1:b3:e8:9d:be:81:c2:95:5f:
         69:cd:c1:15:a5:96:d8:77:39:db:59:5b:c9:06:42:d8:b6:8a:
         df:55:f0:2f:bf:a8:dd:57:af:5c:0f:23:91:a2:3e:45:5d:d4:
         72:08:7f:77:ee:17:99:56:73:29:2d:83:30:2d:89:5d:45:f7:
         e7:de:25:3b:44:1f:49:12:ac:fd:0f:39:f3:a9:97:15:86:62:
         a7:32:e1:4d:5b:13:bd:80:c7:b7:6f:b8:3e:e7:d1:7b:71:24:
         90:57:29:a2:d0:26:2f:de:0b:cf:c9:fb:6c:6c:ca:16:45:93:
         a9:a2:bd:4c:21:31:2a:0b:c7:3d:86:7a:1d:70:fb:66:88:b8:
         90:5d:3f:25:7a:ca:af:52:81:55:8d:8f:e5:38:ae:c0:0b:ae:
         c5:1a:be:73:7b:30:a9:d2:40:93:35:a3:b0:67:a6:8c:1c:eb:
         44:68:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----