Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          6j3mnqP1a5qnSOakBylXmmR2dyyA88xxhDcP+sFjQhs=
Subject key identifier:   E5:F2:1F:9C:96:DD:1D:15:C4:BB:72:0B:65:82:B4:EC:E1:22:C7:80
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       28B4FD24804FEAE1A4A1808847B950E03CC8D887
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:13 +0000
ROA not before:           Sun 29 Mar 2026 19:17:13 +0000
ROA not after:            Sun 28 Mar 2027 19:22:13 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee07::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b4:fd:24:80:4f:ea:e1:a4:a1:80:88:47:b9:50:e0:3c:c8:d8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:13 2026 GMT
            Not After : Mar 28 19:22:13 2027 GMT
        Subject: CN=E5F21F9C96DD1D15C4BB720B6582B4ECE122C780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:7d:1e:91:d9:ab:d4:1f:77:99:56:f4:56:
                    40:72:50:0f:12:c0:34:95:b6:67:a5:0e:d2:3d:9b:
                    8e:52:b8:ad:c6:04:70:04:57:63:98:e3:c5:55:a0:
                    c0:f0:82:f5:fb:aa:40:c8:8d:3c:dd:33:61:1c:ff:
                    c3:62:74:79:3b:5f:d4:fb:3d:9d:6b:99:94:75:02:
                    bf:c2:97:11:75:66:58:d8:c2:c9:f9:26:75:f1:53:
                    80:5d:f3:c1:96:27:80:97:da:20:9b:de:96:36:d6:
                    68:d1:c6:70:8e:b7:8c:86:3e:c6:c2:93:0c:83:cd:
                    5e:6f:73:3d:68:94:53:e1:7c:1b:3c:ff:b9:78:c5:
                    7f:e4:b2:09:8e:0e:5d:1f:de:4a:d5:33:01:8c:3f:
                    57:83:a8:ec:11:a0:30:90:de:21:d5:40:18:53:7c:
                    3e:65:63:5b:64:7a:87:a8:2d:ee:70:46:a7:28:e9:
                    5c:f4:6a:bd:ce:68:c1:ee:50:34:bf:b0:90:d4:85:
                    2f:ee:1f:8e:c0:b7:4d:d0:fa:62:ea:a1:2f:5e:cd:
                    60:be:4d:56:9a:32:c5:cb:c1:8e:0c:fb:07:82:52:
                    3e:d5:e8:8d:5b:6b:0c:d3:e8:a2:2c:ee:5f:5e:ed:
                    ab:cf:2e:72:ba:82:ab:7e:3b:b6:78:5d:d2:1a:46:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:1F:9C:96:DD:1D:15:C4:BB:72:0B:65:82:B4:EC:E1:22:C7:80
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee07::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:cd:03:77:7b:c1:76:55:77:44:4a:58:6f:0c:c8:66:32:
         d3:91:a5:56:e6:13:70:05:0a:a7:83:a6:cf:90:8f:ca:8f:39:
         24:3f:91:c7:b6:dc:17:b7:d6:33:c1:0a:7e:58:e9:8e:1e:73:
         d8:77:a8:ec:a9:f9:63:2c:2a:e8:eb:ac:95:d0:0c:44:af:95:
         64:a2:c2:bb:7b:28:9d:d4:b8:51:1a:ff:1e:ae:46:33:d6:36:
         3f:cc:eb:92:ad:f6:a2:35:be:44:d2:34:81:a7:24:a7:99:23:
         0e:e2:81:e1:e5:7d:51:78:c5:1d:d7:4c:10:ed:cc:b0:77:f9:
         6a:51:b7:2d:ef:2f:94:9e:b1:24:c1:e8:11:59:9a:54:7c:10:
         65:12:e0:17:d3:de:29:51:96:4e:0a:43:3b:e2:d4:3c:8a:64:
         f8:5e:71:33:35:fc:86:75:d4:ce:e6:09:71:a9:69:17:87:c3:
         74:53:dd:7d:d8:ba:5c:ec:2c:1f:ba:03:fa:5f:09:5a:19:d4:
         a2:de:3f:32:2d:99:18:c1:32:fc:15:bb:8a:b9:79:8e:3d:c8:
         c8:06:ef:75:4d:4c:58:98:14:0d:ed:e5:61:e6:d0:a1:90:9f:
         ae:4f:7b:48:eb:b0:d3:48:26:e6:71:59:09:19:ac:fe:0e:d5:
         90:09:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----