Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          ++8vIocTP/nW3ISuZVMUFeWv2qO5M8t/+7CQWPvWOYs=
Subject key identifier:   B7:F7:A6:CB:FC:F9:FA:8E:91:C4:AD:76:60:3E:3A:E4:E1:F9:2F:A2
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       2BA56B06962BB74BAFA27F2D1D9C471C7F1EB9AF
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:10 +0000
ROA not before:           Sun 29 Mar 2026 19:17:10 +0000
ROA not after:            Sun 28 Mar 2027 19:22:10 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee09::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a5:6b:06:96:2b:b7:4b:af:a2:7f:2d:1d:9c:47:1c:7f:1e:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:10 2026 GMT
            Not After : Mar 28 19:22:10 2027 GMT
        Subject: CN=B7F7A6CBFCF9FA8E91C4AD76603E3AE4E1F92FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:24:4d:e5:f9:ee:36:76:98:61:df:da:de:
                    3c:bb:b1:aa:3f:23:e5:6b:73:a2:ff:9a:7a:b0:55:
                    49:29:de:d7:8b:19:bd:d3:75:98:ca:f4:1a:84:3a:
                    a2:2e:cd:4e:24:e4:5d:c5:6b:f7:ad:f9:07:41:25:
                    17:b8:9c:cf:11:f1:7d:2c:75:04:4b:8b:a3:0e:b2:
                    5a:38:60:09:74:2b:12:a7:90:6a:ed:a7:ca:63:92:
                    8d:b7:5f:a3:bc:c0:9e:47:00:24:5b:c5:57:57:b1:
                    c7:32:70:da:43:a8:07:10:cc:40:3a:3e:34:62:cf:
                    09:c3:14:2e:41:94:32:e5:ba:a6:6b:72:40:28:9e:
                    4b:a2:85:d6:f7:ef:8e:99:2e:1c:02:67:b4:2f:c3:
                    89:9e:76:8e:60:64:22:b7:ed:b1:a7:dd:ca:5d:00:
                    41:8c:cf:15:d4:d0:7e:69:ba:33:67:a3:e7:60:28:
                    e3:da:84:df:a6:0e:db:3c:9c:1c:9f:46:9e:a2:b2:
                    9c:c4:cb:a4:00:60:a4:e6:0b:81:ae:0a:6f:e5:4c:
                    1d:5a:50:d1:e1:7e:99:58:4d:d9:9d:4b:80:11:d5:
                    24:e8:22:49:8f:7e:71:66:cc:78:e5:79:04:c5:9e:
                    bd:45:cb:ff:05:c8:c6:6b:fb:ba:ac:8e:78:1f:a0:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F7:A6:CB:FC:F9:FA:8E:91:C4:AD:76:60:3E:3A:E4:E1:F9:2F:A2
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee09::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:65:3a:3c:20:22:04:b1:9d:7e:69:5d:35:e6:d4:14:96:17:
         2c:f4:7b:7b:3a:50:99:df:28:0d:66:f5:6f:f6:9c:16:b7:9a:
         b4:cb:92:bc:5d:dc:13:8b:05:f1:f2:fc:5f:54:03:04:66:84:
         34:9e:57:ff:05:20:7d:43:23:fa:ae:41:5f:c3:9c:f3:ef:e0:
         df:8b:de:64:ef:be:8f:b4:59:c9:ff:b9:17:12:74:33:b0:0f:
         ad:75:e0:c3:fc:98:9f:6a:39:8d:61:01:6f:fa:85:b1:f0:f0:
         09:b0:b2:e9:28:27:f8:b9:b0:26:e5:b7:ff:ee:cc:64:d9:1b:
         32:34:5a:4a:59:0a:7a:df:2c:9c:7b:91:c0:82:ef:58:c6:cd:
         90:72:ee:11:ff:88:6c:aa:80:f5:0b:87:3f:82:9d:93:e8:cc:
         08:04:19:d5:1a:41:dd:96:42:40:19:c7:e9:9f:1b:99:20:41:
         bf:87:85:7f:4e:ac:b5:e8:b6:d2:60:83:82:e8:c4:5a:50:43:
         88:c4:30:65:16:8f:a9:09:2c:17:0e:2e:4b:7b:28:dc:55:33:
         11:24:b0:31:0e:73:8e:b3:8f:24:39:0a:e6:9f:5d:2d:1c:d1:
         ab:d2:19:c5:b3:17:20:ab:8a:b7:43:0e:86:74:a5:b4:33:2c:
         b9:43:31:20
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUK6VrBpYrt0uvon8tHZxHHH8eua8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MTBaFw0yNzAzMjgxOTIyMTBaMDMxMTAvBgNV
BAMTKEI3RjdBNkNCRkNGOUZBOEU5MUM0QUQ3NjYwM0UzQUU0RTFGOTJGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAiRN5fnuNnaYYd/a3jy7sao/
I+Vrc6L/mnqwVUkp3teLGb3TdZjK9BqEOqIuzU4k5F3Fa/et+QdBJRe4nM8R8X0s
dQRLi6MOslo4YAl0KxKnkGrtp8pjko23X6O8wJ5HACRbxVdXsccycNpDqAcQzEA6
PjRizwnDFC5BlDLluqZrckAonkuihdb3746ZLhwCZ7Qvw4medo5gZCK37bGn3cpd
AEGMzxXU0H5pujNno+dgKOPahN+mDts8nByfRp6ispzEy6QAYKTmC4GuCm/lTB1a
UNHhfplYTdmdS4AR1SToIkmPfnFmzHjleQTFnr1Fy/8FyMZr+7qsjngfoOefAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUt/emy/z5+o6RxK12YD465OH5L6IwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4JMA0GCSqGSIb3DQEBCwUAA4IBAQB5
ZTo8ICIEsZ1+aV015tQUlhcs9Ht7OlCZ3ygNZvVv9pwWt5q0y5K8XdwTiwXx8vxf
VAMEZoQ0nlf/BSB9QyP6rkFfw5zz7+Dfi95k776PtFnJ/7kXEnQzsA+tdeDD/Jif
ajmNYQFv+oWx8PAJsLLpKCf4ubAm5bf/7sxk2RsyNFpKWQp63yyce5HAgu9Yxs2Q
cu4R/4hsqoD1C4c/gp2T6MwIBBnVGkHdlkJAGcfpnxuZIEG/h4V/Tqy16LbSYIOC
6MRaUEOIxDBlFo+pCSwXDi5LeyjcVTMRJLAxDnOOs48kOQrmn10tHNGr0hnFsxcg
q4q3Qw6GdKW0Myy5QzEg
-----END CERTIFICATE-----