Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530613a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530613a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          GzPhuNHEcix/jhjA+RXMRUDLb/GVLssxhXhlJhCpWyQ=
Subject key identifier:   00:A5:EA:3E:E6:97:E5:7B:41:CB:03:C5:3E:A0:28:0B:B8:FC:74:4B
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       1B6A32E82CAD2923634C1D80678CC3D6AA2C728E
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530613a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:09 +0000
ROA not before:           Sun 29 Mar 2026 19:17:09 +0000
ROA not after:            Sun 28 Mar 2027 19:22:09 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0a::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6a:32:e8:2c:ad:29:23:63:4c:1d:80:67:8c:c3:d6:aa:2c:72:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:09 2026 GMT
            Not After : Mar 28 19:22:09 2027 GMT
        Subject: CN=00A5EA3EE697E57B41CB03C53EA0280BB8FC744B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:d6:ec:19:4a:c9:1b:0d:f5:16:76:61:5e:
                    db:31:ea:b2:29:ba:f7:4f:4f:5a:70:a9:38:0d:17:
                    25:38:a0:94:82:6d:8a:a6:5e:a3:29:3b:28:ae:a2:
                    18:57:d7:38:62:aa:28:2c:46:83:ce:5b:0e:f6:c7:
                    e3:e9:26:52:4c:22:23:5f:c7:5b:02:4a:c4:6b:12:
                    8d:53:fa:d2:3b:ab:ec:2f:12:a8:f1:b9:8a:4b:a5:
                    76:b8:2c:09:e7:a4:19:52:7d:70:d8:f9:67:20:ef:
                    48:22:5b:d0:8a:94:d4:a4:7b:d6:3d:74:15:12:82:
                    0f:88:7f:c9:1f:7d:58:c6:99:c7:4d:73:ee:37:7b:
                    e1:65:1a:e0:40:11:42:f2:25:cf:72:0b:06:02:82:
                    7b:e7:be:83:6e:45:6a:ca:aa:2d:b2:ad:7e:80:d3:
                    de:53:2b:ce:a6:95:94:95:6d:06:73:9c:70:4b:59:
                    d1:15:25:6f:43:dd:dd:6f:a9:b1:ca:d4:a4:aa:15:
                    ca:82:a1:a2:2e:85:3a:29:81:dc:11:4a:95:04:9b:
                    65:d5:d5:4d:bb:0d:ca:59:2a:2b:45:e4:f8:e9:aa:
                    70:91:5c:3b:6c:3d:31:91:19:79:09:a1:e1:8b:5d:
                    58:da:a2:da:82:c8:18:ad:67:94:90:a1:27:d9:84:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:EA:3E:E6:97:E5:7B:41:CB:03:C5:3E:A0:28:0B:B8:FC:74:4B
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530613a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:70:e5:2b:9b:c9:98:76:60:53:67:99:96:8c:51:79:06:70:
         93:f3:99:29:a2:dc:8d:dd:c0:e8:3e:51:e8:bf:96:b8:70:c3:
         4a:0a:fb:70:37:93:af:93:c4:f5:d6:0c:da:1a:d5:ea:98:09:
         b3:82:21:5d:a9:00:b8:09:dc:db:62:2d:42:3d:3d:d1:38:a3:
         e6:18:3f:ca:99:14:d6:4f:db:13:38:a5:34:6d:c7:cb:0d:07:
         46:0d:c2:60:d5:99:f4:b7:4e:d7:46:1a:f8:8f:ed:39:8f:5b:
         37:90:a9:d1:52:b6:49:93:a3:59:30:70:e6:5c:c9:52:7d:c8:
         58:ae:e4:61:28:49:76:ff:c5:1c:ae:80:7a:c7:4d:c3:62:55:
         40:f6:b6:6f:7f:60:60:55:1a:d7:ed:bf:2e:11:40:f9:4f:1b:
         38:27:4d:9b:2c:0a:a2:c4:12:7f:07:1d:8f:3b:7d:46:83:6c:
         14:c5:39:8e:41:fd:fe:11:e3:f5:da:83:f8:a9:8f:c3:38:2f:
         85:84:6c:97:9f:66:46:19:d1:d5:2c:d7:0a:7e:96:a8:30:62:
         2e:c1:92:2d:05:91:ea:b8:4d:e6:a2:17:70:9b:2f:35:23:90:
         49:ec:5f:1f:79:ac:4e:85:6d:73:00:2f:58:7a:3d:2d:f3:f9:
         19:35:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----