Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          5VmyZmMvVi1HoTak31JM1gEn9x0urTPaAQdLs1pq+rw=
Subject key identifier:   40:D2:35:FD:14:C4:B0:9B:5A:93:CF:9B:2C:99:CB:64:C5:3A:5F:19
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       7B50F6D5307104C0F20E0B0ECAE1E348FC0A760A
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:05 +0000
ROA not before:           Sun 29 Mar 2026 19:17:05 +0000
ROA not after:            Sun 28 Mar 2027 19:22:05 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0b::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:50:f6:d5:30:71:04:c0:f2:0e:0b:0e:ca:e1:e3:48:fc:0a:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:05 2026 GMT
            Not After : Mar 28 19:22:05 2027 GMT
        Subject: CN=40D235FD14C4B09B5A93CF9B2C99CB64C53A5F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:16:bb:c4:55:4f:5f:8f:e7:d9:4a:4a:91:
                    1e:b0:50:13:e7:c9:81:69:7a:d9:08:a4:0f:13:08:
                    67:c8:c6:cc:5a:5c:3a:bd:24:72:fb:57:e4:b7:4c:
                    33:43:c0:0d:99:75:4a:94:bf:e8:68:b4:21:7e:97:
                    a8:42:45:68:e8:34:ac:c3:f5:9a:f2:82:38:c1:62:
                    3f:b8:9b:f0:81:52:00:c4:fb:00:b6:be:2d:09:3e:
                    df:44:cd:7c:c5:15:bc:6b:da:aa:82:92:9e:95:c4:
                    e8:21:b9:b1:ff:21:24:9a:d6:cb:4d:59:f3:e4:22:
                    43:3f:2a:86:27:80:34:2e:87:09:e8:d8:a9:c1:88:
                    fd:91:9d:fb:99:50:c1:33:06:d9:bd:59:bd:0c:cf:
                    0a:50:a1:fb:f1:bd:e5:35:35:17:49:d9:ca:95:9f:
                    60:07:dc:5d:d5:1f:b4:9b:58:4e:7a:04:2b:83:88:
                    84:d9:6f:e5:fb:86:4d:9d:0f:7a:4f:66:b9:08:76:
                    53:1f:c4:06:6c:1e:30:68:58:75:66:c7:65:c2:39:
                    ba:26:1d:12:e2:89:dd:b3:a2:4e:da:c4:b1:80:9d:
                    1c:eb:e0:ff:8e:28:e8:2d:88:df:ca:f3:51:c3:41:
                    8b:74:bc:df:7b:f5:eb:f1:6e:0d:86:93:47:52:99:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:35:FD:14:C4:B0:9B:5A:93:CF:9B:2C:99:CB:64:C5:3A:5F:19
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:b0:39:e8:e7:b5:75:f0:6c:36:f5:97:8e:3b:41:1b:43:1f:
         c2:a7:e6:ec:bf:8c:ac:2f:be:6b:93:2d:e1:fe:f5:23:bf:a1:
         7a:64:76:3b:19:d8:1f:72:1a:32:4c:73:c1:a4:0b:63:94:ee:
         de:51:80:f4:d9:aa:92:23:8f:9b:5e:a0:8a:fb:e5:f6:f4:1d:
         0c:3e:c3:be:77:a5:0a:17:63:80:31:23:d7:94:d8:c7:0a:49:
         98:01:60:2d:76:92:9b:85:c0:c2:7c:c6:ea:8d:e7:51:81:8f:
         5c:11:50:10:8e:cc:15:ae:86:28:96:fc:ab:53:c9:36:81:53:
         b6:76:c8:80:5a:18:80:17:4d:39:ed:05:4e:05:f9:86:25:e1:
         5a:fa:2d:a6:f8:71:38:ca:25:2d:e5:7f:75:ec:bb:f7:ab:85:
         57:da:89:48:a8:47:9c:50:57:a2:e2:d4:9c:67:2a:5f:e9:d4:
         97:e5:88:4f:8e:14:60:8d:65:80:e6:88:2f:fa:3e:a4:11:20:
         a1:66:ea:53:d6:74:9f:b1:8f:fa:4b:86:80:80:cb:1e:7b:57:
         22:7b:7b:1e:34:c5:82:9e:c7:0f:ef:a3:f9:f4:a0:92:18:d2:
         5c:52:49:ef:67:f8:d0:8a:2a:76:5b:5f:0c:25:f6:22:bf:79:
         94:9a:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----