Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530633a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530633a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          PxAzbzbv5RkrPswajtsyS7bJd6+1+17Dvu4ZNbkx82g=
Subject key identifier:   8C:15:65:28:97:FE:4E:30:94:23:C3:81:2C:42:30:54:97:1A:0F:5B
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       2B6DBAE1EE699EFFB5BFC0B168CFE7BD2EB9FA5F
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530633a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:11 +0000
ROA not before:           Sun 29 Mar 2026 19:17:11 +0000
ROA not after:            Sun 28 Mar 2027 19:22:11 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0c::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:ba:e1:ee:69:9e:ff:b5:bf:c0:b1:68:cf:e7:bd:2e:b9:fa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:11 2026 GMT
            Not After : Mar 28 19:22:11 2027 GMT
        Subject: CN=8C15652897FE4E309423C3812C423054971A0F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:6c:85:34:9a:54:0f:f2:7e:3b:25:48:46:
                    e6:28:47:e7:b8:f9:31:31:e7:d5:75:b0:0f:ea:78:
                    93:c7:21:60:3c:87:18:3f:73:5e:82:87:f6:d2:f1:
                    ab:20:2a:fc:df:22:5b:45:b0:9e:1b:bd:d5:fa:57:
                    3f:99:14:0b:75:7a:5f:95:a9:4e:49:9d:48:8f:d3:
                    64:3c:bc:fc:a1:a8:63:e4:37:a4:82:94:8b:46:7b:
                    6a:09:96:4c:d4:89:9a:ec:59:39:11:d6:d2:e7:5b:
                    d6:f4:d6:72:9f:99:af:15:6f:24:01:37:10:6e:00:
                    0b:b6:1a:12:ff:5b:3f:b1:24:a9:e2:46:ba:81:52:
                    5e:d9:51:a3:e8:1a:ab:a4:cc:1a:b3:fe:45:82:bd:
                    36:2a:70:e7:0a:14:06:1b:12:c3:3f:3b:76:46:74:
                    0b:b9:06:65:0b:24:2c:a9:52:b6:f7:b9:80:3e:52:
                    4c:d5:76:95:cb:c6:87:9a:b2:75:dc:68:a8:f4:f6:
                    9a:6f:1e:a4:fb:42:3b:4f:ae:60:97:87:94:c3:4d:
                    88:10:40:4b:bf:fd:60:6b:03:2b:f8:0d:5a:60:00:
                    d2:8a:2a:c4:f5:99:62:fd:bd:f5:1a:35:ee:b8:b0:
                    9f:f9:9d:ea:62:e1:7b:3a:f5:6d:ba:dc:f7:14:60:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:65:28:97:FE:4E:30:94:23:C3:81:2C:42:30:54:97:1A:0F:5B
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530633a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:cc:99:8a:97:49:34:f0:45:ff:52:78:4b:0b:e7:73:be:
         ff:d8:aa:d1:5a:12:08:ed:1d:f6:bc:bc:b5:09:d8:10:89:81:
         27:dd:43:05:d2:5a:34:1c:9d:52:63:b1:80:9b:43:ae:7e:73:
         88:9f:a8:91:44:42:11:44:d3:13:8a:88:b1:f3:e0:8c:6b:0c:
         39:79:88:75:d9:81:c2:3f:97:92:65:f2:99:4f:85:da:50:40:
         3c:73:60:ec:73:9e:2c:2d:e8:82:97:68:76:51:51:ec:c8:8f:
         ed:3b:de:1e:03:61:20:9a:b3:81:3a:38:e4:4a:92:95:a4:51:
         0f:15:a0:0d:ce:e9:6c:08:d6:39:8b:b3:8e:8f:35:ff:68:80:
         fa:d3:07:85:73:db:01:1f:00:cf:7e:aa:69:e8:48:d1:4c:32:
         3f:5a:55:ae:1d:1c:be:62:a0:c0:a0:2e:24:3e:2c:cd:81:67:
         0f:a4:94:99:69:13:96:fb:ba:2b:17:67:5e:f6:c7:d7:ee:16:
         7f:06:89:1a:d7:5c:a7:00:a4:13:43:5f:0b:00:8a:23:a8:58:
         b6:0f:e8:4f:b7:99:02:4d:9e:57:bc:0a:36:20:89:4a:20:4f:
         3d:5d:6b:b5:f7:6f:05:60:62:ee:4e:d8:8f:05:94:d4:3d:7b:
         14:2e:92:04
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUK2264e5pnv+1v8CxaM/nvS65+l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MTFaFw0yNzAzMjgxOTIyMTFaMDMxMTAvBgNV
BAMTKDhDMTU2NTI4OTdGRTRFMzA5NDIzQzM4MTJDNDIzMDU0OTcxQTBGNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92myFNJpUD/J+OyVIRuYoR+e4
+TEx59V1sA/qeJPHIWA8hxg/c16Ch/bS8asgKvzfIltFsJ4bvdX6Vz+ZFAt1el+V
qU5JnUiP02Q8vPyhqGPkN6SClItGe2oJlkzUiZrsWTkR1tLnW9b01nKfma8VbyQB
NxBuAAu2GhL/Wz+xJKniRrqBUl7ZUaPoGqukzBqz/kWCvTYqcOcKFAYbEsM/O3ZG
dAu5BmULJCypUrb3uYA+UkzVdpXLxoeasnXcaKj09ppvHqT7QjtPrmCXh5TDTYgQ
QEu//WBrAyv4DVpgANKKKsT1mWL9vfUaNe64sJ/5nepi4Xs69W263PcUYFOjAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUjBVlKJf+TjCUI8OBLEIwVJcaD1swHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4MMA0GCSqGSIb3DQEBCwUAA4IBAQA3
0cyZipdJNPBF/1J4Swvnc77/2KrRWhII7R32vLy1CdgQiYEn3UMF0lo0HJ1SY7GA
m0OufnOIn6iRREIRRNMTioix8+CMaww5eYh12YHCP5eSZfKZT4XaUEA8c2Dsc54s
LeiCl2h2UVHsyI/tO94eA2EgmrOBOjjkSpKVpFEPFaANzulsCNY5i7OOjzX/aID6
0weFc9sBHwDPfqpp6EjRTDI/WlWuHRy+YqDAoC4kPizNgWcPpJSZaROW+7orF2de
9sfX7hZ/Boka11ynAKQTQ18LAIojqFi2D+hPt5kCTZ5XvAo2IIlKIE89XWu1928F
YGLuTtiPBZTUPXsULpIE
-----END CERTIFICATE-----