Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530653a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530653a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          lP5qlGJt6tQ9jdenkP3iCxPoXQe+tViIeslguvn61ZY=
Subject key identifier:   04:7E:A0:2D:5A:96:3D:EC:6B:71:22:5A:70:5B:D0:14:9C:C3:3A:29
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       43EB1ADFA2264FC87A431E275F89BF27EC08BD81
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530653a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:09 +0000
ROA not before:           Sun 29 Mar 2026 19:17:09 +0000
ROA not after:            Sun 28 Mar 2027 19:22:09 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee0e::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:1a:df:a2:26:4f:c8:7a:43:1e:27:5f:89:bf:27:ec:08:bd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:09 2026 GMT
            Not After : Mar 28 19:22:09 2027 GMT
        Subject: CN=047EA02D5A963DEC6B71225A705BD0149CC33A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:66:47:b5:09:55:53:4c:ac:83:e2:28:fa:
                    0f:55:09:15:fa:9b:3b:14:2d:5e:0e:15:6a:d5:d1:
                    b8:3c:4a:e9:c8:df:ef:03:cb:b2:e9:8f:28:b9:7d:
                    68:2f:09:49:59:1c:ea:75:0e:38:d1:97:79:84:39:
                    fb:31:89:d3:1a:3e:5d:b7:1b:7d:d4:b0:1c:9b:b7:
                    50:84:37:7b:6b:26:d7:20:fc:12:8d:8d:5c:ec:89:
                    1d:c8:9c:0c:6f:8e:05:e7:65:99:36:ed:7b:49:f4:
                    0b:9b:14:16:27:a6:a1:f9:dc:fc:5c:78:db:76:ac:
                    86:8a:24:ba:c1:47:4d:a3:68:f8:e1:70:1b:33:2a:
                    56:6c:26:a6:bb:e7:b9:e5:6e:5c:03:0e:5f:de:17:
                    c5:02:17:6b:07:2c:2e:06:9d:7f:11:fe:49:3e:35:
                    f1:b5:99:1a:c1:24:14:09:3f:1e:3e:a7:d0:76:79:
                    71:4f:44:31:30:66:1b:52:cf:62:2f:78:36:78:a4:
                    b6:1a:61:2e:3d:3e:d5:ff:1d:0f:b8:3e:2b:c2:96:
                    4f:27:e3:ed:67:02:aa:ff:d6:f3:d0:f7:aa:58:d5:
                    b9:f6:fd:fd:a8:9d:07:5c:6f:91:e5:39:04:51:49:
                    bd:b9:f8:77:69:91:03:86:48:32:44:b6:d1:31:c1:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:A0:2D:5A:96:3D:EC:6B:71:22:5A:70:5B:D0:14:9C:C3:3A:29
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530653a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:82:56:80:e5:45:51:28:c8:0a:41:23:e1:e2:00:6c:90:7e:
         2c:45:57:7f:30:ce:4e:1b:a3:48:6b:93:e8:54:be:c1:4b:10:
         2a:8a:c2:dd:71:a1:2b:ab:ae:1f:b9:ca:a6:76:34:de:b1:1f:
         3a:60:97:d7:70:a3:2e:c7:e8:a5:ce:16:97:b0:f1:4d:01:e2:
         b2:59:86:e3:51:5d:9e:4d:79:cb:d3:c3:6f:1f:4c:42:0a:78:
         8f:d3:18:b7:f6:f2:1e:d8:1f:f5:4d:a4:e3:f8:a9:7f:4e:bd:
         c7:be:2f:eb:a2:96:b4:65:a1:a0:06:c2:9d:6e:5f:d7:7e:fd:
         2f:39:ba:0c:59:bb:61:98:48:fd:01:3e:7d:6f:4f:c2:33:ce:
         bc:52:73:78:87:1f:d2:67:de:b6:d5:96:94:f0:4f:15:91:8d:
         4e:bf:bb:b9:7f:2d:24:47:af:cf:52:6d:52:ea:d7:12:fe:42:
         68:ba:46:61:bb:e3:c8:1a:cb:11:9b:67:92:b2:46:0c:4e:19:
         36:39:87:06:ed:0c:79:9d:5e:b5:a8:98:be:29:b5:94:78:61:
         20:1a:14:37:37:a6:71:54:b4:36:14:3e:e8:08:ec:e6:73:d6:
         5f:f8:64:de:5f:57:35:4f:af:43:5e:3e:6d:61:d9:b2:61:17:
         2e:8e:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----