Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa
File:                     326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          EteTBrg/IsOmp4GYOD6mmNoRyL4m99VrDhpAZM5OWuw=
Subject key identifier:   48:EE:3B:68:22:58:38:D8:28:76:1A:CA:ED:3D:8D:9F:8D:88:25:7C
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       4454704678C4D2DE2FF4890C6A90D16CE403BBC9
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Sun 29 Mar 2026 19:22:10 +0000
ROA not before:           Sun 29 Mar 2026 19:17:10 +0000
ROA not after:            Sun 28 Mar 2027 19:22:10 +0000
asID:                     214818
IP address blocks:        2a14:7580:eefc::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:54:70:46:78:c4:d2:de:2f:f4:89:0c:6a:90:d1:6c:e4:03:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:10 2026 GMT
            Not After : Mar 28 19:22:10 2027 GMT
        Subject: CN=48EE3B68225838D828761ACAED3D8D9F8D88257C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:10:6d:91:fc:fa:0e:cd:2c:9e:77:fc:89:
                    c5:80:9d:56:58:78:73:71:c3:9f:b3:26:b9:3b:63:
                    15:60:c9:a9:92:7a:71:cc:6b:77:1d:76:04:dd:e5:
                    ee:08:89:cd:4d:a2:07:a1:57:4a:59:24:e8:e4:ba:
                    ef:73:fb:60:dd:9a:59:8f:e7:6d:57:78:0f:e7:69:
                    fa:8d:c8:d7:2b:e2:ec:1a:8e:c7:35:9a:9b:93:00:
                    eb:9f:33:13:dd:fb:56:8e:da:17:65:b8:87:c5:c1:
                    78:9b:f5:56:62:2a:2d:82:95:1b:57:8a:f6:5d:48:
                    c8:08:4a:21:66:08:eb:2a:af:f7:b7:7c:eb:90:b2:
                    41:b7:5f:9e:06:f2:3d:bf:3b:ed:19:b3:c0:15:1c:
                    d6:b8:51:20:39:b2:9b:88:df:e8:20:cb:66:06:64:
                    aa:44:80:11:3a:12:b4:77:5a:d5:bf:0e:7a:e2:67:
                    5a:bd:a3:0b:ab:ca:9b:db:e9:72:d8:0b:79:60:6b:
                    76:71:c6:29:f0:52:70:b5:d9:cd:05:93:66:5a:cb:
                    53:fa:a7:9f:21:9f:56:10:6a:49:70:eb:f8:fd:46:
                    a3:29:0e:9b:42:a5:9d:9e:15:34:f2:4e:30:d9:4f:
                    c8:bb:77:1e:fb:3f:6d:ea:b6:01:2a:03:fe:8f:57:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:3B:68:22:58:38:D8:28:76:1A:CA:ED:3D:8D:9F:8D:88:25:7C
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:eefc::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:48:b3:97:fe:44:84:93:f3:dd:f2:db:9a:1e:fe:93:91:
         99:1d:15:0c:27:d0:94:b2:b3:88:56:cf:1c:12:36:8e:a3:d7:
         7f:c8:b8:d6:42:8c:ac:39:2a:02:d2:bc:ee:aa:68:f6:42:a5:
         06:e3:6d:db:03:2b:76:f8:ca:23:9a:59:3d:d9:19:a4:a3:86:
         49:59:f6:fa:5c:e7:f4:59:5a:eb:9b:34:62:fd:81:41:41:93:
         6e:36:80:74:14:0b:b7:5d:1d:75:82:c4:bd:aa:87:0f:22:81:
         ad:d7:44:0b:67:a9:90:6a:1d:e5:8e:a8:c8:59:d1:41:ba:66:
         cf:a0:cf:c5:59:79:5a:31:07:c5:7c:0c:ee:d7:48:c3:ed:d9:
         0b:18:9a:49:9f:fe:2f:6d:c8:b0:d9:8c:81:81:f3:4f:e7:43:
         7d:f6:86:3a:61:c8:51:37:0f:f2:e2:27:e5:68:f9:73:91:00:
         36:ef:ca:e7:69:db:00:55:89:95:53:59:22:24:38:84:73:0b:
         e9:25:12:3c:b1:4b:06:f8:ab:6f:3a:1f:e3:ee:63:d4:86:cf:
         ea:0c:1e:04:8c:0f:fa:aa:14:92:81:6b:4c:09:5e:ba:48:36:
         6b:04:65:d7:d3:6a:b6:2f:46:a4:5e:7c:a9:39:3c:dd:d3:93:
         1f:a9:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----