Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa
File:                     326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          22iBn0sTkmMSvveqhXWRL4vtjFRQaXSlxlg6JbxjoNU=
Subject key identifier:   6B:BD:25:CF:2C:DC:A2:C3:0B:B4:45:06:D7:FA:D1:D9:65:C2:D6:2E
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       02DC7F2BC22DC4DA150763E85381626CDFFB7CB5
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Sun 29 Mar 2026 19:22:14 +0000
ROA not before:           Sun 29 Mar 2026 19:17:14 +0000
ROA not after:            Sun 28 Mar 2027 19:22:14 +0000
asID:                     214818
IP address blocks:        2a14:7580:eefe::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dc:7f:2b:c2:2d:c4:da:15:07:63:e8:53:81:62:6c:df:fb:7c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:14 2026 GMT
            Not After : Mar 28 19:22:14 2027 GMT
        Subject: CN=6BBD25CF2CDCA2C30BB44506D7FAD1D965C2D62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:f8:69:0e:a4:28:93:73:aa:a4:15:df:cb:
                    5b:98:ca:d5:e8:de:00:82:79:1f:76:31:32:ee:17:
                    f5:6c:48:3f:fb:9c:cb:b4:69:f9:b1:d1:91:cf:53:
                    2a:0d:aa:07:39:69:02:d2:57:93:3d:fb:8b:0c:b6:
                    9c:05:9e:94:c2:e1:49:b3:dc:b3:df:fd:bd:a6:63:
                    50:89:f5:ec:b2:87:5c:4c:9a:c8:4f:25:f1:71:79:
                    a4:5c:52:8a:57:d4:40:6e:fd:94:8f:05:d1:82:50:
                    e4:de:0f:85:47:32:be:f0:f1:5c:e8:d6:8c:9c:fe:
                    64:f8:4d:e0:6a:4d:4d:16:2e:d1:47:8c:67:1b:e0:
                    46:ea:3b:2d:21:97:47:9f:8a:10:fe:a4:2d:e0:f2:
                    99:79:02:dd:e0:ef:e8:0d:18:75:c2:15:db:d2:72:
                    70:37:26:83:99:e5:4f:cf:32:fe:07:5a:b2:cc:f9:
                    17:25:50:24:bf:19:08:5a:37:f2:3c:04:71:a2:6e:
                    75:fa:09:a3:96:70:ed:bb:47:c2:7c:f7:da:5b:e2:
                    4f:12:23:16:60:99:01:e9:2a:8c:d7:61:c9:30:42:
                    a7:0d:a4:32:da:e7:33:7c:7b:1d:ff:82:7b:4a:13:
                    9c:39:ba:5d:12:77:9b:89:22:30:5f:47:88:54:4e:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:25:CF:2C:DC:A2:C3:0B:B4:45:06:D7:FA:D1:D9:65:C2:D6:2E
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:eefe::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:d4:0b:32:2a:1a:18:4d:cd:b6:8a:d2:4d:eb:75:02:d5:1a:
         cb:a4:f0:6f:40:6f:bd:af:ef:e7:1c:a2:99:ea:cb:25:8a:e6:
         41:cf:9a:6c:56:fe:a6:42:7a:45:2c:ce:6e:01:3d:46:f9:50:
         43:b9:aa:9a:ea:28:9b:73:0f:92:06:77:12:0d:90:8c:6b:18:
         1e:b9:1c:b0:2f:7d:b1:78:a4:fb:d6:f9:b0:0f:bb:b6:69:22:
         70:2b:b5:ae:ce:67:d6:7d:3a:7c:8b:15:db:79:22:42:2e:7e:
         48:a2:9c:72:ff:1f:bb:3c:f3:4b:5d:2e:e7:c9:66:d2:a7:77:
         8d:9f:9d:2c:ec:f8:c7:d9:f2:02:e5:ec:66:3a:58:6d:f4:20:
         e3:86:a1:57:84:2e:60:13:16:33:05:fa:28:35:57:fe:e8:8f:
         4f:ff:d4:4f:cc:ea:6f:40:d9:b1:58:85:cd:7c:ff:e3:fa:c1:
         ce:98:c6:8b:fc:46:f2:33:65:03:98:2e:87:f3:90:92:64:bc:
         b6:fd:f7:bd:43:59:3b:68:35:13:3f:8a:8a:32:79:b5:df:ce:
         db:9d:ea:95:68:50:10:b4:17:a0:1c:2f:b0:6c:b6:09:2b:7c:
         f8:ae:47:15:77:d4:a3:78:3e:35:82:e2:6d:aa:49:8e:d1:47:
         d9:a5:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----