Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
File:                     326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier:          xYMB//iCSdn37gQ250BZYATi3kZW6v80lWT7rj1mTCc=
Subject key identifier:   AE:2E:61:A0:9A:4B:40:15:EB:8C:DC:67:C4:47:83:87:19:B8:EA:AE
Certificate issuer:       /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial:       4C102ED94CE4509D44706A2F031A7305850A10C0
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
Signing time:             Fri 27 Jun 2025 00:14:59 +0000
ROA not before:           Fri 27 Jun 2025 00:09:59 +0000
ROA not after:            Fri 26 Jun 2026 00:14:59 +0000
asID:                     199763
IP address blocks:        2a0a:6044:bc66::/48 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:2e:d9:4c:e4:50:9d:44:70:6a:2f:03:1a:73:05:85:0a:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
        Validity
            Not Before: Jun 27 00:09:59 2025 GMT
            Not After : Jun 26 00:14:59 2026 GMT
        Subject: CN=AE2E61A09A4B4015EB8CDC67C447838719B8EAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:19:8f:bf:f1:dc:2b:49:1e:95:d0:26:06:
                    4a:b4:0e:b8:b3:8f:fb:c5:e3:40:24:f9:ab:1c:67:
                    ff:bf:1c:71:7b:e4:ec:43:9c:d5:24:b4:f5:98:61:
                    c7:be:c1:15:49:6e:f4:5b:7c:00:db:27:a6:bc:f3:
                    a0:c0:19:71:dc:6b:2f:b8:01:30:c6:c7:a5:ab:74:
                    27:fc:56:3c:53:e9:3a:11:52:03:8a:33:06:0f:99:
                    96:82:2b:ac:f8:a5:9e:9a:33:00:a1:db:f3:23:f8:
                    c5:8e:e2:ae:ed:04:a2:fb:2f:fc:f3:0a:56:a5:c4:
                    58:bd:a1:33:0f:00:0b:66:2f:fd:c8:a4:3d:60:a6:
                    ea:3b:e8:25:65:70:d5:6a:f0:1c:f2:7b:ff:54:90:
                    a6:51:37:98:0b:01:f5:8e:d4:54:1b:f1:75:a3:f4:
                    1c:1e:97:64:e8:e9:41:0c:92:a3:e5:91:01:3e:87:
                    0f:27:d9:41:f1:b1:41:72:48:45:34:db:55:57:1a:
                    69:1d:78:87:5f:a0:b8:28:c0:e9:3f:bd:da:d8:c9:
                    2e:af:f5:75:83:fd:e3:b7:01:71:0c:e7:20:69:fb:
                    41:ea:3f:67:27:90:84:26:ff:2f:93:f8:2f:cd:82:
                    23:ab:1f:a9:64:19:1a:86:1c:10:34:fb:7b:e0:f0:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2E:61:A0:9A:4B:40:15:EB:8C:DC:67:C4:47:83:87:19:B8:EA:AE
            X509v3 Authority Key Identifier:
                keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bc66::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:72:bd:4c:3f:36:bf:ae:33:2a:4b:26:da:4d:0b:82:3c:c7:
         df:d3:e5:69:92:ae:34:9f:ef:ef:8b:55:56:f3:de:dc:a8:50:
         ee:b7:07:05:87:75:3d:61:95:25:7e:47:f6:9c:ea:65:e0:3a:
         19:db:59:3b:e0:c1:3a:1d:9d:99:3a:19:23:08:d9:50:ad:6e:
         88:aa:c7:db:e1:fc:77:c6:58:64:e3:55:19:d5:85:3d:37:9b:
         1a:c2:ef:57:81:96:f5:02:a3:12:7e:2b:2d:e2:67:42:21:84:
         10:2f:3e:96:d0:5a:d4:e8:54:8b:95:0e:e5:e6:d2:3c:2e:b8:
         d2:74:b5:5f:a3:cf:d7:0f:7a:85:2b:6f:56:ee:21:55:32:d6:
         aa:98:56:76:aa:28:c4:6d:8b:21:d8:54:be:71:6c:2d:e3:e9:
         f8:1e:f4:86:61:0d:ef:23:5c:0e:1b:fe:8d:07:7e:1f:92:48:
         cc:fc:f5:1c:b9:a4:d4:c0:76:5b:d9:e2:e5:f7:ae:31:12:85:
         09:f4:d7:b2:fe:48:45:fe:33:a6:ae:14:c6:1a:37:f3:21:82:
         68:b9:56:81:83:5f:ec:d2:3e:1a:7d:1b:10:a7:78:9b:68:39:
         96:a0:70:b2:4c:73:85:7c:88:3e:27:39:30:b9:1f:39:22:5d:
         b5:0d:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----