Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa
File:                     326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=
Subject key identifier:   C1:EF:D5:5F:55:41:A6:95:F5:FE:08:89:B8:F9:4A:EA:B8:45:42:92
Certificate issuer:       /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749
Certificate serial:       706D4301F2B00599F510CC84AEFBF1052184638D
Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa
Signing time:             Sun 04 May 2025 11:20:33 +0000
ROA not before:           Sun 04 May 2025 11:15:33 +0000
ROA not after:            Sun 03 May 2026 11:20:33 +0000
asID:                     198025
IP address blocks:        2a14:7580:c00::/40 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:43:01:f2:b0:05:99:f5:10:cc:84:ae:fb:f1:05:21:84:63:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749
        Validity
            Not Before: May  4 11:15:33 2025 GMT
            Not After : May  3 11:20:33 2026 GMT
        Subject: CN=C1EFD55F5541A695F5FE0889B8F94AEAB8454292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:e7:b7:12:3d:24:ff:52:b3:2d:26:54:9a:
                    9c:5d:48:10:c0:56:49:66:27:69:75:7f:d4:ad:6b:
                    b9:94:ef:79:19:91:39:ab:c6:5e:31:71:eb:fb:c7:
                    35:81:98:3e:be:73:83:f4:8c:82:85:1d:a0:91:f3:
                    67:df:eb:ac:58:87:98:0d:3b:f9:a9:e7:9e:aa:22:
                    f4:c3:5b:d1:27:75:5f:b9:26:16:e1:f0:75:1b:f5:
                    f3:af:6d:92:a4:fe:bf:bb:31:c8:da:78:70:22:ec:
                    c8:4d:d2:6a:73:33:91:af:6d:a9:96:c1:5a:6c:66:
                    a9:c2:b0:69:9a:56:b0:82:33:17:9a:85:67:bc:88:
                    eb:ef:38:a1:41:34:69:09:8a:0e:47:48:7d:74:89:
                    ae:f9:98:fc:b8:0d:06:76:83:6f:e3:52:ec:54:0e:
                    2e:77:8d:7e:aa:8a:1f:0d:38:78:ee:0c:17:84:94:
                    d0:0c:4c:fa:26:ad:ac:db:6f:18:ce:87:f1:c5:46:
                    f0:10:cd:86:6c:ec:10:10:a9:bc:d3:7b:07:7e:05:
                    6f:3e:60:e6:6d:91:c2:eb:a3:00:fc:2c:42:c6:b4:
                    1b:41:84:42:66:75:27:df:fe:8d:fc:9f:1f:48:cc:
                    98:c4:e1:c3:23:2d:d9:38:22:ca:19:e9:28:ec:35:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:D5:5F:55:41:A6:95:F5:FE:08:89:B8:F9:4A:EA:B8:45:42:92
            X509v3 Authority Key Identifier:
                keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:66:94:56:bf:a6:8d:77:a2:a1:cd:46:e2:37:fd:fd:b1:
         58:1c:39:94:aa:04:d0:67:40:cc:dd:19:89:da:1a:cc:84:3a:
         4b:d5:f9:46:b9:3f:07:ff:21:ec:32:e2:88:82:ba:7d:29:61:
         d6:ad:5d:94:83:88:df:24:99:ad:6c:45:38:71:a4:d8:0d:c3:
         d6:54:6d:7e:42:af:e3:9d:4b:f2:ac:e9:b7:54:15:3f:fc:b7:
         c6:03:c6:4e:04:98:e4:4c:f9:77:b1:12:78:5c:3c:f2:50:47:
         9b:4d:22:c8:15:d7:98:19:85:be:dc:80:01:b4:dd:d9:53:ee:
         f6:3f:d7:f5:58:e1:d4:28:f0:17:d8:6b:79:ae:2e:f5:a0:c7:
         e9:c5:27:b3:a9:7d:19:19:52:85:3b:74:38:6a:be:03:f6:d7:
         3b:69:a4:8f:ce:2d:ee:fc:b1:6a:f8:5a:2a:79:d8:fe:4b:7c:
         36:18:0c:66:64:66:44:33:47:b2:5d:08:43:c5:83:6f:1a:68:
         47:34:6b:50:9e:70:8a:59:5d:b2:e4:95:de:9a:35:38:72:f2:
         85:84:f8:58:87:7c:f6:a1:37:7f:b7:6d:b6:c9:01:e7:e3:6c:
         a8:c5:d7:d9:fd:62:1b:05:b8:fa:ca:ed:db:9c:b0:37:1b:51:
         85:56:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----