Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa
File:                     326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw=
Subject key identifier:   18:1C:2D:E1:C7:48:5C:93:3D:28:40:D5:FC:C2:1B:2A:82:E2:D4:BD
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       4F676F3176F2306438DB6B292E602931F0B9E7FB
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Tue 20 May 2025 13:56:52 +0000
ROA not before:           Tue 20 May 2025 13:51:52 +0000
ROA not after:            Tue 19 May 2026 13:56:52 +0000
asID:                     198025
IP address blocks:        2a14:7580:710::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:67:6f:31:76:f2:30:64:38:db:6b:29:2e:60:29:31:f0:b9:e7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: May 20 13:51:52 2025 GMT
            Not After : May 19 13:56:52 2026 GMT
        Subject: CN=181C2DE1C7485C933D2840D5FCC21B2A82E2D4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:f7:94:ff:52:8e:f5:d5:87:c9:65:a5:42:
                    3a:86:8f:21:06:b6:c4:df:3b:5d:94:f3:0d:c1:0e:
                    b2:fc:ff:36:35:04:fb:43:c3:f5:49:41:9d:3a:1f:
                    ee:19:cf:99:49:96:ba:fd:7e:a7:06:3c:98:84:8f:
                    41:ee:86:62:d0:6a:0b:ce:b5:e4:35:5a:2c:b2:73:
                    46:39:9d:2f:23:e2:a6:7f:28:cf:b3:6a:87:ad:a3:
                    10:a9:41:09:0c:8f:39:05:ca:f0:6b:ca:5c:50:85:
                    eb:41:d5:71:c8:35:5e:8e:9a:5d:31:89:6f:82:df:
                    45:09:a4:50:8f:e0:e9:1a:36:43:07:6b:c0:a8:6f:
                    dc:bc:ab:3c:6a:0b:eb:db:43:af:28:23:a1:4e:c1:
                    a4:3a:1e:b0:fe:53:c4:a8:e6:a0:5d:15:c6:1b:c2:
                    0d:06:0b:02:86:73:6b:f7:df:17:38:1f:a5:5e:4b:
                    61:de:ce:8e:53:c4:6a:fb:68:9e:8b:17:d5:f1:ca:
                    40:eb:83:d8:a9:d7:e0:2b:59:f4:a4:7f:39:ef:e3:
                    b1:20:13:b4:1f:2b:ae:1e:86:11:26:4c:de:52:8f:
                    e9:65:c1:f9:73:5d:de:cc:67:78:9c:3c:54:d7:d1:
                    db:02:9e:b6:2f:81:cf:33:d9:62:56:b9:42:c6:2b:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1C:2D:E1:C7:48:5C:93:3D:28:40:D5:FC:C2:1B:2A:82:E2:D4:BD
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:710::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:de:8c:ef:64:07:15:14:e4:3b:b3:fd:e0:65:2f:53:8d:
         b9:a5:8e:8c:d3:7c:39:f4:49:54:16:91:26:5f:e1:5a:52:19:
         ed:81:e2:f9:f0:0f:23:05:04:b1:f2:ae:63:21:1f:ca:ba:3a:
         e1:88:7d:62:31:04:2d:b0:ea:d3:d2:30:a8:03:e3:a4:bb:e7:
         50:84:41:79:a1:ea:cf:9e:b1:ee:a0:d0:10:56:29:54:c9:63:
         61:6b:19:da:10:bf:ba:54:cd:bc:fa:d2:63:54:04:89:c7:6b:
         cd:7c:43:30:b0:ba:3f:01:8e:d2:63:96:f2:41:4b:b4:ec:b3:
         5c:77:3f:03:43:92:87:97:35:11:89:ad:e9:be:ad:85:a8:64:
         df:67:e2:88:f7:bb:35:73:77:b0:1a:7c:49:1c:b5:cb:eb:d5:
         52:bd:74:d7:f3:f8:f9:99:e6:19:3a:1a:f7:79:00:64:3b:da:
         88:7b:c8:76:2d:f6:85:e4:0a:71:48:fd:b9:dc:b2:55:20:52:
         cc:c1:b0:78:05:8e:65:72:9a:20:d9:7d:51:e4:82:b7:12:47:
         b8:3d:8a:df:ab:3b:e6:2a:60:83:97:9d:f7:d8:25:6b:42:eb:
         7e:7f:70:f9:69:4f:d9:b5:0e:00:d1:cb:fd:40:70:ab:37:ad:
         4d:26:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----