Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/326130663a316363353a323730303a3a2f34302d3438203d3e20323035303038.roa
File:                     326130663a316363353a323730303a3a2f34302d3438203d3e20323035303038.roa (raw, json)
Hash identifier:          BnIiTt7lYkg61/5kI8GlQeZ2K6jYXq5LpIVfYOf0DDs=
Subject key identifier:   F2:81:32:30:B7:5A:F0:3A:AD:E7:20:6F:45:2A:BA:A7:AA:36:9E:6A
Certificate issuer:       /CN=CECA73092344CA9B6F74C1A83D6C747962186C47
Certificate serial:       39D192CF0C439591545FDE148D95595727E99BCB
Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/326130663a316363353a323730303a3a2f34302d3438203d3e20323035303038.roa
Signing time:             Sun 11 Oct 2026 07:47:32 +0000
ROA not before:           Sun 11 Oct 2026 07:42:32 +0000
ROA not after:            Sun 10 Oct 2027 07:47:32 +0000
asID:                     205008
IP address blocks:        2a0f:1cc5:2700::/40 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d1:92:cf:0c:43:95:91:54:5f:de:14:8d:95:59:57:27:e9:9b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47
        Validity
            Not Before: Oct 11 07:42:32 2026 GMT
            Not After : Oct 10 07:47:32 2027 GMT
        Subject: CN=F2813230B75AF03AADE7206F452ABAA7AA369E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:88:5e:cb:13:30:91:de:03:22:cd:b6:bf:
                    cc:18:df:01:cb:9c:db:a2:2a:0e:6b:ad:27:6d:30:
                    b4:c1:41:e7:ca:63:58:0c:0b:39:33:0e:fd:12:df:
                    a6:21:2b:b3:5b:4f:4f:ae:a5:39:7e:5e:99:75:55:
                    c3:5b:c7:67:d9:e4:51:a7:f5:86:c3:78:00:1d:e9:
                    15:74:af:d0:e1:b2:eb:f3:6a:e3:fa:c4:bf:1c:22:
                    25:d7:04:24:ae:db:52:5c:4a:a1:6e:b8:a0:ea:36:
                    6b:ca:69:8a:5b:a3:a1:63:95:e2:ba:d7:a4:58:dd:
                    ff:b1:fe:d4:ad:9d:49:4a:88:9e:10:f4:d7:33:f3:
                    c0:72:5b:4a:85:c5:8f:af:85:4c:5a:5b:0b:79:a9:
                    e1:cb:cb:d1:3b:6e:55:79:51:31:1f:cb:93:2d:a5:
                    2b:0b:fe:7c:74:21:7b:bc:a7:fa:96:af:b1:b3:87:
                    32:c8:09:18:09:ed:28:76:3a:68:2a:53:a1:71:12:
                    06:ca:55:d7:40:5e:aa:37:e9:08:e3:31:0a:67:e7:
                    39:d3:4b:82:f5:a2:f3:75:1e:71:c9:b0:c2:f8:d3:
                    0e:b5:30:ae:5b:8c:6d:34:1f:f4:05:f7:08:e0:bf:
                    08:14:40:ea:f5:8e:b0:fe:76:98:c3:6b:ca:7f:ce:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:32:30:B7:5A:F0:3A:AD:E7:20:6F:45:2A:BA:A7:AA:36:9E:6A
            X509v3 Authority Key Identifier:
                keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/326130663a316363353a323730303a3a2f34302d3438203d3e20323035303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:49:73:5e:00:cb:ce:57:c5:22:cf:4e:69:83:12:b1:4c:
         2f:bb:25:21:b4:9c:e2:c4:88:76:9d:ba:13:3d:bc:6b:dd:f9:
         ec:c7:2a:e9:cd:f8:a2:b8:f1:c9:08:fd:0e:52:40:1d:e0:c6:
         40:0a:68:81:0e:44:72:68:0a:cf:36:a2:a2:82:07:59:98:df:
         41:cf:e7:4c:b8:1e:b5:2e:1f:15:f9:da:40:4f:87:d8:05:eb:
         02:14:3a:d7:b0:87:05:3e:85:4b:95:e7:49:87:04:a9:f4:61:
         a2:f1:af:ac:76:5e:0e:ec:39:85:3b:30:b3:03:ef:9f:6f:4f:
         b3:63:02:cc:4d:ff:c8:72:ad:f0:3a:5c:7f:2c:9d:81:88:06:
         73:0f:8e:38:fb:77:1a:43:8b:ba:a4:ab:a0:84:83:16:9d:43:
         fc:38:6d:4e:40:59:8b:c7:73:07:dc:7b:69:5b:3c:87:9d:19:
         45:8e:5d:a6:ef:7d:18:c3:cf:a4:c4:73:75:5c:a8:d8:d6:00:
         a6:20:33:cf:6c:9b:bc:2e:fa:70:fd:d0:40:7e:7d:35:2b:27:
         29:41:1a:1d:54:6d:74:8e:24:96:65:76:01:74:7a:47:d9:0b:
         62:68:13:76:63:c7:14:d0:18:27:33:39:e2:7d:0d:61:d2:41:
         b1:c1:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----