Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030353a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          7CdFT990NC5mGSEgm9xP1lqXzS6y9n3+1GgwESFPQJA=
Subject key identifier:   1D:48:CF:D1:94:4C:BE:4D:22:9B:A0:9F:A8:1B:1A:FD:FD:57:A4:D4
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       5FCE7728D4BFE58BDCA22E79027553554F8FE4AB
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030353a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:45 +0000
ROA not before:           Sun 26 Nov 2023 11:03:45 +0000
ROA not after:            Sun 24 Nov 2024 11:08:45 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9005::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ce:77:28:d4:bf:e5:8b:dc:a2:2e:79:02:75:53:55:4f:8f:e4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:45 2023 GMT
            Not After : Nov 24 11:08:45 2024 GMT
        Subject: CN=1D48CFD1944CBE4D229BA09FA81B1AFDFD57A4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:d3:54:e9:0f:aa:cf:0b:b9:c6:fb:09:af:
                    53:48:0d:b5:05:fc:66:76:0a:0a:fd:d7:a0:4c:97:
                    e7:0b:6d:cf:02:5a:ac:b8:70:fb:1f:5c:58:00:38:
                    12:90:13:71:eb:f1:9f:04:d7:14:b8:9a:17:e4:5c:
                    35:a9:c7:58:35:9a:98:fd:cb:dd:d5:63:ae:9c:81:
                    16:28:81:b5:6e:ea:21:1e:17:e0:9e:57:48:d9:d0:
                    b6:44:43:b4:c9:7a:75:b0:13:2a:57:d0:85:58:30:
                    3c:27:b2:c7:ac:f7:ad:de:6c:bb:c8:50:b5:31:96:
                    62:0a:b9:22:e5:d7:83:0a:9a:3f:5d:67:db:9b:17:
                    d3:49:45:2e:6c:b8:6b:b9:8a:83:16:e7:d1:f1:66:
                    7d:43:74:12:31:b7:18:20:36:1f:18:01:60:66:96:
                    9e:19:34:de:51:e3:aa:ee:5f:bd:94:75:2d:d1:78:
                    51:ea:00:62:57:41:1b:ab:72:8d:99:ed:2c:fc:b8:
                    49:b0:f0:de:a6:78:db:3d:9f:02:00:f9:20:0f:76:
                    fb:1c:94:3f:30:fc:f5:ca:c0:5f:0b:16:2d:7c:4e:
                    98:e5:d4:6b:cb:3b:a2:bb:30:4f:06:ee:79:d1:1f:
                    dd:c3:8a:06:a3:c5:f9:0c:b5:86:5d:60:a0:88:78:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:CF:D1:94:4C:BE:4D:22:9B:A0:9F:A8:1B:1A:FD:FD:57:A4:D4
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030353a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9005::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:79:1f:bf:65:6c:b9:c0:11:c1:7d:a7:0b:2b:98:90:32:
         5f:98:08:ec:16:88:e6:64:fb:22:ca:1d:84:dd:e0:8f:d5:8f:
         8e:8e:db:ba:9d:cc:14:63:0e:84:56:e9:3d:12:27:83:e0:72:
         07:58:92:b4:ae:eb:fd:e8:90:42:10:26:26:62:a1:dc:dc:18:
         02:79:2a:2c:42:d7:58:37:01:82:7c:b4:03:84:06:e2:72:6e:
         52:61:f2:cd:07:c1:ba:39:a6:60:c7:04:00:a4:3b:9e:60:b1:
         bd:6f:3b:9b:0c:40:08:f3:f6:ac:8f:8e:d1:a5:05:d9:1d:0d:
         15:be:fd:21:19:84:ad:de:ec:35:aa:de:64:da:e6:e0:69:5e:
         34:de:20:7d:57:a1:b4:61:6a:05:d2:84:69:7d:49:6f:7e:44:
         84:9e:4f:65:94:03:6f:ff:25:52:f2:ee:80:38:a0:26:ba:d1:
         c2:6d:c5:ee:fc:bd:82:03:d2:36:40:40:47:8e:ea:30:a4:98:
         f5:79:ff:31:75:34:b7:f1:d8:d6:ae:8a:a3:f0:19:ac:70:b2:
         a4:66:6c:84:65:f0:56:bc:5d:86:2d:78:c5:e2:ed:78:9b:28:
         14:47:7c:a1:d5:fa:34:3f:ad:88:b8:b8:f1:ff:62:d4:56:53:
         41:02:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----