Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062613a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062613a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          nd0uHsh/H6smEWyJVodZ1nSTtT+JgSHSqY6jDx2MW7A=
Subject key identifier:   58:A6:81:40:CD:D5:36:BF:99:47:A6:C6:08:F0:78:A0:40:D2:5D:EB
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       7D4D5979F6CAE349C2E9F3204499A47236AE6E68
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062613a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:44 +0000
ROA not before:           Sun 26 Nov 2023 11:03:44 +0000
ROA not after:            Sun 24 Nov 2024 11:08:44 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90ba::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4d:59:79:f6:ca:e3:49:c2:e9:f3:20:44:99:a4:72:36:ae:6e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:44 2023 GMT
            Not After : Nov 24 11:08:44 2024 GMT
        Subject: CN=58A68140CDD536BF9947A6C608F078A040D25DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:54:c4:f1:51:49:ae:56:67:41:86:1b:a5:
                    fd:27:e7:f3:b5:01:ab:de:85:c0:af:e0:44:b4:33:
                    8e:7c:10:5f:09:e6:08:10:ba:26:29:f6:70:91:53:
                    40:bc:6a:b8:34:1d:19:5e:01:fe:ec:8f:d8:83:35:
                    17:7a:0a:90:84:6a:d1:c6:eb:ef:16:25:d8:dc:c8:
                    0c:d7:18:8a:7e:cc:31:2a:8a:a4:6f:8d:95:70:0e:
                    7e:33:ef:7c:65:e6:ee:36:68:37:ad:fc:59:72:fc:
                    a7:7d:b0:f8:81:f2:f7:b1:50:bc:d6:76:89:52:16:
                    5a:b9:06:d7:25:54:04:a3:9d:39:03:e4:1a:41:ae:
                    a5:03:f0:d6:cd:b1:07:3f:80:0e:93:f8:82:67:fb:
                    db:ca:1a:7c:61:72:6d:f3:8f:79:b0:a5:aa:bc:88:
                    f8:e8:2d:63:91:53:88:1c:3c:34:d8:a5:54:dc:1e:
                    ec:0c:7b:65:aa:d4:65:03:f3:67:ab:55:41:aa:f1:
                    e5:94:46:cc:d8:6e:ab:82:84:fc:1e:22:c8:65:c0:
                    81:d0:f1:cf:03:4f:f1:01:a1:16:f9:61:b1:b1:9a:
                    a3:e6:d9:69:eb:61:76:4a:f8:3e:b1:ee:88:ef:6a:
                    19:dc:85:da:b1:60:3e:45:ed:73:ef:20:3a:62:28:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A6:81:40:CD:D5:36:BF:99:47:A6:C6:08:F0:78:A0:40:D2:5D:EB
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062613a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:fd:c4:ff:6b:ec:6a:af:72:eb:1a:91:ca:d9:95:e8:b3:
         34:c9:29:21:e4:80:4c:d6:96:af:1b:3b:32:42:11:2d:76:84:
         d0:25:eb:88:2a:75:bc:2f:b2:2a:8b:2a:45:bd:c3:41:f5:03:
         81:05:f4:fa:be:fa:9e:e8:05:f6:38:2e:da:94:44:ef:c1:c4:
         cb:79:69:3f:64:68:02:e9:2e:b9:26:b8:6c:fc:33:35:03:ac:
         b9:fc:df:74:6d:87:13:8b:09:9a:8e:bc:6e:55:d8:f4:6c:63:
         ba:b8:ee:10:aa:72:c8:85:e7:cf:b1:8b:1b:70:69:45:6e:69:
         35:c5:5a:0b:14:6c:02:47:79:f6:71:b0:b7:b5:b5:80:35:12:
         df:2f:c1:8c:b1:4b:0c:21:cc:3a:76:e8:3e:64:32:30:4f:3f:
         69:dd:41:51:04:9f:81:0a:de:0a:b8:91:5d:91:52:99:9f:23:
         a8:19:4f:9a:34:38:99:01:28:9b:4f:fa:1e:72:00:fb:e3:f1:
         43:4c:6a:5f:11:6b:b9:eb:c4:86:c5:be:19:46:ad:f7:72:ac:
         0b:e9:fa:d4:b2:71:0b:dd:18:43:12:68:cf:81:1a:34:ee:41:
         3a:14:f2:57:b1:7b:fa:b3:22:e3:4e:3b:56:74:41:60:23:92:
         c1:6b:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----