Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa
File:                     323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (raw, json)
Hash identifier:          fQakzTcM/omAhlgcB1mCPCXRW7JoIgU4BOEx0iEhRJc=
Subject key identifier:   3A:3D:43:14:1C:05:9B:51:4B:B1:97:6C:A3:5E:24:76:6A:00:8C:98
Certificate issuer:       /CN=A91650860000/serialNumber=EB28E9680B83512793C6973868B923D758D0D8A9
Certificate serial:       0BE062BC82B11BFB1948B0A253920652F9B8FB83
Authority key identifier: EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa
Signing time:             Thu 03 Jul 2025 03:53:29 +0000
ROA not before:           Thu 03 Jul 2025 03:48:29 +0000
ROA not after:            Thu 02 Jul 2026 03:53:29 +0000
asID:                     149301
IP address blocks:        2001:df3:efc0::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:62:bc:82:b1:1b:fb:19:48:b0:a2:53:92:06:52:f9:b8:fb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=EB28E9680B83512793C6973868B923D758D0D8A9
        Validity
            Not Before: Jul  3 03:48:29 2025 GMT
            Not After : Jul  2 03:53:29 2026 GMT
        Subject: CN=3A3D43141C059B514BB1976CA35E24766A008C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:b3:8e:28:8e:18:b3:30:66:10:9c:28:d1:
                    fd:ba:fd:26:ac:62:d7:ba:f3:06:76:34:60:f0:ae:
                    0f:45:47:48:b9:29:fe:69:50:d3:26:a2:fb:f6:dc:
                    8f:43:2f:41:ea:d6:83:1f:d7:12:7a:79:27:3d:36:
                    50:3c:65:ea:b8:38:43:81:2d:5b:51:75:c5:2e:fa:
                    10:b9:cd:e0:c0:85:ce:92:66:e1:7f:fe:9c:71:a1:
                    52:39:fc:55:0e:2d:92:3f:62:31:90:c8:19:a2:f8:
                    26:8c:51:d1:f4:a9:29:77:46:eb:63:9d:71:a4:25:
                    4d:98:7d:ff:96:9b:67:df:a4:46:10:41:59:81:7c:
                    bf:64:03:d8:c3:53:2c:f0:87:60:8f:a0:dc:74:17:
                    5e:f3:8d:80:27:78:90:41:d5:53:14:d6:4f:db:e4:
                    42:b6:ed:87:6c:ab:ac:35:75:85:84:e7:9b:2a:73:
                    d6:d7:60:e8:a8:4c:c8:6c:68:b4:90:b5:ba:ef:1f:
                    89:63:eb:03:b8:d3:aa:e8:de:1a:a1:5b:af:79:78:
                    64:e7:c5:60:4c:0b:8f:a4:8d:c5:65:ab:3d:bc:e7:
                    94:49:5a:ce:29:e5:fa:9c:cb:b6:39:a3:78:44:52:
                    6f:9e:38:a3:08:3f:82:56:f2:86:a4:71:6b:f6:65:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:43:14:1C:05:9B:51:4B:B1:97:6C:A3:5E:24:76:6A:00:8C:98
            X509v3 Authority Key Identifier:
                keyid:EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:1b:13:a4:be:a6:14:44:fe:e2:3a:73:f1:bd:4e:91:07:
         b7:32:99:dc:b0:87:1c:aa:51:e3:d1:9b:a8:92:bc:f7:40:c9:
         4d:e8:ae:e4:e1:19:66:4c:29:3f:a3:7b:47:f5:22:97:67:63:
         ce:32:fa:04:59:92:48:26:65:e8:b9:de:47:b9:9c:d9:6e:dd:
         7d:d7:58:d9:57:44:1b:a6:60:b2:7a:71:05:f3:a5:d8:0f:ce:
         78:f5:69:82:01:8e:ad:8c:1b:06:01:8a:17:50:94:2a:b4:eb:
         45:b2:72:73:c5:41:e5:06:bc:4c:5e:50:ac:46:c9:d6:29:44:
         a6:d1:1a:49:60:d5:5e:6a:24:a1:df:da:78:e8:5e:07:34:fe:
         85:71:78:6b:a1:c1:f0:b0:24:62:16:06:04:e3:bf:9a:e4:b0:
         ef:29:a5:21:a6:6e:91:97:6b:76:d9:fa:2d:b1:c4:c6:f7:8a:
         8b:48:b9:10:31:86:43:3a:6e:2c:3f:26:55:1f:8a:28:40:1f:
         4a:b1:bb:bb:7a:32:8b:95:3e:29:93:b7:fb:9d:ca:8f:da:35:
         cc:93:be:10:b2:ea:5d:44:c3:3e:26:b0:ea:fc:0b:5d:15:1f:
         7b:8b:cf:ad:8f:4f:86:d7:07:3b:49:61:91:04:a6:5a:65:a9:
         af:94:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----