Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
File: 326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier: gIroUeQkmH2DtJIj8L7vw6lkMIAMeqfHmGnOxDlNyYk=
Subject key identifier: 0A:81:1B:47:F5:E6:8A:BD:F5:13:65:20:67:B8:C0:57:30:56:DF:3C
Certificate issuer: /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Certificate serial: 2ACF44032D3D2484EB6F4CBA41D59E11CAF50F61
Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
Signing time: Sat 02 Aug 2025 00:59:29 +0000
ROA not before: Sat 02 Aug 2025 00:54:29 +0000
ROA not after: Sat 01 Aug 2026 00:59:29 +0000
asID: 214402
IP address blocks: 2a11:29c0:3d95::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Sep 2025 12:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cf:44:03:2d:3d:24:84:eb:6f:4c:ba:41:d5:9e:11:ca:f5:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Validity
Not Before: Aug 2 00:54:29 2025 GMT
Not After : Aug 1 00:59:29 2026 GMT
Subject: CN=0A811B47F5E68ABDF513652067B8C0573056DF3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:99:30:a1:6b:97:24:c7:1b:b4:85:d6:c1:
d8:64:82:0e:f6:f0:ae:5d:a4:00:6a:0d:b9:a1:a1:
9f:e0:78:b7:aa:2b:1f:a9:b6:e7:24:7e:ec:34:6c:
63:58:5f:ec:b2:bb:c4:c8:e8:c5:b6:46:7b:ed:86:
2e:48:12:1d:20:fe:e5:fa:86:21:91:41:45:44:fe:
73:ef:12:17:a3:1c:e6:67:8b:3d:c4:2a:dd:65:8c:
ba:2e:37:18:6c:4d:92:c8:52:7b:92:fc:9c:77:17:
ca:c4:13:81:e8:15:95:c2:38:7c:42:63:e5:34:4e:
94:bf:95:4f:6c:2f:fd:8e:cf:f0:bd:4e:60:db:a0:
a2:29:c9:2e:49:65:63:30:47:fc:1e:3e:60:09:d2:
35:f1:14:15:d3:8b:2c:c7:21:39:f5:69:92:61:ba:
93:7d:c2:77:e2:9e:c9:70:85:69:fd:cd:73:b4:0f:
6e:6c:a3:bf:ef:84:c8:9b:23:b4:43:4d:59:37:40:
bb:d3:98:07:2c:ba:09:66:ae:c4:49:e6:7a:08:11:
fe:da:1a:1e:06:af:b3:bf:09:cc:45:a8:ca:66:a0:
6a:d1:d9:b7:c5:74:1b:34:92:22:5b:9b:da:4f:a6:
17:d6:1d:62:42:44:30:02:1e:cb:7d:b1:6f:4a:83:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:1B:47:F5:E6:8A:BD:F5:13:65:20:67:B8:C0:57:30:56:DF:3C
X509v3 Authority Key Identifier:
keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d95::/48
Signature Algorithm: sha256WithRSAEncryption
40:56:9a:29:3e:c5:ff:64:34:65:85:a0:cc:c9:22:31:13:f1:
2b:38:c2:e2:69:68:4f:4c:57:de:63:a3:d5:da:0f:8c:b5:fa:
98:79:b5:e5:55:b7:b5:c7:9f:54:bf:9a:56:cb:a2:5e:0d:68:
03:9e:e1:29:42:8c:5f:0a:dd:1d:6b:29:07:1c:54:00:a7:02:
f8:f4:88:d5:bf:5e:07:9e:5d:18:1b:b7:fa:84:99:54:bc:e1:
77:a7:08:6f:76:a9:d2:ac:b3:7b:dd:78:00:1d:4c:ac:f1:6f:
a3:80:55:3f:34:c4:cd:36:c0:e8:fb:11:70:69:2d:cd:46:c6:
c2:ef:8d:2a:cd:e2:cc:f0:f0:c5:12:68:c4:9d:ba:83:f6:3d:
fd:c8:42:3a:7d:ce:66:6e:d4:23:15:ba:ee:41:0d:b9:3a:e3:
03:bc:67:7d:4d:7c:5d:1b:27:c9:2d:09:3b:91:be:f1:45:6d:
34:4e:4f:26:1a:23:af:9e:e5:5f:5d:10:4f:be:6f:bc:9d:7f:
df:b1:09:9e:52:aa:00:85:22:4a:b5:4a:cf:c7:76:cf:35:43:
15:81:7a:16:98:36:74:42:84:58:a6:2a:21:b2:28:c6:27:e3:
b1:f4:18:50:5c:b7:9e:4b:26:c1:4b:3d:9a:66:5c:75:74:1c:
83:78:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 09:12:36 2025 by rpki-client