Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439303a3a2f34342d3434203d3e20323134343032.roa
File:                     326131313a323963303a336439303a3a2f34342d3434203d3e20323134343032.roa (raw, json)
Hash identifier:          eg/WMC9RVZnuvXGAFJej4vu1fUFtSehI0VszYzYGkAg=
Subject key identifier:   8D:94:B5:7B:58:B2:41:93:BC:81:64:D4:BD:8D:0C:EB:D9:A2:46:93
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       7791AFBB674F913CD68CBAA6CA593389B12B8D60
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439303a3a2f34342d3434203d3e20323134343032.roa
Signing time:             Wed 18 Jun 2025 14:30:02 +0000
ROA not before:           Wed 18 Jun 2025 14:25:02 +0000
ROA not after:            Wed 17 Jun 2026 14:30:02 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d90::/44 maxlen: 44
Validation:               Failed, certificate revoked on Wed 18 Jun 2025 18:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:af:bb:67:4f:91:3c:d6:8c:ba:a6:ca:59:33:89:b1:2b:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 18 14:25:02 2025 GMT
            Not After : Jun 17 14:30:02 2026 GMT
        Subject: CN=8D94B57B58B24193BC8164D4BD8D0CEBD9A24693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:7c:62:4e:10:90:01:76:5d:91:cb:59:11:
                    2f:84:ef:1c:1b:08:03:6c:cb:61:4b:e0:36:8b:96:
                    df:88:c5:79:77:13:7f:cf:d8:32:cb:3a:ca:27:a2:
                    17:f8:6f:88:5c:82:ac:91:7c:3e:b8:cb:de:31:ac:
                    fe:36:1c:98:1c:02:c0:b4:5a:f9:11:b2:8b:59:7b:
                    33:e3:e3:86:4c:fa:22:6c:72:8f:40:79:2d:b6:48:
                    0e:cc:56:24:d1:e9:ce:e9:f4:93:24:af:63:77:e4:
                    d2:96:5b:cf:0e:95:ea:c8:29:c9:13:3a:b5:5c:e3:
                    20:24:bc:da:ce:71:49:db:5d:cd:cb:6f:19:6d:ce:
                    e9:33:b9:44:bc:f0:b8:9c:6d:f6:b9:94:15:d0:14:
                    7a:0a:83:0d:ca:d1:b6:c7:37:ee:7d:b1:12:83:bb:
                    51:d0:12:91:16:fe:f9:bf:5c:25:f5:37:3b:56:a9:
                    a3:29:8a:33:ec:c7:c9:ed:24:93:90:3e:b4:e1:86:
                    2b:0a:73:2e:5b:76:62:45:a0:3b:fc:7f:2c:e3:01:
                    5f:e8:0e:53:ca:01:dc:fa:9c:e7:cd:76:dd:4d:27:
                    f7:9a:cd:cb:87:2b:ad:ff:5d:65:d3:e0:33:80:33:
                    73:a2:73:7a:51:df:21:38:57:a6:34:8c:83:e7:5c:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:B5:7B:58:B2:41:93:BC:81:64:D4:BD:8D:0C:EB:D9:A2:46:93
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439303a3a2f34342d3434203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d90::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:aa:b2:65:d4:9c:7b:3c:68:bf:bb:d0:a7:a5:29:df:30:
         a8:c0:90:02:f3:79:f5:41:d1:74:54:1e:d6:9e:04:28:35:21:
         3d:b7:5e:2e:ec:38:11:17:ec:5f:65:7c:1a:33:0c:1b:ab:07:
         2d:b6:45:44:0d:31:9d:ce:0d:6a:16:29:f0:02:49:33:9b:b9:
         0d:f8:26:61:a7:0a:0a:09:13:8c:7a:97:4f:ef:64:87:ad:4c:
         ca:b6:23:f1:fc:48:b2:90:2e:0c:1e:21:e9:70:09:13:36:87:
         ba:cd:9b:a4:18:90:a4:2c:73:35:94:a5:15:4e:66:0c:ba:fb:
         e3:1c:f3:33:bd:07:ee:61:e1:ab:61:60:b1:90:1f:c6:64:6a:
         49:b0:59:e7:e2:3d:23:31:ce:27:d0:d5:0c:15:e9:03:ed:d4:
         b2:5a:ea:db:15:a0:25:09:7d:c8:46:69:e6:83:fe:24:d2:21:
         0c:f8:52:f5:53:d7:18:2b:61:cd:e3:70:dc:9a:2a:42:23:9e:
         e5:e3:58:ae:dd:28:0a:0f:8e:c3:68:20:de:f8:1b:53:24:e5:
         86:a0:e9:8f:8f:aa:bc:db:bc:13:53:95:f1:64:e7:3d:94:fb:
         f4:bc:16:42:45:f9:c6:10:a1:fe:81:34:17:7e:51:42:31:e6:
         c7:c9:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:14:14 2025 by rpki-client