Route Origin Authorization
$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323134343032.roa
File: 326131313a323963303a336439343a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier: Y7ZjbAttPyk/NuxWgfDd/SJ97uBvIeK0cgyyWpCr+xM=
Subject key identifier: BC:B3:F0:02:6B:9A:8D:82:96:CA:49:47:FB:A8:A5:98:71:AC:34:03
Certificate issuer: /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial: 2AE85C1DEBDAB699AE758DED0EC69ED49877E465
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access: rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323134343032.roa
Signing time: Wed 25 Jun 2025 10:25:57 +0000
ROA not before: Wed 25 Jun 2025 10:20:57 +0000
ROA not after: Wed 24 Jun 2026 10:25:57 +0000
asID: 214402
IP address blocks: 2a11:29c0:3d94::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e8:5c:1d:eb:da:b6:99:ae:75:8d:ed:0e:c6:9e:d4:98:77:e4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Validity
Not Before: Jun 25 10:20:57 2025 GMT
Not After : Jun 24 10:25:57 2026 GMT
Subject: CN=BCB3F0026B9A8D8296CA4947FBA8A59871AC3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:ce:71:3c:b6:83:33:aa:ff:34:eb:61:cd:
95:1b:6e:3b:e2:2a:8a:be:e8:c0:19:cd:76:a6:a8:
b1:b8:38:6f:00:10:10:02:a6:96:11:13:df:4f:f1:
0f:2f:c1:c6:47:b0:f1:d6:17:ea:8a:23:cb:a0:45:
9e:48:34:09:7d:0b:f8:6a:44:bd:30:d8:24:0a:49:
b8:5f:99:9d:3e:1f:74:d9:4d:05:95:38:23:e8:21:
19:b5:f5:ef:6f:10:5c:e4:16:5b:43:9f:64:c3:af:
f9:8b:fe:71:bf:1e:06:ad:90:69:48:a0:de:c1:dc:
51:ca:e7:51:c0:30:54:1d:10:1c:3e:cb:80:ab:dc:
ca:9f:df:1d:d0:10:3a:29:d2:f3:e5:8d:3f:2a:51:
c3:9b:cd:fe:b6:e8:2b:7c:d9:3c:70:65:e7:5c:2b:
0b:ed:57:8e:6e:d2:57:49:8b:53:3e:c5:79:40:1c:
6f:2a:4b:75:19:56:25:78:dc:bd:c7:9a:22:13:73:
23:26:40:f3:f7:c6:ea:0a:a3:f4:bf:29:46:59:d9:
bb:21:32:18:94:9d:b2:3f:76:23:5b:43:b9:a1:15:
a8:51:d1:a5:b8:da:8e:9e:01:a5:b9:25:cd:9f:c3:
1e:5d:4e:86:25:6a:4c:6e:b4:82:37:82:5b:f6:6d:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:F0:02:6B:9A:8D:82:96:CA:49:47:FB:A8:A5:98:71:AC:34:03
X509v3 Authority Key Identifier:
keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439343a3a2f34382d3438203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d94::/48
Signature Algorithm: sha256WithRSAEncryption
11:de:7d:66:17:ad:b3:60:e1:90:b2:29:42:b2:13:24:b1:9d:
74:c8:de:50:31:b6:5d:dd:05:1e:fb:ac:3a:f9:a8:a6:3c:fd:
26:54:8d:64:ff:b3:fd:d8:6f:13:c4:5d:aa:75:86:30:19:f7:
e3:8b:e8:99:5a:6a:54:48:e6:b7:c0:b6:d7:84:0e:e5:2d:5b:
c7:94:f5:7f:8b:b4:33:1d:48:01:0c:4f:a3:e6:c4:83:99:e9:
37:e6:79:b0:87:d8:69:87:a5:02:3f:f8:ed:e9:33:2a:27:04:
bb:28:4c:b8:09:a9:22:69:c8:98:15:ee:c5:cc:4a:7b:50:2f:
4e:c2:b7:02:08:b3:59:86:45:a0:ec:cc:4a:bb:13:5c:94:71:
58:e4:59:b8:66:23:ee:8e:99:0f:bd:26:12:38:4e:73:8b:c2:
d4:f9:4a:32:70:6b:ad:06:a3:bf:36:79:a8:62:74:cc:ed:ba:
c3:a2:4e:66:b8:5d:7c:f1:2d:a4:e8:6d:d7:0a:d4:f6:98:af:
ab:26:a1:c1:61:74:0d:2c:7f:7a:c6:50:ab:6f:40:75:5e:0c:
15:4b:97:48:33:b7:98:2c:1b:76:9c:fb:ff:16:78:49:dd:0b:
0f:35:6b:b2:f9:c3:42:29:fb:85:c9:1c:34:9b:29:a4:85:06:
21:82:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:46 2025 by rpki-client