Route Origin Authorization
$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
File: 326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier: ro7+1e5yqFmSryeCpEE6SF/D3pPEhWaAmCE41XnK/yw=
Subject key identifier: A1:56:B2:34:47:5E:9B:6E:C5:A8:BB:3F:44:5C:32:88:B6:C3:DE:A5
Certificate issuer: /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial: 23306CA8743D55516A6B94C917E86F371C7B4452
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access: rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
Signing time: Wed 25 Jun 2025 10:26:07 +0000
ROA not before: Wed 25 Jun 2025 10:21:07 +0000
ROA not after: Wed 24 Jun 2026 10:26:07 +0000
asID: 214402
IP address blocks: 2a11:29c0:3d95::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:30:6c:a8:74:3d:55:51:6a:6b:94:c9:17:e8:6f:37:1c:7b:44:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Validity
Not Before: Jun 25 10:21:07 2025 GMT
Not After : Jun 24 10:26:07 2026 GMT
Subject: CN=A156B234475E9B6EC5A8BB3F445C3288B6C3DEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:6a:d9:6e:f7:0f:b5:69:4d:29:ca:02:2a:
fe:df:f9:bc:a1:6d:60:32:17:8d:34:71:e5:1d:50:
a0:91:c6:ee:10:b5:fb:85:5a:47:46:93:b9:13:ce:
23:95:26:72:09:d4:6e:52:10:ff:95:10:86:41:d1:
88:be:c7:26:08:3d:e6:19:0a:8a:ad:f3:c0:01:8f:
56:fb:da:06:43:d1:99:3a:2b:7d:21:55:a5:7d:a4:
f5:59:a8:9a:ab:af:71:3e:16:1b:7d:b0:50:5c:cf:
5c:79:ed:c3:0e:5a:8a:fd:16:f8:8b:fc:7d:df:70:
76:e1:38:17:81:07:62:d9:8d:d7:0f:1b:86:d0:66:
eb:f1:6d:8a:77:b3:b6:86:9b:85:df:a0:e4:d5:1b:
a5:43:9a:e5:2d:7c:d1:ef:64:2e:50:35:1b:37:f1:
18:32:62:4a:bb:65:f1:4b:3f:30:7c:43:70:cf:d5:
6f:f4:9f:63:41:a1:d2:70:27:34:33:b1:90:24:71:
8f:82:3b:8d:48:4c:7e:44:98:d6:ab:80:5e:0c:86:
3a:a8:41:35:ea:30:7f:3d:e2:e2:d7:2d:34:4c:d5:
28:78:ee:fd:bf:ee:47:53:d6:52:b6:71:62:86:19:
fb:3d:14:c8:fb:1e:97:af:32:d6:bd:3d:cc:1b:ed:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:56:B2:34:47:5E:9B:6E:C5:A8:BB:3F:44:5C:32:88:B6:C3:DE:A5
X509v3 Authority Key Identifier:
keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439353a3a2f34382d3438203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d95::/48
Signature Algorithm: sha256WithRSAEncryption
46:19:49:0d:8d:cb:aa:95:71:97:20:0d:06:5c:31:c0:73:56:
d6:9f:a8:a1:38:bc:e9:fc:68:d8:a1:2f:8c:45:e8:c8:25:fb:
59:2b:33:ea:e4:75:10:52:71:b6:40:8c:fc:e3:e6:72:90:40:
87:8a:f6:e6:57:83:dc:c0:75:7f:f8:ea:f1:62:c4:7f:6d:6f:
b5:7d:7f:da:bc:ad:50:4e:b7:1c:95:37:a1:0b:5e:66:67:0a:
f6:71:94:e7:53:79:93:81:4e:8a:fc:6c:a5:c5:5d:20:14:cc:
be:b1:31:e0:74:89:da:c1:b8:15:7b:d7:19:d3:66:a7:3a:02:
5e:94:52:c9:3c:15:2d:7e:c8:f7:91:98:9b:62:ba:3d:8f:a9:
e5:2b:2d:d0:26:75:ea:e5:21:55:f8:0f:70:4c:81:45:3b:a3:
30:2d:fb:37:ab:dc:b9:b0:da:b5:5a:a9:3a:1b:c5:f6:9b:a8:
98:fb:a7:06:8b:0a:13:9e:eb:0d:32:97:bc:b0:09:ae:a0:08:
e7:eb:42:5b:cb:1b:be:50:b7:fa:b7:9b:b4:e3:46:73:95:ae:
6b:c2:4c:4d:79:73:cf:dd:c9:1b:ff:b5:97:47:27:fd:2f:fe:
ff:a9:ac:53:26:2d:7e:73:ff:7a:27:d2:e9:69:a8:e6:0d:ba:
8f:0a:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:52 2025 by rpki-client