Route Origin Authorization
$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439363a3a2f34382d3438203d3e20323134343032.roa
File: 326131313a323963303a336439363a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier: CwQIgTpPamR+mRDV10yEpH9bc3mhR+HKjiaiiROydxo=
Subject key identifier: 58:C3:C8:BB:F9:16:CE:32:83:9E:AC:08:48:92:68:2C:EB:FE:C7:9A
Certificate issuer: /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial: 0EC65D8ED76C27098F00595542D82FBB98D777BE
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access: rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439363a3a2f34382d3438203d3e20323134343032.roa
Signing time: Wed 25 Jun 2025 10:26:19 +0000
ROA not before: Wed 25 Jun 2025 10:21:19 +0000
ROA not after: Wed 24 Jun 2026 10:26:19 +0000
asID: 214402
IP address blocks: 2a11:29c0:3d96::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c6:5d:8e:d7:6c:27:09:8f:00:59:55:42:d8:2f:bb:98:d7:77:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Validity
Not Before: Jun 25 10:21:19 2025 GMT
Not After : Jun 24 10:26:19 2026 GMT
Subject: CN=58C3C8BBF916CE32839EAC084892682CEBFEC79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:64:3a:7f:cb:98:01:3b:78:b7:91:b1:70:
2b:b3:6f:33:cc:73:6e:1c:50:0b:69:0d:c6:c1:de:
51:07:d7:56:ff:b9:19:c4:25:00:cc:82:df:83:d7:
91:9f:5d:04:4d:b3:0f:62:14:72:c6:42:bc:9b:e6:
7a:1b:7d:f0:2c:a6:24:26:21:61:ba:10:16:05:8c:
93:ce:94:e4:f1:84:5d:ce:76:54:0b:f1:f1:4a:41:
b7:dd:90:fb:91:e1:7d:f8:cf:49:dd:f5:c0:bd:13:
69:51:82:b8:1a:e8:c7:4b:4a:04:f1:33:79:f6:b9:
ea:2e:f5:f4:de:6b:59:3e:29:94:85:17:39:ee:3e:
d5:84:44:dc:75:92:93:33:8b:7f:42:1c:d4:50:a3:
c1:06:32:bd:fa:50:c7:36:f6:56:8a:d4:45:62:16:
1a:87:65:34:fa:75:f1:95:15:2a:a2:54:75:ca:0c:
66:aa:c3:0e:57:c3:47:ae:ef:c7:cd:88:b2:86:db:
d8:97:9b:3e:4f:c0:f4:78:6d:e4:90:10:8a:2a:20:
2d:6c:32:ad:b3:88:bd:46:fd:aa:8c:b0:b8:6c:ca:
0f:b2:cc:b6:04:0a:e6:90:28:9f:8d:7a:3f:ca:55:
bf:08:1e:5d:12:33:0b:1b:44:a9:d2:e8:80:15:96:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:C8:BB:F9:16:CE:32:83:9E:AC:08:48:92:68:2C:EB:FE:C7:9A
X509v3 Authority Key Identifier:
keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439363a3a2f34382d3438203d3e20323134343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d96::/48
Signature Algorithm: sha256WithRSAEncryption
50:b4:61:e4:64:c8:03:54:06:7a:be:6a:76:09:88:26:92:6c:
2a:db:c8:93:3c:93:e1:60:c9:d0:c7:37:f6:ed:19:23:9b:1e:
d3:64:f1:5b:84:a2:a7:f5:ce:c7:82:38:55:17:d3:57:bf:e7:
9a:c7:ab:a6:c3:15:c4:37:09:45:8c:82:eb:a9:2b:9d:1b:33:
ca:a4:b6:4c:62:a3:22:54:06:57:ca:8f:f2:85:dd:f3:74:2c:
c9:c5:3f:47:fb:e2:c7:4e:ca:27:24:3a:15:05:a8:59:7c:20:
72:63:0a:cd:51:2e:7c:51:d3:fc:b0:6d:39:1c:5f:13:23:85:
72:a8:17:e1:3a:9d:2a:75:c1:b7:a5:68:09:69:1a:f2:23:d1:
cb:15:c6:1c:bb:5d:56:1f:e6:63:13:19:2c:ea:cc:9d:0f:1a:
f2:94:e1:a3:4d:9b:bb:b7:b9:7e:bb:ee:0c:7b:78:4a:89:2c:
77:f6:f4:a3:01:26:2c:e5:19:8e:ac:4b:20:f9:db:ab:a6:94:
cf:37:19:b2:7f:32:12:66:87:39:f7:56:6c:17:c2:d2:4e:77:
8d:e4:77:ed:ec:39:e1:ef:f4:c0:03:40:b6:fb:6f:d4:76:2c:
19:ed:51:a5:54:39:8e:08:64:0f:2b:94:04:f1:45:2e:36:00:
74:dc:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:14:12 2025 by rpki-client