Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439373a3a2f34382d3438203d3e20323037363735.roa
File:                     326131313a323963303a336439373a3a2f34382d3438203d3e20323037363735.roa (raw, json)
Hash identifier:          l2lACnRTGKeowu9Y9bzkk6Zq2VPpwYDzP/mHSnyfCyw=
Subject key identifier:   54:10:ED:29:DC:9A:66:F4:10:E3:51:96:D3:89:E6:CA:9C:C6:8E:46
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       4C724612C5BED6F78267DA6A0C1C7373A56CB911
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439373a3a2f34382d3438203d3e20323037363735.roa
Signing time:             Wed 25 Jun 2025 15:05:57 +0000
ROA not before:           Wed 25 Jun 2025 15:00:57 +0000
ROA not after:            Wed 24 Jun 2026 15:05:57 +0000
asID:                     207675
IP address blocks:        2a11:29c0:3d97::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 14:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:72:46:12:c5:be:d6:f7:82:67:da:6a:0c:1c:73:73:a5:6c:b9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 25 15:00:57 2025 GMT
            Not After : Jun 24 15:05:57 2026 GMT
        Subject: CN=5410ED29DC9A66F410E35196D389E6CA9CC68E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:18:f4:44:65:13:9b:36:69:ff:2a:58:63:
                    d6:50:f4:9a:86:3f:09:22:22:b3:32:77:0d:ca:c5:
                    51:d7:76:65:e2:79:20:1c:1a:1c:ad:58:2b:42:46:
                    ee:1e:86:73:54:2b:00:08:ef:62:1e:c2:ab:4c:d3:
                    fc:29:5e:9c:31:45:d9:e0:36:e5:11:3e:06:64:83:
                    12:54:93:f9:e0:d5:dd:9c:be:17:e7:0e:59:08:bf:
                    4d:80:8c:3f:81:0a:94:45:fc:3d:24:6d:3d:4c:34:
                    0f:c4:52:4c:95:70:f1:72:e7:4f:d2:61:51:ed:f8:
                    8f:96:50:55:de:42:b8:ce:c2:b9:db:ed:0b:83:b3:
                    12:f6:dd:e9:4a:8a:42:cf:1a:b1:c4:eb:41:2d:eb:
                    8e:8d:cf:71:4c:fd:36:90:62:17:7f:09:31:6d:d7:
                    80:62:c7:b0:d6:5a:eb:59:8b:3c:de:c8:97:a6:19:
                    3f:c5:be:c0:9a:de:9c:e7:df:42:44:a1:02:6b:84:
                    11:4b:36:51:43:6e:30:ea:ed:8b:67:8a:18:0a:74:
                    38:35:8b:6c:1a:5f:f3:27:de:74:b5:16:eb:54:94:
                    de:b1:8d:d9:3f:05:d1:53:2d:0b:7f:b7:fd:96:7b:
                    8f:1d:8e:43:d8:81:38:45:d6:7a:30:1b:ce:fa:8f:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:ED:29:DC:9A:66:F4:10:E3:51:96:D3:89:E6:CA:9C:C6:8E:46
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439373a3a2f34382d3438203d3e20323037363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d97::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:af:92:b9:bf:7c:5c:a0:d4:54:a2:49:c4:f5:18:7b:34:dc:
         86:8c:05:22:46:b4:f9:4f:b7:d4:1b:54:df:68:45:45:a7:47:
         4e:d6:ef:06:9a:22:11:b6:1d:6d:38:cc:49:37:83:84:c1:6f:
         26:01:3e:6d:e5:0b:85:92:dc:fa:b9:e1:68:c4:cb:90:1a:d3:
         ec:fb:b1:1a:0e:64:8e:da:82:9b:9e:f1:50:72:bd:43:da:4e:
         5a:fa:68:e7:77:a3:0a:f9:9c:ee:63:4e:3e:e1:28:7b:56:b8:
         f3:eb:94:04:ce:91:02:6a:b8:ba:6a:28:a9:be:46:21:2b:30:
         38:a3:eb:1b:24:2b:6a:b4:3d:13:58:fa:bd:6c:e4:20:2c:75:
         34:85:9e:b4:cc:39:ea:3f:f3:16:86:2c:00:c1:86:3e:4d:9d:
         da:7a:f1:e3:09:93:3e:21:eb:2b:33:36:c6:c1:33:b0:b7:27:
         85:a0:ca:3b:50:a4:ac:2c:d2:4c:4f:0d:72:47:c5:49:76:80:
         ec:18:e7:3d:11:bb:e2:9c:45:e0:45:4a:98:7e:bf:9e:17:dc:
         69:7e:86:bd:09:f5:65:18:f2:d7:ba:75:2e:35:cf:4d:cf:01:
         97:36:a6:f1:19:ef:d6:a1:a5:a9:ed:19:1b:53:b2:37:86:aa:
         1e:c4:e1:a8
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUTHJGEsW+1veCZ9pqDBxzc6VsuREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4RDE0M0E2MTk2QjRBQkQ2QkJBQzk1MUNCNERFQzM4
QUI3OUJDMzAeFw0yNTA2MjUxNTAwNTdaFw0yNjA2MjQxNTA1NTdaMDMxMTAvBgNV
BAMTKDU0MTBFRDI5REM5QTY2RjQxMEUzNTE5NkQzODlFNkNBOUNDNjhFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDicBj0RGUTmzZp/ypYY9ZQ9JqG
PwkiIrMydw3KxVHXdmXieSAcGhytWCtCRu4ehnNUKwAI72IewqtM0/wpXpwxRdng
NuURPgZkgxJUk/ng1d2cvhfnDlkIv02AjD+BCpRF/D0kbT1MNA/EUkyVcPFy50/S
YVHt+I+WUFXeQrjOwrnb7QuDsxL23elKikLPGrHE60Et646Nz3FM/TaQYhd/CTFt
14Bix7DWWutZizzeyJemGT/FvsCa3pzn30JEoQJrhBFLNlFDbjDq7YtnihgKdDg1
i2waX/Mn3nS1FutUlN6xjdk/BdFTLQt/t/2We48djkPYgThF1nowG876j0KFAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUVBDtKdyaZvQQ41GW04nmypzGjkYwHwYDVR0j
BBgwFoAUQY0UOmGWtKvWu6yVHLTew4q3m8MwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5zaWduYWx4LnJvL3JlcG8vc2lnbmFs
eC1ycGtpLzAvNDE4RDE0M0E2MTk2QjRBQkQ2QkJBQzk1MUNCNERFQzM4QUI3OUJD
My5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2
LTRhZjMtYmEwOS04YjY4N2E1NmZiZjUvMC80MThEMTQzQTYxOTZCNEFCRDZCQkFD
OTUxQ0I0REVDMzhBQjc5QkMzLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLnNpZ25hbHgucm8vcmVwby9zaWduYWx4LXJwa2kv
MC8zMjYxMzEzMTNhMzIzOTYzMzAzYTMzNjQzOTM3M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzIzMDM3MzYzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEpwD2XMA0GCSqGSIb3DQEB
CwUAA4IBAQAzr5K5v3xcoNRUoknE9Rh7NNyGjAUiRrT5T7fUG1TfaEVFp0dO1u8G
miIRth1tOMxJN4OEwW8mAT5t5QuFktz6ueFoxMuQGtPs+7EaDmSO2oKbnvFQcr1D
2k5a+mjnd6MK+ZzuY04+4Sh7Vrjz65QEzpECari6aiipvkYhKzA4o+sbJCtqtD0T
WPq9bOQgLHU0hZ60zDnqP/MWhiwAwYY+TZ3aevHjCZM+IesrMzbGwTOwtyeFoMo7
UKSsLNJMTw1yR8VJdoDsGOc9EbvinEXgRUqYfr+eF9xpfoa9CfVlGPLXunUuNc9N
zwGXNqbxGe/WoaWp7RkbU7I3hqoexOGo
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:13:21 2025 by rpki-client