Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439393a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439393a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          2iwN4XdXOBBjE+6mRs7BZpyDn+hitw65y3ATpumFLs4=
Subject key identifier:   3E:5A:11:7E:30:87:D1:49:B0:74:D3:2A:2B:DF:8B:7C:E9:D1:52:A8
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       0D2EC38E0A0A1B6248567FE217F4CB2256278043
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439393a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Thu 26 Jun 2025 05:35:09 +0000
ROA not before:           Thu 26 Jun 2025 05:30:09 +0000
ROA not after:            Thu 25 Jun 2026 05:35:09 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d99::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 14:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:c3:8e:0a:0a:1b:62:48:56:7f:e2:17:f4:cb:22:56:27:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 26 05:30:09 2025 GMT
            Not After : Jun 25 05:35:09 2026 GMT
        Subject: CN=3E5A117E3087D149B074D32A2BDF8B7CE9D152A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:eb:a0:a4:90:b1:b7:55:a4:aa:b0:49:49:
                    e3:60:34:02:3a:1c:eb:a7:11:8f:97:97:0e:95:d9:
                    ca:30:d8:bf:c1:85:c7:6a:a3:c3:45:8c:76:d7:d3:
                    11:ba:0a:a4:ac:93:f1:f8:94:49:b1:9f:6f:2f:ba:
                    01:5e:6b:f3:54:84:2c:ed:83:b7:0c:58:2f:a6:99:
                    0c:b6:0d:5a:a7:fd:c2:fb:90:83:f4:c6:af:37:43:
                    61:ca:29:3e:74:8c:eb:24:5d:e2:8b:bc:f0:da:db:
                    c1:58:a5:86:2c:c4:ca:8a:50:5e:c3:96:2f:0a:44:
                    ca:d6:d8:07:c2:89:89:09:d4:88:1f:3e:03:92:93:
                    ed:10:44:57:1e:50:bb:ed:14:f5:76:b0:32:ad:a2:
                    15:53:75:43:5c:a7:7c:21:b2:8a:1a:ea:98:e9:c9:
                    a3:a4:92:f7:9c:a2:32:6c:9b:a7:ad:4c:dd:cd:43:
                    25:a9:2e:7e:6c:f5:b4:b2:3d:bc:d3:4a:ae:12:40:
                    c8:05:f1:11:82:9e:0a:66:00:e7:d5:a0:fa:9a:1e:
                    12:e4:ab:26:75:14:22:c2:86:cc:9f:da:70:ff:f4:
                    43:0b:3f:71:10:4c:80:06:5c:fd:82:de:d8:9a:a2:
                    4f:ef:de:71:12:4e:d1:ac:de:cf:0e:52:6d:a7:04:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5A:11:7E:30:87:D1:49:B0:74:D3:2A:2B:DF:8B:7C:E9:D1:52:A8
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439393a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d99::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:16:56:aa:36:49:45:aa:c7:fc:e9:6e:15:ca:c9:44:86:
         2c:e2:50:a2:4a:d5:90:68:72:e6:5a:1d:f1:f2:f3:14:7c:60:
         84:84:08:9e:fc:17:0a:9e:91:85:ce:84:ea:a2:e2:f6:81:b3:
         9a:ae:b3:ec:60:a1:d8:c7:0a:1d:08:71:9b:2e:af:5a:76:ca:
         94:b3:cf:d2:ec:31:f0:16:57:5e:3a:95:4e:f4:9d:70:b2:6d:
         99:49:11:ca:a7:d0:5d:83:4e:f1:45:0a:f5:49:30:a6:42:62:
         2a:8d:c0:79:5b:2b:ec:e5:c0:d5:9c:86:51:8d:72:45:41:47:
         8e:1e:b5:89:b9:da:67:ba:ef:5e:35:d8:80:59:2c:24:31:1a:
         18:6c:84:f3:16:a2:87:c8:2d:61:2b:21:db:65:0f:11:89:78:
         e5:5f:54:dc:08:26:bd:00:31:1f:0c:de:44:96:e7:73:be:95:
         71:d9:16:7c:7f:c3:72:9e:14:56:2d:fc:31:b7:54:d0:8a:3e:
         d3:8e:a5:00:0c:63:32:a7:b2:63:f7:c3:09:ed:2b:b9:d2:f1:
         9f:72:ce:12:a4:c2:54:c9:d9:ed:f6:82:11:68:ec:c8:af:52:
         a5:a1:b4:23:d4:89:21:65:5c:51:1d:99:a8:25:70:ce:e8:f6:
         57:0a:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:18:11 2025 by rpki-client