Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439613a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439613a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          IoSA+zjnA04NB9aepAOwTVPpOTWVR12KjFM8Bjo+jQc=
Subject key identifier:   2E:D0:DC:AE:DC:98:ED:53:60:FD:6F:8E:9E:10:48:81:36:29:22:04
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       3387E0D929CDFFB1D1396044254009611D2DAD91
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439613a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Thu 26 Jun 2025 07:50:22 +0000
ROA not before:           Thu 26 Jun 2025 07:45:22 +0000
ROA not after:            Thu 25 Jun 2026 07:50:22 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d9a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 14:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:e0:d9:29:cd:ff:b1:d1:39:60:44:25:40:09:61:1d:2d:ad:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 26 07:45:22 2025 GMT
            Not After : Jun 25 07:50:22 2026 GMT
        Subject: CN=2ED0DCAEDC98ED5360FD6F8E9E10488136292204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:52:b6:9a:6d:83:5b:05:1e:44:ea:ed:1d:
                    5b:2f:a6:5a:d2:90:bd:9e:98:1c:30:d3:0a:12:10:
                    e7:50:21:95:1a:b6:ab:ce:48:90:df:ba:59:39:2e:
                    f4:24:d1:c8:65:f3:bf:e7:e7:37:85:f0:ee:c7:c3:
                    94:82:5a:17:c3:c3:17:9e:c1:86:44:21:e8:d9:35:
                    16:c8:89:e6:14:dc:da:2a:39:f9:89:63:cb:c2:e6:
                    e8:22:32:3f:3a:13:c3:33:f1:e6:6f:4c:9f:0e:b8:
                    76:61:b0:91:2a:20:d6:44:19:69:a2:c9:2e:e0:29:
                    fd:87:2b:2a:7a:e9:22:e0:54:16:48:15:18:33:68:
                    09:61:94:61:71:aa:21:04:b0:19:a4:37:94:60:2c:
                    16:cb:df:4e:21:9e:c2:f4:4e:07:54:54:03:06:7c:
                    e8:e0:b5:26:0a:84:f5:02:f7:ca:a9:8f:f4:e5:d7:
                    ca:90:b2:b7:9f:f6:c9:3b:f5:80:67:70:8f:82:77:
                    88:06:a5:ee:8f:95:22:26:95:b8:71:45:1a:1c:6e:
                    c8:02:fc:d9:ef:26:96:d5:f4:33:cd:2b:e4:60:c8:
                    a1:90:57:c2:13:ed:92:76:74:14:70:e7:d4:dc:92:
                    43:e2:1b:05:ab:68:92:fc:87:97:45:a9:f3:1a:d6:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D0:DC:AE:DC:98:ED:53:60:FD:6F:8E:9E:10:48:81:36:29:22:04
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439613a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d9a::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:c9:da:dc:c6:5d:d4:9e:c4:a0:70:a8:01:29:66:2e:c8:63:
         ea:37:30:1f:6e:7c:3d:38:5c:f6:b9:b5:d0:57:9e:c3:10:8c:
         9e:85:26:bb:0f:ed:c1:1e:bf:b1:0b:cf:9a:f8:78:57:51:a3:
         4a:6a:cd:42:cd:8e:b1:13:43:6d:f5:37:22:77:48:2f:a2:e3:
         74:bf:ff:a0:b0:3c:35:ba:cc:fc:f4:0a:1b:3c:72:78:0e:44:
         51:5c:09:1a:5c:b7:00:fb:d2:49:87:c0:4f:96:33:8f:ae:53:
         7f:ed:51:ba:8c:f9:0e:2b:70:19:38:42:40:bd:bc:8a:19:4d:
         56:80:c7:69:5a:36:33:1c:2f:1a:c2:bd:6e:0a:14:84:08:96:
         ca:7f:98:c2:cc:0f:3d:ac:24:9a:4a:44:a8:c8:43:78:63:2c:
         7b:f5:7a:0b:ab:5f:5e:90:6b:47:96:cf:93:3e:5d:bf:b4:07:
         25:61:b1:3f:eb:96:2a:11:16:a4:39:eb:96:c3:20:a4:6f:5f:
         50:4e:16:51:7a:5f:2b:c2:e0:98:ba:cf:fd:bd:f1:55:3e:e5:
         74:12:f8:69:fd:6f:22:b1:32:d8:88:e0:2d:8c:78:23:17:67:
         c9:80:49:c3:66:eb:cb:67:ec:d2:f4:23:e5:8b:db:f9:56:43:
         5b:ff:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:59:52 2025 by rpki-client