Route Origin Authorization

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439623a3a2f34382d3438203d3e20323134343032.roa
File:                     326131313a323963303a336439623a3a2f34382d3438203d3e20323134343032.roa (raw, json)
Hash identifier:          9FmANalL9VSzZzhfL/YGcVUPdiU512fIEocrABRSrAc=
Subject key identifier:   F0:34:29:70:15:B5:A3:09:ED:9A:2A:77:F3:A7:E4:BD:AA:6D:6D:C3
Certificate issuer:       /CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
Certificate serial:       2C024969CC8A783373AD7D7935BE241389684BE6
Authority key identifier: 41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439623a3a2f34382d3438203d3e20323134343032.roa
Signing time:             Thu 26 Jun 2025 12:55:38 +0000
ROA not before:           Thu 26 Jun 2025 12:50:38 +0000
ROA not after:            Thu 25 Jun 2026 12:55:38 +0000
asID:                     214402
IP address blocks:        2a11:29c0:3d9b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 14:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:02:49:69:cc:8a:78:33:73:ad:7d:79:35:be:24:13:89:68:4b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3
        Validity
            Not Before: Jun 26 12:50:38 2025 GMT
            Not After : Jun 25 12:55:38 2026 GMT
        Subject: CN=F034297015B5A309ED9A2A77F3A7E4BDAA6D6DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:d8:3c:68:31:51:b1:f0:39:08:a7:7e:32:
                    92:c6:84:f9:ee:0f:49:a9:79:8f:6b:69:86:fd:f0:
                    6c:fa:ab:e8:72:c5:d7:e6:ee:dd:96:10:10:85:78:
                    ba:8c:db:1a:a9:57:76:e7:eb:2f:56:da:40:3c:58:
                    4d:2c:ae:2a:68:8e:bf:d8:10:1d:3e:b9:a7:33:d0:
                    4c:2f:60:3b:99:46:f3:ae:78:09:5b:ae:d2:61:0e:
                    fc:6e:b5:22:b3:10:0e:3d:ee:0c:bf:c6:5e:1d:16:
                    b2:28:51:6f:46:85:68:e8:46:9e:e3:11:27:ff:d7:
                    6f:d8:ea:af:f8:d8:14:d6:4c:76:49:75:d3:14:e7:
                    61:4a:21:bc:03:09:9b:82:5e:79:78:73:99:2c:11:
                    79:79:10:a5:39:a6:44:fa:d1:8a:ca:1f:4f:30:c6:
                    7e:41:1f:09:33:74:91:97:f8:22:89:c1:f4:ca:cf:
                    d2:a9:cc:ff:f6:66:b7:cd:3d:ef:3e:c6:14:28:c2:
                    c0:bb:67:40:a8:db:07:87:1f:74:f8:c2:b4:18:c7:
                    d4:0e:30:45:d7:ea:d4:20:a8:bc:b4:71:ea:9f:6c:
                    2f:e2:8f:92:2f:51:b8:fc:b5:47:49:6e:0a:91:d0:
                    4d:9e:95:bd:27:af:2a:1b:b1:5c:8b:ff:a8:07:6c:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:34:29:70:15:B5:A3:09:ED:9A:2A:77:F3:A7:E4:BD:AA:6D:6D:C3
            X509v3 Authority Key Identifier:
                keyid:41:8D:14:3A:61:96:B4:AB:D6:BB:AC:95:1C:B4:DE:C3:8A:B7:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/418D143A6196B4ABD6BBAC951CB4DEC38AB79BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/0/326131313a323963303a336439623a3a2f34382d3438203d3e20323134343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:52:89:1a:f9:c9:09:76:d0:4e:4b:42:23:c8:32:5a:7e:
         62:68:cf:8d:b5:05:be:3d:6f:19:0e:79:7e:a8:49:2b:5a:66:
         11:0e:1a:7e:5b:20:2c:42:d5:13:67:31:d2:69:ad:58:eb:ac:
         16:4c:1b:45:68:7f:03:c7:48:30:6c:97:c8:c8:60:99:d9:24:
         9c:9f:90:01:51:81:35:6d:ea:dd:e9:58:65:76:4c:e5:27:63:
         53:f9:8a:92:80:bf:44:61:89:8f:96:45:29:30:ff:05:52:c0:
         44:9e:71:11:6d:36:aa:7c:9c:29:42:23:6a:08:ea:3a:b4:b8:
         5f:a4:5c:7c:9e:9e:bb:e4:b6:8f:62:a0:4d:06:ba:26:e3:7b:
         21:ca:75:d4:dc:8b:36:9b:36:47:2e:a7:93:de:a4:a7:28:a1:
         ba:7f:36:e5:e7:4a:99:98:56:f4:1a:b2:66:01:89:62:27:2b:
         b4:d4:eb:79:39:f1:e9:f7:54:a3:3f:d8:60:77:86:62:a0:49:
         4b:cf:76:94:79:80:7f:9b:5d:5c:13:42:91:5b:78:f0:e7:92:
         d3:79:c3:1a:74:db:f2:77:08:a1:ad:d6:75:db:e4:2f:e4:e2:
         22:bb:66:18:20:98:96:3c:0d:17:91:ef:b8:e0:0c:33:08:10:
         6b:9f:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:01:39 2025 by rpki-client