Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/EgDiAZzf_TPap3YqlwtrVtPfxzo.roa
File:                     EgDiAZzf_TPap3YqlwtrVtPfxzo.roa (raw, json)
Hash identifier:          ubmcZ9V+aNBd6sQHN/NFv1uZzDKHGdF208mW3f2hl0o=
Subject key identifier:   12:00:E2:01:9C:DF:FD:33:DA:A7:76:2A:97:0B:6B:56:D3:DF:C7:3A
Certificate issuer:       /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial:       05D1
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/EgDiAZzf_TPap3YqlwtrVtPfxzo.roa
Signing time:             Mon 12 Aug 2024 04:09:44 +0000
ROA not before:           Mon 12 Aug 2024 04:09:44 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     2914
IP address blocks:        124.175.16.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 01:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
        Validity
            Not Before: Aug 12 04:09:44 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=1200E2019CDFFD33DAA7762A970B6B56D3DFC73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:06:fa:b0:5c:a5:4b:ed:d0:fb:77:db:7d:
                    5b:07:c9:22:ac:33:35:44:96:be:f0:f5:28:ad:85:
                    be:7e:2d:66:07:40:68:30:41:ef:27:64:34:ee:fa:
                    30:40:13:13:66:44:c0:d2:87:79:73:be:7b:3d:de:
                    f4:63:72:73:97:48:8e:8b:ee:5d:7f:3b:89:c4:22:
                    a5:ba:56:ee:6e:30:8c:d0:05:e9:22:21:d2:0e:f4:
                    ab:1a:ef:28:28:71:75:2e:b0:b9:31:97:a9:4b:07:
                    cc:6a:9c:7f:0b:de:4a:df:8c:dc:a9:1a:4a:55:d7:
                    1a:99:29:5b:a8:b2:58:14:f5:53:dd:ef:f7:de:01:
                    0c:1b:f2:55:01:0d:56:2a:43:fe:fb:b0:a1:ff:fc:
                    2b:c2:00:bb:84:84:dd:60:66:33:14:13:f3:04:fb:
                    b4:4d:52:ad:1b:09:04:74:22:1e:aa:89:41:84:89:
                    3b:77:de:6f:0b:56:23:db:44:93:2e:f5:0f:5e:26:
                    92:48:eb:07:2f:91:8f:9b:92:10:95:2b:9f:bb:7f:
                    f0:78:83:77:5e:19:07:15:09:86:56:ce:c4:38:3a:
                    1c:6c:5c:12:d3:cc:45:96:0f:41:59:9c:2a:2f:65:
                    f7:15:3f:95:85:89:b4:eb:de:52:b8:50:7e:b3:87:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:E2:01:9C:DF:FD:33:DA:A7:76:2A:97:0B:6B:56:D3:DF:C7:3A
            X509v3 Authority Key Identifier:
                keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/EgDiAZzf_TPap3YqlwtrVtPfxzo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.175.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:41:36:31:8a:08:d6:e8:0b:ad:74:9f:72:da:3b:ed:62:90:
         45:e6:2f:fe:6f:5b:25:0e:3a:d6:e9:72:20:9f:45:3c:2b:72:
         4b:50:6d:c1:3c:40:0a:37:92:f1:b8:f5:20:4f:42:d3:a4:48:
         29:b8:90:dd:11:8e:a3:2d:e5:8f:e4:37:a0:09:ab:2f:0e:6c:
         9d:99:4b:04:86:8a:34:8f:df:e1:ef:32:2f:e4:a6:7e:d0:cd:
         0a:8e:6a:f0:40:6f:e3:7f:87:c0:3e:c4:c3:54:44:28:df:56:
         0f:6e:d8:45:57:19:94:8c:c8:22:f4:bf:2e:c6:b8:6f:3f:6a:
         93:8c:bd:00:c2:53:4f:e7:72:10:0b:35:84:a6:3d:75:b7:e9:
         45:58:cb:c0:9c:09:89:84:9a:83:75:8a:7f:66:fc:31:a7:c6:
         d5:7c:49:d4:bd:cb:d1:46:3f:64:13:da:82:a4:df:b8:0f:f0:
         df:fb:8c:13:76:36:98:ea:f6:ae:5e:4a:0c:42:d9:52:1b:f9:
         8e:91:e3:59:e1:ed:a0:02:43:ff:53:e0:d9:df:9c:b4:ac:9b:
         0c:a4:09:b3:f5:88:20:16:5e:11:51:79:2b:0c:a3:ed:08:f9:
         dc:ee:25:8f:67:77:ce:f1:ad:3b:40:86:85:b4:d9:d4:ca:c9:
         cf:30:75:a3
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MTIw
NDA5NDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDEyMDBFMjAxOUNERkZE
MzNEQUE3NzYyQTk3MEI2QjU2RDNERkM3M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw9gb6sFylS+3Q+3fbfVsHySKsMzVElr7w9Sithb5+LWYHQGgw
Qe8nZDTu+jBAExNmRMDSh3lzvns93vRjcnOXSI6L7l1/O4nEIqW6Vu5uMIzQBeki
IdIO9Ksa7ygocXUusLkxl6lLB8xqnH8L3krfjNypGkpV1xqZKVuoslgU9VPd7/fe
AQwb8lUBDVYqQ/77sKH//CvCALuEhN1gZjMUE/ME+7RNUq0bCQR0Ih6qiUGEiTt3
3m8LViPbRJMu9Q9eJpJI6wcvkY+bkhCVK5+7f/B4g3deGQcVCYZWzsQ4OhxsXBLT
zEWWD0FZnCovZfcVP5WFibTr3lK4UH6zh8IvAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUEgDiAZzf/TPap3YqlwtrVtPfxzowHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvRWdEaUFaemZfVFBhcDNZcWx3
dHJWdFBmeHpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yv
EDANBgkqhkiG9w0BAQsFAAOCAQEAZEE2MYoI1ugLrXSfcto77WKQReYv/m9bJQ46
1ulyIJ9FPCtyS1BtwTxACjeS8bj1IE9C06RIKbiQ3RGOoy3lj+Q3oAmrLw5snZlL
BIaKNI/f4e8yL+SmftDNCo5q8EBv43+HwD7Ew1REKN9WD27YRVcZlIzIIvS/Lsa4
bz9qk4y9AMJTT+dyEAs1hKY9dbfpRVjLwJwJiYSag3WKf2b8MafG1XxJ1L3L0UY/
ZBPagqTfuA/w3/uME3Y2mOr2rl5KDELZUhv5jpHjWeHtoAJD/1Pg2d+ctKybDKQJ
s/WIIBZeEVF5Kwyj7Qj53O4lj2d3zvGtO0CGhbTZ1MrJzzB1ow==
-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org