Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/PFQYPSQ8c14q9RRB8YYBOOFCGHw.roa
File: PFQYPSQ8c14q9RRB8YYBOOFCGHw.roa (raw, json)
Hash identifier: W6eDSgqjUqW6YTfGypAwnQ8dGIxMkLhTfCzW3kmBG3o=
Subject key identifier: 3C:54:18:3D:24:3C:73:5E:2A:F5:14:41:F1:86:01:38:E1:42:18:7C
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 04
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/PFQYPSQ8c14q9RRB8YYBOOFCGHw.roa
Signing time: Fri 16 May 2025 10:17:34 +0000
ROA not before: Fri 16 May 2025 10:17:34 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 10396
IP address blocks: 43.254.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 03:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: May 16 10:17:34 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=3C54183D243C735E2AF51441F1860138E142187C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:cb:33:b7:82:18:23:6c:be:fb:73:8c:77:
80:9b:c2:82:b0:9b:3d:b1:5c:65:80:50:66:a3:d0:
67:1b:1c:4b:47:e5:36:48:b8:b5:0e:f3:40:3c:54:
aa:3a:ff:6d:c6:36:58:cf:62:95:ed:c8:02:dd:83:
4f:17:c7:be:15:36:cc:cc:8a:25:fa:12:10:dc:bf:
8f:2b:98:b1:0f:77:7a:6b:90:36:a9:4b:d6:65:54:
70:46:08:45:6b:f0:63:80:95:8c:68:f5:81:c6:92:
b2:14:60:ac:5b:da:6a:84:2d:b4:48:65:1a:b3:ee:
18:2c:d0:48:d9:95:2c:31:5a:b5:89:85:2f:81:32:
ee:e8:ce:9f:8c:7a:b5:73:41:04:a8:c9:60:50:c2:
cf:94:d0:26:a1:94:ee:bf:23:16:86:34:66:6d:2d:
74:95:5e:72:8b:5e:65:79:af:32:49:ff:e7:e0:3f:
15:1f:5d:e9:0b:85:0b:a2:3b:92:81:d7:44:85:3d:
5d:97:12:3d:9e:83:2b:ce:36:76:48:18:61:93:40:
99:a6:17:11:ad:b9:6f:93:09:2b:5f:ba:cb:ce:97:
47:a0:f1:07:0a:ce:cf:30:75:25:73:ce:72:52:d4:
ae:ae:f3:18:e1:f1:fd:90:ef:53:65:a8:95:1c:1f:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:18:3D:24:3C:73:5E:2A:F5:14:41:F1:86:01:38:E1:42:18:7C
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/PFQYPSQ8c14q9RRB8YYBOOFCGHw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.192.0/24
Signature Algorithm: sha256WithRSAEncryption
11:97:6a:af:98:16:35:1d:d0:06:88:71:b0:72:28:6e:21:03:
f7:a5:1f:93:12:45:17:c3:1f:de:6b:61:57:d9:d8:b3:d7:f2:
f2:47:38:a9:0e:1a:1a:f8:20:95:09:e3:f4:87:c5:76:61:60:
e0:a4:ff:c7:d2:c8:e1:fc:e3:87:66:95:78:19:15:9c:af:28:
8f:8d:95:6a:a0:a5:c8:33:9d:80:8c:26:98:38:9b:a2:1e:7e:
7f:a0:d2:6e:b7:ef:90:c3:ee:68:07:af:66:ed:f5:8a:b8:ca:
bb:4a:d7:27:b8:b4:5c:8c:41:0d:b8:a1:c4:ff:8b:e8:73:ed:
ad:08:5d:db:0f:ff:23:f6:11:0c:61:92:2b:af:29:cc:b1:ca:
9f:ee:83:c3:d6:02:c8:66:60:f1:55:1f:87:f4:c6:b6:98:bb:
14:79:28:43:f2:2a:35:7b:15:8a:3c:e1:f0:14:44:6c:70:98:
de:0f:b0:02:81:91:00:1f:76:f3:c9:60:f5:d5:cd:3f:e4:86:
33:52:b7:12:17:57:b1:c0:0e:ac:a5:37:7a:51:a6:17:ec:49:
99:fd:d2:3c:21:46:ad:e0:a9:61:eb:c4:c9:78:40:b8:ba:43:
bd:2f:c7:1e:80:9a:77:7c:c8:3b:67:e4:e2:70:d9:01:4c:e0:
d6:96:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:03 2025 by rpki-client