Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/efz6goWINsL84F4ZHQDTxLY_UFA.roa
File:                     efz6goWINsL84F4ZHQDTxLY_UFA.roa (raw, json)
Hash identifier:          kHvSyOkuYnFkpFZLUbPMZcwkck8QXeABdj7kdXcyEpg=
Subject key identifier:   79:FC:FA:82:85:88:36:C2:FC:E0:5E:19:1D:00:D3:C4:B6:3F:50:50
Certificate issuer:       /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial:       1763
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/efz6goWINsL84F4ZHQDTxLY_UFA.roa
Signing time:             Fri 03 Nov 2023 06:11:42 +0000
ROA not before:           Fri 03 Nov 2023 06:11:42 +0000
ROA not after:            Tue 08 Oct 2024 00:16:33 +0000
asID:                     45839
IP address blocks:        223.29.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 00:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5987 (0x1763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
        Validity
            Not Before: Nov  3 06:11:42 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=79FCFA82858836C2FCE05E191D00D3C4B63F5050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:34:49:c1:bc:43:48:07:d8:87:1e:f8:66:
                    c9:9d:5d:38:59:73:02:a3:1b:a5:63:b7:c5:a2:cd:
                    2a:f6:c3:d4:cf:41:fa:8e:87:1a:d4:76:3f:a4:86:
                    d6:34:28:aa:00:d6:67:0f:95:0e:44:ab:d0:07:19:
                    98:db:84:23:20:6d:41:60:e9:44:52:29:ae:73:5a:
                    ca:13:ba:c7:e3:4a:4a:9b:29:64:a1:39:e8:76:b8:
                    f2:34:6b:ae:ad:f1:32:b2:05:46:da:ef:59:2b:38:
                    7e:8c:ca:be:b4:66:1f:c0:91:5b:11:14:6f:88:fa:
                    55:4f:82:6d:1e:91:7d:ef:88:eb:43:a3:9c:ac:53:
                    0a:5a:f2:1f:d0:17:6f:a0:22:9e:51:54:b6:f2:6a:
                    4f:3e:01:bf:bd:d7:1e:d3:c7:2f:1f:5b:96:bd:cb:
                    62:64:d4:7f:ae:77:76:6a:6b:16:fa:4b:6e:a9:dc:
                    85:79:ea:e9:86:c8:85:f2:38:af:c9:61:b8:b6:1c:
                    86:84:1f:4b:c8:de:28:64:bb:ee:c0:67:34:9c:c1:
                    13:11:df:94:60:66:fe:7d:0d:b7:46:03:8b:66:a5:
                    f4:87:93:7d:8c:93:b0:22:58:39:41:9b:02:dc:82:
                    c3:a5:fc:8d:d5:93:30:39:6d:9c:35:07:d7:96:1b:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:FA:82:85:88:36:C2:FC:E0:5E:19:1D:00:D3:C4:B6:3F:50:50
            X509v3 Authority Key Identifier:
                keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/efz6goWINsL84F4ZHQDTxLY_UFA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:24:df:05:99:4f:96:15:7a:3f:9a:65:10:38:22:7d:a2:e2:
         eb:5c:89:41:af:d0:31:a5:43:ac:8a:cc:66:cc:7a:ca:2d:52:
         a8:48:62:44:25:e8:0f:20:67:13:62:da:a9:8e:a1:19:46:44:
         6f:5c:70:a8:32:63:29:8e:70:71:2e:af:e3:f0:1d:4b:6b:35:
         9a:3b:6f:1c:cf:51:9a:a4:e5:f5:b3:92:1d:75:33:81:ec:bf:
         40:e9:29:06:a3:7c:a7:83:15:ac:c4:14:85:51:ba:e8:38:a9:
         5f:c0:a3:c5:6d:d4:e3:ed:36:a3:5d:4b:b7:a2:df:ad:a0:ba:
         7b:51:43:f3:0c:4c:8d:63:21:25:7c:7c:83:78:f6:1b:96:f9:
         31:81:cf:07:06:92:da:2a:5b:fb:4e:10:3e:6c:97:44:fc:45:
         5a:12:c4:8a:5f:ab:65:09:5f:32:82:45:96:48:fe:f8:56:67:
         ba:58:58:59:d0:48:db:33:3a:7e:4f:2e:cc:5f:3d:57:30:e8:
         a9:12:8d:dd:b1:e1:28:fa:6f:ca:ed:ed:fa:b1:0d:d4:f3:e8:
         b6:18:3f:77:16:9e:84:f2:31:0e:de:18:a6:44:b6:8b:6e:b3:
         0c:6b:5b:40:5d:a4:75:89:37:f2:cd:57:7f:da:01:98:1e:d1:
         6b:1a:f3:c1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICF2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yMzExMDMw
NjExNDJaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDc5RkNGQTgyODU4ODM2
QzJGQ0UwNUUxOTFEMDBEM0M0QjYzRjUwNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJfTRJwbxDSAfYhx74ZsmdXThZcwKjG6Vjt8WizSr2w9TPQfqO
hxrUdj+khtY0KKoA1mcPlQ5Eq9AHGZjbhCMgbUFg6URSKa5zWsoTusfjSkqbKWSh
Oeh2uPI0a66t8TKyBUba71krOH6Myr60Zh/AkVsRFG+I+lVPgm0ekX3viOtDo5ys
Uwpa8h/QF2+gIp5RVLbyak8+Ab+91x7Txy8fW5a9y2Jk1H+ud3Zqaxb6S26p3IV5
6umGyIXyOK/JYbi2HIaEH0vI3ihku+7AZzScwRMR35RgZv59DbdGA4tmpfSHk32M
k7AiWDlBmwLcgsOl/I3VkzA5bZw1B9eWGxZXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUefz6goWINsL84F4ZHQDTxLY/UFAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvZWZ6NmdvV0lOc0w4
NEY0WkhRRFR4TFlfVUZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAN8d/zANBgkqhkiG9w0BAQsFAAOCAQEAZyTfBZlPlhV6P5plEDgifaLi61yJ
Qa/QMaVDrIrMZsx6yi1SqEhiRCXoDyBnE2LaqY6hGUZEb1xwqDJjKY5wcS6v4/Ad
S2s1mjtvHM9RmqTl9bOSHXUzgey/QOkpBqN8p4MVrMQUhVG66DipX8CjxW3U4+02
o11Lt6LfraC6e1FD8wxMjWMhJXx8g3j2G5b5MYHPBwaS2ipb+04QPmyXRPxFWhLE
il+rZQlfMoJFlkj++FZnulhYWdBI2zM6fk8uzF89VzDoqRKN3bHhKPpvyu3t+rEN
1PPothg/dxaehPIxDt4YpkS2i26zDGtbQF2kdYk38s1Xf9oBmB7RaxrzwQ==
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:46:28 2024 by rpki-client on console-fra.rpki-client.org