Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/yQRTnRbrp0hC9LOi-nnZlCHMWts.roa
File: yQRTnRbrp0hC9LOi-nnZlCHMWts.roa (raw, json)
Hash identifier: OHMUXVLUsr5k35wyv8CqyQCGqwV88fhnzA6g7Hb+UtY=
Subject key identifier: C9:04:53:9D:16:EB:A7:48:42:F4:B3:A2:FA:79:D9:94:21:CC:5A:DB
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 2083
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/yQRTnRbrp0hC9LOi-nnZlCHMWts.roa
Signing time: Sun 02 Feb 2025 07:37:22 +0000
ROA not before: Sun 02 Feb 2025 07:37:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 834
IP address blocks: 223.29.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 19:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8323 (0x2083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Feb 2 07:37:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C904539D16EBA74842F4B3A2FA79D99421CC5ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:44:9b:53:dc:fe:6e:67:2c:b7:88:03:a8:
32:b1:9c:82:06:ef:d0:e9:72:77:0f:ea:f7:88:9a:
ee:3d:bc:c2:d7:3d:0c:5e:19:cf:02:c4:16:18:68:
b8:1b:be:59:db:d5:16:5f:54:60:ca:58:29:a4:0d:
53:d1:35:d5:19:6e:c9:89:bc:7b:ed:f0:9f:20:1d:
8f:51:c7:7b:3b:40:c4:5f:8f:4e:b3:83:56:7f:1e:
2a:83:b9:ed:c7:2e:1c:01:a6:54:a0:17:64:e5:fc:
32:68:ea:ee:01:3e:44:8c:a1:da:53:19:b7:94:4c:
81:87:f9:f1:b9:1d:fd:98:05:e7:4a:52:88:f2:4d:
be:be:99:c0:3d:a1:20:c0:1c:ea:a6:d8:dd:9b:6a:
fd:5a:64:32:21:6f:df:de:77:92:89:fe:bd:55:c6:
a6:ac:25:15:04:0b:87:4e:c1:22:f9:94:0e:75:62:
60:5c:45:9d:53:4f:09:09:5f:d9:ce:40:cb:9d:61:
94:0f:19:b1:db:d7:80:7e:31:65:2e:a5:80:52:f9:
db:db:4c:31:8f:1b:63:43:61:1a:c7:88:1e:ed:4b:
13:79:09:a1:fe:d1:fc:82:59:c4:eb:1b:e9:24:e7:
69:7c:e8:dd:33:85:bf:af:24:af:0b:b2:5b:00:28:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:04:53:9D:16:EB:A7:48:42:F4:B3:A2:FA:79:D9:94:21:CC:5A:DB
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/yQRTnRbrp0hC9LOi-nnZlCHMWts.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2d:0e:99:72:ea:5a:87:5c:47:b0:3b:91:4a:6c:c5:50:13:
ff:a0:50:c8:0e:6d:fe:61:36:57:40:d8:7f:15:68:93:c3:92:
ca:62:70:eb:ad:f2:74:67:9b:42:0b:24:54:90:e4:9d:44:44:
01:d3:a0:56:76:b3:a3:bb:68:85:84:9d:a2:8a:e4:8c:4e:a8:
69:83:81:fe:48:89:17:aa:0a:6c:84:4d:59:d0:e2:41:57:bd:
5b:14:8b:59:51:98:f9:98:d5:6a:71:4b:c9:bd:ad:f5:17:85:
75:02:28:cf:81:3f:4b:3e:61:9a:ce:6b:72:6e:55:04:6c:85:
f1:79:ad:74:dc:eb:a0:fd:7d:e0:c0:36:ab:c6:a7:f1:88:61:
75:7b:65:b9:5e:9d:38:5d:17:6f:35:d1:64:be:dc:0b:2f:ff:
c6:66:23:1f:9b:f4:42:97:0e:26:b5:b7:4d:3d:c2:3d:ad:5f:
ff:f5:b7:7d:df:7a:04:06:0d:dd:6d:68:6a:d3:9d:c2:43:27:
e4:08:3f:6c:e7:d7:54:d1:dc:9c:9b:06:75:41:6e:f6:d1:aa:
9c:f9:72:b9:c1:38:08:ff:b2:bf:1b:82:96:76:cc:82:30:1a:
c3:42:6f:fe:a4:94:1a:41:fa:97:12:7c:26:c0:88:93:bd:e6:
f1:f1:1b:57
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAyMDIw
NzM3MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM5MDQ1MzlEMTZFQkE3
NDg0MkY0QjNBMkZBNzlEOTk0MjFDQzVBREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0xUSbU9z+bmcst4gDqDKxnIIG79DpcncP6veImu49vMLXPQxe
Gc8CxBYYaLgbvlnb1RZfVGDKWCmkDVPRNdUZbsmJvHvt8J8gHY9Rx3s7QMRfj06z
g1Z/HiqDue3HLhwBplSgF2Tl/DJo6u4BPkSModpTGbeUTIGH+fG5Hf2YBedKUojy
Tb6+mcA9oSDAHOqm2N2bav1aZDIhb9/ed5KJ/r1VxqasJRUEC4dOwSL5lA51YmBc
RZ1TTwkJX9nOQMudYZQPGbHb14B+MWUupYBS+dvbTDGPG2NDYRrHiB7tSxN5CaH+
0fyCWcTrG+kk52l86N0zhb+vJK8LslsAKDjjAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUyQRTnRbrp0hC9LOi+nnZlCHMWtswHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEveVFSVG5SYnJwMGhD
OUxPaS1ublpsQ0hNV3RzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAN8d/zANBgkqhkiG9w0BAQsFAAOCAQEAay0OmXLqWodcR7A7kUpsxVAT/6BQ
yA5t/mE2V0DYfxVok8OSymJw663ydGebQgskVJDknUREAdOgVnazo7tohYSdoork
jE6oaYOB/kiJF6oKbIRNWdDiQVe9WxSLWVGY+ZjVanFLyb2t9ReFdQIoz4E/Sz5h
ms5rcm5VBGyF8XmtdNzroP194MA2q8an8YhhdXtluV6dOF0XbzXRZL7cCy//xmYj
H5v0QpcOJrW3TT3CPa1f//W3fd96BAYN3W1oatOdwkMn5Ag/bOfXVNHcnJsGdUFu
9tGqnPlyucE4CP+yvxuClnbMgjAaw0Jv/qSUGkH6lxJ8JsCIk73m8fEbVw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:29 2025 by rpki-client