Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/JJkueIa8ASHGNWjFiVrGq0YOLLA.roa
File: JJkueIa8ASHGNWjFiVrGq0YOLLA.roa (raw, json)
Hash identifier: lznPBOlfDmFW6jfhsJwa5VcTNzA78WhSWmP7hgBTA98=
Subject key identifier: 24:99:2E:78:86:BC:01:21:C6:35:68:C5:89:5A:C6:AB:46:0E:2C:B0
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1BFD
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/JJkueIa8ASHGNWjFiVrGq0YOLLA.roa
Signing time: Fri 17 Jan 2025 01:26:23 +0000
ROA not before: Fri 17 Jan 2025 01:26:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 132168
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 02:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7165 (0x1bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Jan 17 01:26:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=24992E7886BC0121C63568C5895AC6AB460E2CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:08:6a:66:96:72:07:d0:b8:e2:31:d2:36:
62:30:7f:ff:c1:d2:33:29:7c:d6:f1:03:f8:86:13:
0d:50:57:97:53:e2:62:aa:08:0d:64:c1:4b:58:d5:
56:1b:f5:4c:f0:82:34:d3:d1:b5:a4:0d:a3:6b:02:
20:b2:58:e1:f9:b9:16:ac:85:1e:29:ca:e5:21:1f:
e0:de:32:08:ba:fc:85:2b:0e:9f:55:02:3f:0b:c2:
ba:9e:93:0a:4a:c6:ce:9c:3e:2a:71:f9:32:49:d2:
aa:b5:6c:99:78:39:4e:f9:89:4b:ef:85:a7:a7:39:
3a:47:fa:f7:09:ca:73:fe:df:1f:22:e8:80:a5:90:
08:bc:66:ee:8d:6c:37:d4:8e:c3:ca:48:6a:e1:dc:
33:a0:b3:56:44:6e:c3:3b:e2:ad:a0:10:b4:7c:0d:
93:96:64:e1:8f:24:94:98:2d:39:16:85:f4:ce:2e:
80:95:b0:fa:90:70:0a:94:ec:20:82:78:ec:b7:1d:
45:cb:fd:59:f0:f4:a7:2d:be:e8:0b:2e:82:63:e6:
75:3b:5d:54:af:2e:51:ea:20:62:98:af:05:51:08:
7e:48:b4:14:32:fd:3e:2b:f3:3f:d3:a4:46:6e:69:
3b:c5:e4:45:14:8c:e5:4e:80:d0:eb:c0:0f:bf:dd:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:2E:78:86:BC:01:21:C6:35:68:C5:89:5A:C6:AB:46:0E:2C:B0
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/JJkueIa8ASHGNWjFiVrGq0YOLLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
76:96:ee:7f:25:bd:6f:e5:e2:e5:6a:2a:3e:22:95:b6:f8:96:
2a:d5:6c:48:6a:fa:c5:a3:dc:98:80:32:94:66:92:f9:85:ec:
b7:55:f1:8e:ef:98:0a:96:9e:50:c2:48:67:a7:e7:b7:4e:61:
ef:78:8e:50:04:e4:96:d7:1f:8d:40:89:a3:88:ea:3b:02:92:
fa:66:5a:6f:49:2a:9c:09:6f:55:11:72:6f:0d:6c:e5:5b:6b:
5c:01:55:b0:08:46:88:55:be:ef:95:f8:82:5b:e2:09:ff:33:
64:0f:ec:7c:77:86:f1:95:5f:be:c9:01:d5:a7:37:d4:c3:aa:
c0:72:ba:f8:96:4a:f9:53:e7:d3:eb:a9:97:3b:a2:c5:15:73:
b5:c7:7c:af:79:c9:23:71:71:7e:52:af:79:3f:d4:77:6d:3a:
d9:e9:36:01:94:76:08:bd:dd:aa:a1:67:9d:0d:74:a2:db:e1:
4f:3d:7c:d3:a1:e2:72:f8:3a:54:10:62:00:3e:7f:81:cd:ca:
34:6c:34:7d:c2:f8:96:89:77:4b:79:fd:95:7f:f6:48:91:2c:
52:d4:44:f8:cf:bf:7a:6f:7c:61:3f:af:68:86:98:38:81:15:
31:aa:d7:c4:77:e3:ec:c7:31:0f:1f:32:8c:bc:2f:dd:6d:48:
7e:4b:e4:1b
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICG/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNTAxMTcw
MTI2MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI0OTkyRTc4ODZCQzAx
MjFDNjM1NjhDNTg5NUFDNkFCNDYwRTJDQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHtQhqZpZyB9C44jHSNmIwf//B0jMpfNbxA/iGEw1QV5dT4mKq
CA1kwUtY1VYb9UzwgjTT0bWkDaNrAiCyWOH5uRashR4pyuUhH+DeMgi6/IUrDp9V
Aj8LwrqekwpKxs6cPipx+TJJ0qq1bJl4OU75iUvvhaenOTpH+vcJynP+3x8i6ICl
kAi8Zu6NbDfUjsPKSGrh3DOgs1ZEbsM74q2gELR8DZOWZOGPJJSYLTkWhfTOLoCV
sPqQcAqU7CCCeOy3HUXL/Vnw9KctvugLLoJj5nU7XVSvLlHqIGKYrwVRCH5ItBQy
/T4r8z/TpEZuaTvF5EUUjOVOgNDrwA+/3Z7LAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUJJkueIa8ASHGNWjFiVrGq0YOLLAwHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q
MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvSkprdWVJYThBU0hH
TldqRmlWckdxMFlPTExBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEAmfMSAMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEAdpbufyW9b+Xi5WoqPiKV
tviWKtVsSGr6xaPcmIAylGaS+YXst1Xxju+YCpaeUMJIZ6fnt05h73iOUATkltcf
jUCJo4jqOwKS+mZab0kqnAlvVRFybw1s5VtrXAFVsAhGiFW+75X4glviCf8zZA/s
fHeG8ZVfvskB1ac31MOqwHK6+JZK+VPn0+uplzuixRVztcd8r3nJI3FxflKveT/U
d2062ek2AZR2CL3dqqFnnQ10otvhTz1806Hicvg6VBBiAD5/gc3KNGw0fcL4lol3
S3n9lX/2SJEsUtRE+M+/em98YT+vaIaYOIEVMarXxHfj7McxDx8yjLwv3W1Ifkvk
Gw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:03 2025 by rpki-client