Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa
File: RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa (raw, json)
Hash identifier: CeZWKFta3q7XOY1PMeung3ofIhHqs04YGuQxyt3uHH4=
Subject key identifier: 44:73:42:46:CD:92:77:BB:87:46:4F:EC:D5:14:45:21:A3:21:56:48
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14D2
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa
Signing time: Wed 09 Apr 2025 06:48:39 +0000
ROA not before: Wed 09 Apr 2025 06:48:39 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 34549
IP address blocks: 114.66.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 02:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5330 (0x14d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:39 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=44734246CD9277BB87464FECD5144521A3215648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:08:12:b1:cb:fd:bb:e0:e1:b8:d7:2d:ea:
8c:f2:d1:1a:3e:19:bd:30:ba:ff:e7:82:ce:af:95:
38:9f:68:41:e1:21:fe:65:80:67:0e:a5:d8:79:12:
20:b2:6d:8f:23:44:c3:60:ce:5c:36:fc:e6:04:64:
ac:eb:68:ff:02:db:54:61:04:cf:e6:d1:03:99:3e:
9f:ed:c1:0b:48:05:13:30:55:a0:f5:c6:22:aa:6f:
9f:d9:3c:54:ff:ae:f0:f7:d2:51:9a:3b:4d:40:99:
00:91:23:d7:7a:92:d5:e7:42:5b:d1:a0:26:71:71:
55:05:b4:76:f6:a3:bb:c6:5a:b8:c4:23:bd:54:23:
d7:fb:5a:d4:b3:05:95:e0:90:32:3f:55:30:1b:56:
9d:7e:4d:7b:c8:c1:0b:49:91:ae:03:a6:f8:10:60:
4e:54:28:15:d4:92:28:1c:74:7c:5b:89:d1:18:73:
47:16:b8:21:b3:29:94:94:a5:57:79:1e:65:1f:a2:
e1:ec:d8:2a:68:9e:1b:49:46:47:94:7f:32:07:41:
52:61:41:cf:af:74:fb:48:b7:2f:eb:23:31:52:45:
7a:7a:16:7d:f2:68:47:61:c8:c4:3b:f4:53:05:12:
40:bd:ce:7f:6e:7f:76:7c:7e:d3:5b:b3:1e:1c:3a:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:42:46:CD:92:77:BB:87:46:4F:EC:D5:14:45:21:A3:21:56:48
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/RHNCRs2Sd7uHRk_s1RRFIaMhVkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.149.0/24
Signature Algorithm: sha256WithRSAEncryption
29:78:20:cf:3f:a2:61:f4:53:15:07:42:71:d4:9a:4e:17:cb:
3d:b5:4b:09:b8:fb:e1:c8:45:75:78:7f:c9:ec:d2:fe:9f:2e:
4b:f4:89:e8:63:03:65:8c:47:e1:49:72:49:90:8e:7b:2d:64:
eb:52:d0:5c:6e:93:3e:39:2d:12:50:55:64:58:94:e8:34:db:
80:9e:a4:81:8d:b7:b1:5c:15:59:f9:a7:47:38:ef:ba:a4:70:
67:ba:61:a6:69:0e:de:4b:7e:2d:bb:84:fb:9d:be:2a:05:69:
f6:a8:e2:9c:55:72:49:27:8a:dd:0f:bc:b0:43:94:c3:a2:98:
00:3d:65:17:e6:45:e1:31:9b:42:9d:f8:55:a8:58:61:f5:b1:
4b:05:7a:2f:56:e3:41:84:75:9b:18:f9:8a:46:50:27:02:d5:
30:1f:4b:e5:35:49:33:fe:27:a6:2a:c2:a1:f7:74:9b:67:f1:
26:90:19:b5:6f:68:73:85:54:e4:46:59:f5:d6:31:f5:77:22:
a9:d3:4c:9a:b7:57:cd:4f:4c:5b:9a:a6:79:8a:c6:a2:ef:82:
6e:0f:2b:a0:50:31:4d:c1:6f:40:28:5b:6a:ea:da:99:cd:8e:
83:19:49:f8:4e:77:35:68:fa:89:9f:d7:b8:af:34:ae:6a:07:
99:a4:26:f6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2
ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw
NjQ4MzlaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDQ0NzM0MjQ2Q0Q5Mjc3
QkI4NzQ2NEZFQ0Q1MTQ0NTIxQTMyMTU2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC24QgSscv9u+DhuNct6ozy0Ro+Gb0wuv/ngs6vlTifaEHhIf5l
gGcOpdh5EiCybY8jRMNgzlw2/OYEZKzraP8C21RhBM/m0QOZPp/twQtIBRMwVaD1
xiKqb5/ZPFT/rvD30lGaO01AmQCRI9d6ktXnQlvRoCZxcVUFtHb2o7vGWrjEI71U
I9f7WtSzBZXgkDI/VTAbVp1+TXvIwQtJka4DpvgQYE5UKBXUkigcdHxbidEYc0cW
uCGzKZSUpVd5HmUfouHs2CponhtJRkeUfzIHQVJhQc+vdPtIty/rIzFSRXp6Fn3y
aEdhyMQ79FMFEkC9zn9uf3Z8ftNbsx4cOrLXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQURHNCRs2Sd7uHRk/s1RRFIaMhVkgwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu
EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw
OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvUkhOQ1JzMlNkN3VI
UmtfczFSUkZJYU1oVmtnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHJClTANBgkqhkiG9w0BAQsFAAOCAQEAKXggzz+iYfRTFQdCcdSaThfLPbVL
Cbj74chFdXh/yezS/p8uS/SJ6GMDZYxH4UlySZCOey1k61LQXG6TPjktElBVZFiU
6DTbgJ6kgY23sVwVWfmnRzjvuqRwZ7phpmkO3kt+LbuE+52+KgVp9qjinFVySSeK
3Q+8sEOUw6KYAD1lF+ZF4TGbQp34VahYYfWxSwV6L1bjQYR1mxj5ikZQJwLVMB9L
5TVJM/4npirCofd0m2fxJpAZtW9oc4VU5EZZ9dYx9XciqdNMmrdXzU9MW5qmeYrG
ou+Cbg8roFAxTcFvQChbauramc2OgxlJ+E53NWj6iZ/XuK80rmoHmaQm9g==
-----END CERTIFICATE-----
Generated at Tue Jul 22 20:42:00 2025 by rpki-client