Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/C6A_qWHkt2bjH3Srbva6xJAwYDI.roa
File:                     C6A_qWHkt2bjH3Srbva6xJAwYDI.roa (raw, json)
Hash identifier:          SVb5fG66Tmdn9uisuF96CNXF47+EzOlsMPFaCefl+uQ=
Subject key identifier:   0B:A0:3F:A9:61:E4:B7:66:E3:1F:74:AB:6E:F6:BA:C4:90:30:60:32
Certificate issuer:       /CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Certificate serial:       07CE
Authority key identifier: 9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/C6A_qWHkt2bjH3Srbva6xJAwYDI.roa
Signing time:             Fri 30 Jun 2023 04:12:11 +0000
ROA not before:           Fri 30 Jun 2023 04:12:11 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     17964
IP address blocks:        2403:8080::/32 maxlen: 64
                          2403:8880::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 24 May 2024 02:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2B6854BE70947F0785FF966203BB650BDD1682
        Validity
            Not Before: Jun 30 04:12:11 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=0BA03FA961E4B766E31F74AB6EF6BAC490306032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:9e:6c:89:4a:38:ff:d7:cc:29:8c:eb:04:
                    81:23:14:0a:2b:a7:34:d5:89:01:6f:d4:98:38:af:
                    3b:9f:58:76:99:43:08:51:63:c1:13:b2:74:47:1e:
                    d5:42:ca:b0:b2:9c:bd:1b:8d:3e:6c:4f:9a:93:b0:
                    37:28:54:99:ca:a7:76:93:03:19:7f:ba:ef:35:92:
                    ab:85:a6:7c:19:5b:6f:40:c5:2f:a2:24:7b:06:b2:
                    ce:b9:d3:2b:af:29:2a:21:a8:db:53:3f:4c:18:ac:
                    03:e1:fb:25:ed:3f:74:30:bd:cd:a1:a7:75:56:05:
                    30:fd:4e:a4:17:63:4b:a5:43:a4:de:83:22:74:c5:
                    d1:22:e0:81:16:d7:3a:64:6d:81:14:c7:88:86:fa:
                    45:4d:36:f7:8a:8b:7f:ce:06:2c:64:fd:5d:f2:c9:
                    f6:dd:da:68:e8:2b:fd:d0:5b:e8:59:d8:cc:a5:41:
                    78:78:2e:4b:09:af:76:e2:9d:29:92:bd:b8:8d:04:
                    15:c5:05:cb:05:fc:be:a8:48:76:25:d6:81:ec:66:
                    42:af:64:3c:e5:3f:2c:36:37:61:ff:c1:97:5b:0e:
                    17:8b:46:64:47:23:33:a4:83:d5:3a:55:17:23:46:
                    52:58:d3:dc:c0:84:1c:f0:95:87:1e:5c:96:03:70:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:3F:A9:61:E4:B7:66:E3:1F:74:AB:6E:F6:BA:C4:90:30:60:32
            X509v3 Authority Key Identifier:
                keyid:9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/C6A_qWHkt2bjH3Srbva6xJAwYDI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8080::/32
                  2403:8880::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:bb:45:6c:05:c3:bb:1b:85:e3:b7:0c:22:5f:3b:46:82:
         b6:40:91:5e:dd:11:27:df:d1:63:cb:cf:60:c2:e7:52:fa:42:
         ca:14:f7:df:9f:f9:22:10:65:0b:74:a5:69:9f:31:55:3e:c4:
         48:f3:0f:ce:a8:10:61:61:a9:3b:2a:7f:b1:1b:3a:c3:91:bd:
         db:12:11:ef:74:9c:13:97:30:d9:c3:7b:c7:6f:1a:cf:6e:29:
         a8:6c:e7:ad:44:53:8e:98:9f:17:6f:b8:c0:9e:ac:72:3c:3f:
         27:cb:16:5c:c3:de:1e:3a:d1:2b:ba:8f:37:23:c4:6b:92:68:
         a8:4d:b9:c3:78:4b:e6:59:63:a4:b7:eb:4b:67:2e:ad:b7:60:
         18:a1:a0:5d:f1:20:22:d1:4b:c2:1a:97:bd:9c:69:b3:c6:93:
         10:44:60:3c:ad:63:a2:1e:18:e9:3e:80:4d:7c:97:65:5c:42:
         ef:3a:f9:38:c2:75:ae:72:c5:85:91:27:54:8f:7c:60:c6:c8:
         f7:89:ff:76:04:5b:f4:4d:fe:69:4a:35:65:9b:9a:04:a5:7b:
         63:e4:a1:b8:f6:70:13:51:bc:55:e9:3f:35:15:f3:5b:09:b7:
         c9:b5:a3:ab:b9:e8:a6:ff:c0:7f:65:d6:08:07:b6:e4:0d:01:
         71:78:07:f1
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUYy
QjY4NTRCRTcwOTQ3RjA3ODVGRjk2NjIwM0JCNjUwQkREMTY4MjAeFw0yMzA2MzAw
NDEyMTFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDBCQTAzRkE5NjFFNEI3
NjZFMzFGNzRBQjZFRjZCQUM0OTAzMDYwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwF55siUo4/9fMKYzrBIEjFAorpzTViQFv1Jg4rzufWHaZQwhR
Y8ETsnRHHtVCyrCynL0bjT5sT5qTsDcoVJnKp3aTAxl/uu81kquFpnwZW29AxS+i
JHsGss650yuvKSohqNtTP0wYrAPh+yXtP3Qwvc2hp3VWBTD9TqQXY0ulQ6TegyJ0
xdEi4IEW1zpkbYEUx4iG+kVNNveKi3/OBixk/V3yyfbd2mjoK/3QW+hZ2MylQXh4
LksJr3binSmSvbiNBBXFBcsF/L6oSHYl1oHsZkKvZDzlPyw2N2H/wZdbDheLRmRH
IzOkg9U6VRcjRlJY09zAhBzwlYceXJYDcHHNAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUC6A/qWHkt2bjH3Srbva6xJAwYDIwHwYDVR0jBBgwFoAUnytoVL5wlH8Hhf+W
YgO7ZQvdFoIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcv
bnl0b1ZMNXdsSDhIaGYtV1lnTzdaUXZkRm9JLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9ueXRvVkw1d2xIOEhoZi1XWWdPN1pRdmRGb0kuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNy9DNkFfcVdIa3QyYmpIM1Ny
YnZhNnhKQXdZREkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUA
JAOAgAMFACQDiIAwDQYJKoZIhvcNAQELBQADggEBAF5su0VsBcO7G4XjtwwiXztG
grZAkV7dESff0WPLz2DC51L6QsoU99+f+SIQZQt0pWmfMVU+xEjzD86oEGFhqTsq
f7EbOsORvdsSEe90nBOXMNnDe8dvGs9uKahs561EU46YnxdvuMCerHI8PyfLFlzD
3h460Su6jzcjxGuSaKhNucN4S+ZZY6S360tnLq23YBihoF3xICLRS8Ial72cabPG
kxBEYDytY6IeGOk+gE18l2VcQu86+TjCda5yxYWRJ1SPfGDGyPeJ/3YEW/RN/mlK
NWWbmgSle2Pkobj2cBNRvFXpPzUV81sJt8m1o6u56Kb/wH9l1ggHtuQNAXF4B/E=
-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org