Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/L9ti_xcmv2n7MmYRamnps3hU0TM.roa
File:                     L9ti_xcmv2n7MmYRamnps3hU0TM.roa (raw, json)
Hash identifier:          3lh8Yxts5tgW652eLXIfYTOaKzYxDV67AZzQ6UkV3b8=
Subject key identifier:   2F:DB:62:FF:17:26:BF:69:FB:32:66:11:6A:69:E9:B3:78:54:D1:33
Certificate issuer:       /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial:       06E2
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/L9ti_xcmv2n7MmYRamnps3hU0TM.roa
Signing time:             Thu 18 May 2023 07:24:29 +0000
ROA not before:           Thu 18 May 2023 07:24:29 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     137798
IP address blocks:        103.116.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 01:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
        Validity
            Not Before: May 18 07:24:29 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=2FDB62FF1726BF69FB3266116A69E9B37854D133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:74:70:75:ef:61:cd:68:6c:1a:19:d3:16:
                    83:ab:15:38:96:d3:56:71:0d:d4:ff:ca:85:29:e3:
                    65:14:7d:56:5c:ca:23:90:31:af:0c:a1:eb:ea:53:
                    bb:40:e8:ba:33:79:cc:5b:b5:e8:b2:f3:65:89:4b:
                    8c:9c:35:df:d6:d7:11:78:8a:7f:6a:7a:2f:a6:62:
                    f1:d5:e8:fb:89:08:3e:e9:4c:52:c7:ab:ce:c3:d7:
                    d3:32:b4:ef:22:c0:b8:c9:24:5c:36:97:5e:3d:b5:
                    9e:46:1e:6a:1f:c4:38:cb:83:34:6b:68:8c:2c:66:
                    f3:35:8e:4d:88:18:00:a9:cb:0e:d5:33:c8:fd:25:
                    cd:df:a3:24:e4:29:ec:58:8a:55:b6:d0:b4:37:da:
                    79:47:4e:8a:91:f4:09:3c:53:35:e4:65:f3:e3:14:
                    f4:1a:f0:de:47:df:46:56:8e:d7:2d:4a:cd:00:16:
                    a6:6c:9b:61:e3:c1:fe:3d:60:14:90:37:07:44:f3:
                    64:ca:63:f1:db:d5:8f:5f:77:c0:8d:f8:0e:76:7e:
                    76:a7:aa:24:fd:02:d6:38:e1:c4:10:27:33:6b:8b:
                    94:29:18:81:8d:32:e3:96:c4:0f:13:d4:fc:64:d4:
                    ba:5f:1d:44:f6:1a:8c:36:5c:16:15:b8:6d:48:69:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:62:FF:17:26:BF:69:FB:32:66:11:6A:69:E9:B3:78:54:D1:33
            X509v3 Authority Key Identifier:
                keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/L9ti_xcmv2n7MmYRamnps3hU0TM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:1f:58:cd:70:54:b0:3a:71:7a:31:1c:8c:ab:49:19:a1:
         c7:93:48:d1:7b:0e:2e:75:89:19:e9:c1:73:dd:2c:de:5d:f3:
         34:7a:5f:6a:af:d5:16:86:ec:74:2e:08:a1:7e:59:12:d4:67:
         d4:17:91:01:69:94:b8:44:b5:82:c1:a4:bc:da:a0:68:49:b2:
         ad:63:8d:3a:e3:ce:5c:4f:17:19:27:49:d5:64:e7:ec:47:6f:
         f6:22:7e:94:a2:5d:dd:90:08:ff:d3:27:4e:12:ba:de:8e:a2:
         54:74:7d:e7:46:0c:58:63:de:8c:e0:0b:f9:0f:3f:f8:bd:2d:
         2d:2c:5b:be:17:68:b4:7f:94:9a:eb:a9:4c:9f:e6:06:95:0b:
         06:ff:35:b3:59:69:14:50:1c:45:92:8b:4b:75:c0:dd:c6:4b:
         27:03:2f:73:da:13:32:28:72:0f:79:d8:3f:dc:8b:4a:11:bc:
         ed:bd:f6:f1:35:f2:47:87:23:46:47:9d:48:28:29:7f:2b:88:
         d6:96:f5:12:3e:2e:90:fc:61:cd:70:9b:e6:61:f2:5f:a5:e9:
         b1:8e:16:e9:49:87:20:55:c4:29:ee:78:c4:75:cf:bb:48:aa:
         7b:c0:28:29:9a:44:b2:8b:0f:95:ab:66:ac:43:e2:6e:cb:85:
         d8:77:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org