Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa
File: CXx0RjbHf90qFoYv9cXuI37Bhkc.roa (raw, json)
Hash identifier: GiZdrnzEpyGP+Xj8UAJxVX3Y8MGpWjA1r6jTnCqMtCs=
Subject key identifier: 09:7C:74:46:36:C7:7F:DD:2A:16:86:2F:F5:C5:EE:23:7E:C1:86:47
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0AF6
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa
Signing time: Fri 11 Apr 2025 01:19:40 +0000
ROA not before: Fri 11 Apr 2025 01:19:40 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 37968
IP address blocks: 202.46.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 10:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Apr 11 01:19:40 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=097C744636C77FDD2A16862FF5C5EE237EC18647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:ae:2c:f4:f7:04:20:1e:a0:4e:60:8e:b0:
21:79:8a:5e:e6:75:64:6b:4b:3c:dd:41:69:a2:24:
f7:8b:4e:31:e2:36:61:8b:b7:99:f8:7e:4a:76:a2:
81:54:07:e7:72:75:22:39:1c:c5:8b:a8:a1:a8:50:
29:3c:a9:95:43:49:75:ee:a0:12:1f:4d:a1:3a:7f:
fd:21:8d:16:81:00:b8:e7:30:00:80:cd:15:82:7a:
70:2c:a0:40:f9:47:92:ba:85:4f:f7:83:f2:8b:a6:
dc:1f:0d:01:16:fc:f3:be:5c:26:84:32:89:15:9e:
c6:e9:1c:0f:5d:6c:0d:a7:7c:5a:0e:24:84:e3:4f:
bc:38:85:bf:ca:3b:c3:12:ab:20:e7:11:5e:83:ad:
e7:8d:20:52:cf:7c:8c:64:12:28:60:ed:52:8c:23:
5b:7d:d7:3d:4b:07:ee:c1:19:f7:02:12:72:4f:11:
32:3e:e4:ae:d9:17:1b:91:16:47:77:0a:da:8d:2c:
1e:c5:75:e0:56:c1:42:c9:6c:d0:01:56:34:22:a1:
84:2a:4b:b8:a4:d8:b9:65:06:17:d3:d0:ee:38:60:
1b:f4:21:e4:97:93:b7:fb:91:82:01:83:9a:44:a3:
6b:92:cb:a2:07:8a:49:d6:f1:d2:52:7d:05:f5:f1:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:74:46:36:C7:7F:DD:2A:16:86:2F:F5:C5:EE:23:7E:C1:86:47
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/CXx0RjbHf90qFoYv9cXuI37Bhkc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.232.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b8:03:f9:07:85:7a:39:0e:01:c0:68:f3:1e:ea:30:a7:2b:
12:b6:4b:ea:8a:34:0b:91:89:07:8d:19:af:07:ed:de:78:b3:
4a:9b:46:4d:19:f8:15:e3:26:cb:94:5e:ba:e6:1f:d7:82:c8:
9e:e6:0d:36:1b:b2:1a:1a:01:2b:40:4b:1f:e9:f9:37:ff:1b:
b8:36:fe:e1:c1:dc:1e:ab:8e:64:44:37:e5:9c:7f:59:24:75:
6a:e3:14:69:b2:e2:d3:76:17:94:9c:33:8d:db:a1:c4:53:59:
5a:71:58:e6:59:bd:57:81:85:29:5b:c4:f7:5c:3c:91:fc:8d:
9b:9c:ef:e2:9e:46:bd:8e:38:b0:9c:61:c3:ba:6c:fa:e3:72:
7c:d9:3e:de:a0:92:e1:24:c6:70:87:98:67:47:23:66:43:e0:
17:55:94:7f:9f:c6:91:51:32:a9:74:2b:7c:ea:53:3a:89:1e:
c6:8a:3b:8b:b4:61:e0:a5:33:7b:5c:9c:7f:70:e1:73:77:c3:
cf:ee:75:46:39:08:e5:40:a2:93:50:64:0f:09:0f:8f:5f:4f:
e8:f4:3c:ea:39:05:40:e2:a9:a4:e0:10:f1:f0:90:78:cf:f6:
d2:62:76:92:9b:06:dd:d0:b6:7e:d6:50:5f:1b:61:22:dd:b7:
9d:cb:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:00 2025 by rpki-client