Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa
File: cMsfq1to-m5_Ihf5zGl8vtnR22s.roa (raw, json)
Hash identifier: 7Knm+/4qGVqXxt49fu6q2R3t+sxtZVZJ0XYX7k14wGg=
Subject key identifier: 70:CB:1F:AB:5B:68:FA:6E:7F:22:17:F9:CC:69:7C:BE:D9:D1:DB:6B
Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Certificate serial: 06F0
Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa
Signing time: Fri 21 Mar 2025 03:28:20 +0000
ROA not before: Fri 21 Mar 2025 03:28:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 211392
IP address blocks: 157.66.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 00:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Validity
Not Before: Mar 21 03:28:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=70CB1FAB5B68FA6E7F2217F9CC697CBED9D1DB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:2c:15:c1:1c:cf:00:48:9b:a1:25:e1:73:
4a:2b:9e:07:9c:2d:13:09:ac:eb:72:c0:0c:2d:96:
a4:7c:d1:03:09:0d:fe:f2:cb:60:91:c1:c3:ed:c5:
41:66:d4:dd:24:a5:66:ec:9e:c8:dc:c9:03:80:68:
a6:a3:bf:26:e6:58:92:b9:2e:7f:37:c5:95:43:d9:
ad:4f:25:5b:db:83:99:ed:e4:62:dc:b5:d0:0a:2a:
77:11:4b:82:94:33:1f:b9:66:d2:df:c1:b9:4a:0d:
a3:6b:ab:24:2e:52:aa:3e:63:ba:70:94:eb:a8:b3:
80:89:5a:3f:aa:06:54:0f:ca:04:48:93:0a:bb:05:
2d:2f:b2:54:ec:86:13:e2:48:3b:71:2e:8e:cc:7d:
73:16:8f:e8:47:3a:cf:59:fd:59:ec:b9:87:f8:41:
de:94:0b:33:dc:1c:0c:4c:76:c9:96:06:64:4a:b6:
52:79:c8:1b:7b:df:19:f9:f2:4f:a5:47:e5:90:5f:
7b:66:ee:c7:98:5c:70:96:87:16:d8:7d:45:0c:0a:
6c:d4:c6:eb:3e:08:a2:4a:50:f7:a6:21:96:72:d0:
e1:fe:c0:ad:15:79:5c:b5:db:73:29:65:7e:53:4f:
fe:0d:e5:9e:8c:8b:31:aa:1f:87:1b:9f:3d:b6:66:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:1F:AB:5B:68:FA:6E:7F:22:17:F9:CC:69:7C:BE:D9:D1:DB:6B
X509v3 Authority Key Identifier:
keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.42.0/23
Signature Algorithm: sha256WithRSAEncryption
64:85:78:60:37:8a:c5:55:cb:c3:a8:11:51:01:cc:f1:df:38:
69:c8:b5:4b:22:7c:72:22:e0:70:f0:f3:0f:ad:53:76:4c:3b:
eb:65:b1:d5:22:38:85:21:14:96:1b:a1:30:19:cf:fc:84:f7:
cd:00:32:73:50:23:51:c9:93:40:f0:d9:d1:09:bd:49:d4:78:
16:0c:4d:fe:d1:20:73:f1:51:20:27:92:30:0e:08:3f:f0:6c:
de:b8:e4:17:03:bc:09:e7:60:ad:8a:66:dd:69:a2:64:7e:5a:
16:9f:d1:49:20:fa:29:af:ae:21:df:76:58:0e:61:b7:47:8d:
a5:3d:eb:0f:15:61:e4:c5:1c:c9:ac:60:75:2a:90:0a:c8:4a:
d5:3d:2a:3f:05:09:99:a5:8f:c7:c2:82:72:8d:a5:a5:bc:9d:
bc:5c:6b:4f:87:ab:4e:73:04:d2:7d:a1:9c:b7:51:96:6f:7e:
93:9a:09:9c:12:7b:20:90:ec:98:4a:7c:7e:b6:29:d2:f1:52:
d0:9b:ed:08:dd:12:5d:42:23:f3:2a:1a:6c:39:38:f6:e0:3f:
a2:f5:ca:91:b4:c7:e6:13:dc:8e:93:b3:11:12:8c:5d:1a:dd:
94:e0:6d:aa:7c:1b:d7:92:76:0b:2a:c2:11:e6:de:86:48:51:
90:ca:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:56 2025 by rpki-client