Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/LO_IhcA51EPgiI2RFOKVhsVlsg4.roa
File:                     LO_IhcA51EPgiI2RFOKVhsVlsg4.roa (raw, json)
Hash identifier:          VCJz9TGzmWPzWbvXjGv008CKF9O7JLPSYL0N7c2KDmA=
Subject key identifier:   2C:EF:C8:85:C0:39:D4:43:E0:88:8D:91:14:E2:95:86:C5:65:B2:0E
Certificate issuer:       /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Certificate serial:       0ADB
Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/LO_IhcA51EPgiI2RFOKVhsVlsg4.roa
Signing time:             Fri 26 May 2023 19:55:30 +0000
ROA not before:           Fri 26 May 2023 19:55:30 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     55996
IP address blocks:        103.197.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
        Validity
            Not Before: May 26 19:55:30 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=2CEFC885C039D443E0888D9114E29586C565B20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:34:77:40:58:e5:cb:9b:cf:96:be:19:66:
                    5a:ff:77:77:70:23:88:bd:02:62:e3:4b:cc:7c:ac:
                    01:f3:49:99:53:1d:8a:b0:3f:08:cb:30:4f:0a:6a:
                    de:6f:90:01:b4:19:ff:66:34:68:f1:45:f4:04:26:
                    ed:2e:34:02:01:fa:7c:6a:f7:c2:b8:17:19:7a:36:
                    c2:1c:be:dc:50:f9:af:5d:4c:10:8b:e5:d0:c6:6b:
                    65:a5:b2:7d:55:6c:8a:b8:86:47:f8:54:96:c5:2a:
                    78:16:6c:07:26:26:78:fd:26:8a:f4:df:03:0e:a4:
                    5f:ad:b9:ee:86:b1:24:cc:b0:1e:e0:86:93:4f:5d:
                    3a:95:52:0c:54:07:e2:ed:28:7f:52:51:0a:9c:57:
                    08:5d:ee:87:ec:08:31:e5:8c:7c:90:a1:21:14:85:
                    5e:f9:ff:c6:53:60:7c:ae:2e:9a:21:f8:18:ec:d6:
                    a1:87:1f:8e:55:e6:e5:6c:a7:07:9b:22:14:21:e7:
                    7b:e1:6c:f8:87:82:72:1b:cb:e6:9e:e7:dd:11:13:
                    d2:0e:00:2c:06:a6:6b:2d:91:e6:02:f5:1c:77:e9:
                    55:7f:71:24:f2:ac:4e:42:a0:19:44:db:d0:ee:01:
                    6a:1c:56:79:eb:a7:f6:b6:c1:77:1a:ba:ab:2e:82:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:C8:85:C0:39:D4:43:E0:88:8D:91:14:E2:95:86:C5:65:B2:0E
            X509v3 Authority Key Identifier:
                keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/LO_IhcA51EPgiI2RFOKVhsVlsg4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:5f:5f:65:3f:1f:c2:28:2d:e3:e5:fc:b3:1d:28:5a:56:
         78:56:dc:ab:5e:e4:42:82:05:8b:f5:f2:04:88:12:b6:56:da:
         22:67:7a:1f:d1:7d:f3:f3:95:89:e3:fe:0a:80:a7:a1:fe:8c:
         09:ac:62:67:76:6c:4d:ba:12:93:13:13:2a:98:16:5c:fd:ee:
         d3:37:42:e3:61:d0:cf:96:30:c0:be:9a:84:9a:50:c4:8e:83:
         bf:d4:68:5f:1d:cf:55:60:f6:4e:a4:f9:6a:f6:ff:d9:52:53:
         d8:4b:73:1c:64:62:36:e8:41:b0:e1:c0:ea:c7:8d:b4:08:b2:
         bf:f7:6a:fb:0c:21:70:a1:db:56:b7:08:89:ac:02:c2:38:2c:
         80:39:4d:7c:76:db:d4:e0:da:e8:4e:7f:85:0c:5a:bd:08:f0:
         ca:64:84:53:50:2d:93:1b:bc:d9:b6:d8:68:55:1b:5c:69:2c:
         f7:e4:c7:6e:52:ec:5c:ed:f8:79:49:42:02:57:eb:c9:d8:65:
         c9:18:e2:50:1a:0b:b2:4d:41:c4:b6:f6:76:26:7d:84:23:4f:
         38:6b:3e:e5:3d:e6:f4:23:14:40:b7:42:f6:10:28:b3:03:f8:
         59:d0:e2:4e:ef:6b:5b:da:81:42:8f:b8:77:00:a1:76:06:61:
         fc:4b:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----