Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nItUp8OdeeMDr-UHdy6jgs-w-ko.roa
File:                     nItUp8OdeeMDr-UHdy6jgs-w-ko.roa (raw, json)
Hash identifier:          cwki/8BPRs4MQuLRVzKsx6S38unE49jNhVO4N/l237w=
Subject key identifier:   9C:8B:54:A7:C3:9D:79:E3:03:AF:E5:07:77:2E:A3:82:CF:B0:FA:4A
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       070B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nItUp8OdeeMDr-UHdy6jgs-w-ko.roa
Signing time:             Thu 18 May 2023 07:24:18 +0000
ROA not before:           Thu 18 May 2023 07:24:18 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     59803
IP address blocks:        2403:1b80::/32 maxlen: 64
                          2403:1b80::/48 maxlen: 64
                          2406:1e80::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 01:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: May 18 07:24:18 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=9C8B54A7C39D79E303AFE507772EA382CFB0FA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:42:38:17:13:e2:5c:af:7a:38:4b:2b:84:
                    03:e3:24:d9:6d:02:0e:9a:db:cd:b5:7e:13:52:74:
                    2f:d3:bb:03:d3:5e:16:7f:91:f2:a9:16:a8:b3:48:
                    31:f1:07:41:cf:e1:14:41:45:36:a7:5e:35:0a:64:
                    72:d0:90:29:38:20:8c:32:41:cf:1a:da:2d:77:4e:
                    42:f2:f7:3a:40:29:bb:47:09:99:ed:2e:9e:37:29:
                    97:fc:7d:ff:1b:b3:35:c0:31:5d:21:d8:a6:78:03:
                    a0:9f:2e:fa:d1:2d:d5:bd:aa:44:7c:b6:47:73:3a:
                    78:cc:04:a4:f8:89:1b:ef:5a:e5:3a:3b:1d:b6:0b:
                    74:72:cb:7e:d1:4b:01:fe:f0:7b:b8:43:d2:94:da:
                    40:eb:c0:1d:d1:27:df:ac:dd:01:e4:76:b8:a9:0a:
                    f3:33:71:3e:96:5a:03:03:48:58:c0:5a:fa:1c:c1:
                    3c:a3:31:0d:89:fd:6b:7d:df:dd:1c:40:75:55:e4:
                    c3:84:4d:09:26:ae:ba:7a:14:84:76:9d:4b:8c:69:
                    d0:94:0b:32:ef:a8:67:af:0c:b9:4d:0a:8a:65:62:
                    f6:8f:97:eb:da:ff:cd:d5:f4:bd:7e:f5:4f:5b:25:
                    6e:01:1f:e1:79:a2:9c:c0:df:1d:da:8b:58:42:85:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:54:A7:C3:9D:79:E3:03:AF:E5:07:77:2E:A3:82:CF:B0:FA:4A
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nItUp8OdeeMDr-UHdy6jgs-w-ko.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/32
                  2406:1e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:d3:8a:34:40:e5:6c:81:2e:67:0a:6b:36:92:16:ee:ee:
         6f:39:f7:4f:8f:02:5d:9b:06:5a:3c:05:7f:26:1a:5d:f1:94:
         2f:37:e8:24:5f:c3:70:4b:7d:58:63:84:4e:6c:79:ec:6c:99:
         48:4e:65:1e:88:49:87:b2:ad:63:d4:69:1b:66:5b:55:31:c0:
         37:a6:c7:85:43:37:e2:48:49:7f:33:dc:33:47:39:65:72:1e:
         32:51:10:f2:df:44:74:50:ca:ed:bb:5c:5e:cc:a6:e2:8d:0d:
         29:e3:b6:6c:1b:6e:02:2b:e8:ea:17:4a:7f:e7:ab:fc:de:f0:
         8d:6f:cd:55:5c:99:6a:d0:ea:e0:5b:81:0a:e8:31:3a:38:d2:
         aa:27:09:b5:45:0a:43:6c:2b:69:22:87:a9:06:7d:a8:47:09:
         60:1f:6f:0b:17:dd:e6:35:b6:59:5d:96:8d:2b:4a:23:19:1c:
         02:d1:c9:e0:41:e2:f7:4d:cb:19:db:ff:e4:ec:27:cb:15:d5:
         ec:31:cf:8d:34:ca:4d:fd:32:6b:43:06:69:0e:07:d2:2a:50:
         73:63:e5:a7:64:08:73:7f:1f:d6:de:6b:b4:4a:3d:d3:87:60:
         05:0e:5a:3a:7f:a1:84:11:1c:c4:e2:31:8b:c8:82:8b:4e:4c:
         72:21:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org