Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa
File: YEoc_em64quYq17bTF0xKnWv7aE.roa (raw, json)
Hash identifier: /O1S5JzyuBalcXbYO6HLtboGEWC4Xpvu4qtlg0c/Gh8=
Subject key identifier: 60:4A:1C:FD:E9:BA:E2:AB:98:AB:5E:DB:4C:5D:31:2A:75:AF:ED:A1
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0BF3
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa
Signing time: Tue 13 May 2025 07:04:28 +0000
ROA not before: Tue 13 May 2025 07:04:28 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 103.37.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: May 13 07:04:28 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=604A1CFDE9BAE2AB98AB5EDB4C5D312A75AFEDA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:99:a0:d3:ba:56:b5:bd:f9:35:ff:85:84:
3e:68:a8:3c:3b:34:85:50:2c:ae:fb:6a:11:ca:aa:
c9:c4:7c:ee:d2:d1:f6:e2:bf:29:72:e0:e2:ce:47:
25:df:a3:c2:f5:48:f8:e7:33:73:24:48:2a:44:da:
4f:70:56:7e:3c:36:fc:75:b8:09:be:2c:a4:70:31:
6b:03:5c:7b:6d:cb:97:09:5b:e1:e9:b1:54:4a:98:
77:7e:68:56:d7:b2:92:a8:9f:f2:04:e7:cc:29:fd:
12:1e:88:3b:c0:28:87:ba:68:8c:16:1f:46:3d:76:
7e:11:cc:de:a7:15:07:91:94:56:60:7e:d6:d8:59:
f9:60:97:73:f4:9c:6f:fd:aa:16:df:72:66:34:32:
c4:bb:24:fe:ca:d7:0f:d0:6b:7d:48:a0:ad:6b:da:
fd:54:a2:10:0c:2a:a3:03:29:83:4f:e3:8a:1e:cf:
b6:c2:1a:32:0d:e0:c2:85:cf:b6:3f:68:cb:2d:2f:
f8:fa:c8:8e:d3:7c:06:7c:f2:ef:bb:ba:13:4a:b1:
74:d1:d1:df:53:9a:fd:43:d3:c6:37:e9:22:93:1c:
b5:41:1e:2a:cc:30:da:10:a0:29:4a:dd:62:ee:85:
4e:09:26:35:34:16:c7:00:7c:4a:72:52:8b:a7:4c:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:1C:FD:E9:BA:E2:AB:98:AB:5E:DB:4C:5D:31:2A:75:AF:ED:A1
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YEoc_em64quYq17bTF0xKnWv7aE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3c:83:4e:67:73:9e:75:c2:d0:08:68:26:17:cb:3d:e3:cb:
fc:49:0c:14:7e:51:8d:65:07:e6:b3:76:30:2f:3c:17:85:ec:
60:a7:3d:6b:e4:39:d4:25:34:19:35:c0:e0:40:2f:7b:fd:e8:
e3:7e:82:30:37:73:16:4e:c4:b3:fc:91:d1:7b:c5:69:c7:57:
5a:ef:b0:d3:5d:cc:ee:48:3d:4a:58:93:08:5b:bc:e6:fc:aa:
94:02:15:03:9f:c7:f6:d2:64:1d:fc:bc:f0:81:69:28:af:5d:
30:18:9d:82:0c:bf:a1:bc:1e:eb:33:89:31:ba:3c:46:1b:b6:
e0:42:82:a3:f2:b7:51:b0:23:ff:67:12:46:f8:b3:8a:a3:52:
9a:0b:09:db:82:a2:9e:cd:c6:7b:3f:ba:7c:2b:6c:db:c8:38:
08:64:dc:d8:f4:8b:cd:7d:09:54:62:55:c9:b1:bc:d6:15:e4:
d4:a4:c0:1a:d5:cd:db:03:45:fd:e7:29:46:74:60:68:ec:a5:
fa:16:5c:d2:bd:d1:f3:ad:f3:f5:90:68:d5:09:df:10:05:6f:
5c:c9:32:63:ac:b5:64:9e:82:c6:56:63:93:4f:3a:a8:a0:8b:
30:d5:80:cf:ee:e0:a5:25:77:40:af:f1:c6:69:18:f4:bd:42:
d6:4c:07:38
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC
NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTA1MTMw
NzA0MjhaFw0yNjA0MDkwNjQxMDBaMDMxMTAvBgNVBAMTKDYwNEExQ0ZERTlCQUUy
QUI5OEFCNUVEQjRDNUQzMTJBNzVBRkVEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Cpmg07pWtb35Nf+FhD5oqDw7NIVQLK77ahHKqsnEfO7S0fbi
vyly4OLORyXfo8L1SPjnM3MkSCpE2k9wVn48Nvx1uAm+LKRwMWsDXHtty5cJW+Hp
sVRKmHd+aFbXspKon/IE58wp/RIeiDvAKIe6aIwWH0Y9dn4RzN6nFQeRlFZgftbY
Wflgl3P0nG/9qhbfcmY0MsS7JP7K1w/Qa31IoK1r2v1UohAMKqMDKYNP44oez7bC
GjIN4MKFz7Y/aMstL/j6yI7TfAZ88u+7uhNKsXTR0d9Tmv1D08Y36SKTHLVBHirM
MNoQoClK3WLuhU4JJjU0FscAfEpyUounTAxFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUYEoc/em64quYq17bTF0xKnWv7aEwHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/
AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw
LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL1lFb2NfZW02NHF1WXEx
N2JURjB4S25XdjdhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnJS0wDQYJKoZIhvcNAQELBQADggEBADY8g05nc551wtAIaCYXyz3jy/xJDBR+
UY1lB+azdjAvPBeF7GCnPWvkOdQlNBk1wOBAL3v96ON+gjA3cxZOxLP8kdF7xWnH
V1rvsNNdzO5IPUpYkwhbvOb8qpQCFQOfx/bSZB38vPCBaSivXTAYnYIMv6G8Husz
iTG6PEYbtuBCgqPyt1GwI/9nEkb4s4qjUpoLCduCop7Nxns/unwrbNvIOAhk3Nj0
i819CVRiVcmxvNYV5NSkwBrVzdsDRf3nKUZ0YGjspfoWXNK90fOt8/WQaNUJ3xAF
b1zJMmOstWSegsZWY5NPOqigizDVgM/u4KUld0Cv8cZpGPS9QtZMBzg=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:20 2025 by rpki-client