Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa
File: gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa (raw, json)
Hash identifier: 6iucqtkG5JI+O+SZGI6Fgwi+D235R7BlFdxf3hZovpA=
Subject key identifier: 83:2D:90:CD:3B:28:5C:BB:32:5D:0B:C7:F3:1E:4B:5B:EC:5E:F9:AD
Certificate issuer: /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Certificate serial: 070D
Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa
Signing time: Wed 14 May 2025 13:10:34 +0000
ROA not before: Wed 14 May 2025 13:10:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 4134
IP address blocks: 160.19.82.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 28 May 2025 13:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Validity
Not Before: May 14 13:10:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=832D90CD3B285CBB325D0BC7F31E4B5BEC5EF9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:2f:6c:9e:e9:cb:2e:f8:9a:5b:69:b7:89:
07:3d:04:9d:0e:ca:07:92:de:cd:07:3f:a8:03:60:
87:f8:24:24:72:86:fe:1e:27:5b:02:11:ee:7b:00:
b2:cd:d8:49:1f:55:ec:55:1e:0d:26:aa:06:6c:6b:
f5:16:d9:a1:bf:c3:41:8e:b6:4a:49:05:64:76:20:
2f:2c:dd:1d:8a:36:2d:aa:2e:26:07:9e:c1:9b:d7:
e4:79:df:e2:bb:c7:68:5a:23:40:8e:55:04:63:cc:
46:0a:f1:f9:df:ae:01:f0:04:5b:27:fd:a5:2c:24:
08:75:b2:f0:bf:a2:40:da:24:af:96:4d:3b:1e:b6:
17:67:78:91:aa:83:9d:86:c5:7b:69:fd:be:06:24:
d9:32:47:6e:6d:1c:63:fc:df:ee:ed:90:8e:c6:69:
17:a7:da:80:a3:3e:6d:61:ef:1b:94:c2:02:72:46:
6e:33:25:c8:d0:40:a5:3a:c7:13:d0:aa:44:99:32:
ee:51:1f:00:17:19:5a:f0:56:ae:ea:23:fd:b4:49:
4d:90:78:a3:76:2e:38:b5:78:5a:5f:73:cc:aa:f0:
a2:0c:fd:6f:7e:a8:a4:7a:c9:17:a8:52:f4:f0:f5:
d2:8e:d7:d8:7e:7b:ca:91:bb:b7:fe:83:52:77:29:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2D:90:CD:3B:28:5C:BB:32:5D:0B:C7:F3:1E:4B:5B:EC:5E:F9:AD
X509v3 Authority Key Identifier:
keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/gy2QzTsoXLsyXQvH8x5LW-xe-a0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.82.0/24
Signature Algorithm: sha256WithRSAEncryption
81:03:5a:50:de:4a:ac:6b:ed:51:94:f4:07:98:41:1d:35:77:
e8:88:92:c7:92:1c:ec:ce:f3:a5:7b:7a:24:ba:0d:40:e5:fd:
d2:6d:56:ad:3e:a7:95:02:ae:cf:53:30:f6:b1:fb:70:e3:89:
48:be:f5:ed:35:c6:2e:b1:1f:f9:a4:f3:1b:64:4d:bb:04:46:
bc:a6:e5:15:ee:ef:33:40:85:d8:a0:6e:83:f4:29:e2:35:fb:
c9:28:db:62:f8:3d:3a:c9:a6:c0:1c:97:ec:b3:cd:e6:83:df:
07:41:d7:97:38:b4:16:d4:95:de:52:08:fa:f0:93:96:ea:81:
91:d5:72:ad:c0:c7:10:54:dc:ec:46:41:ec:18:5c:28:ce:96:
dd:91:71:d7:e6:68:d0:25:72:3b:19:dc:42:13:03:c1:3e:09:
01:33:c9:9a:45:64:f8:a5:4d:77:28:62:72:20:11:f0:51:3f:
4f:1a:0b:2a:7a:a0:81:90:fd:bb:ed:1a:57:b8:63:2f:50:48:
1e:e6:36:01:0e:55:0b:b2:08:88:8c:df:26:b8:f6:5b:96:d2:
4b:39:74:22:0f:b0:46:cc:57:e2:c5:44:ca:c4:af:a8:f5:69:
ab:2b:41:ec:05:6a:7f:35:30:65:75:76:e5:25:3f:f7:df:b2:
50:dd:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:12:45 2025 by rpki-client