Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/k346sXmbDV6nLAqIA6PQHebDjCE.roa
File: k346sXmbDV6nLAqIA6PQHebDjCE.roa (raw, json)
Hash identifier: D+rc4DUbQOker00d3mg4fAqDmjZO8E+jCmQrRKQuDA4=
Subject key identifier: 93:7E:3A:B1:79:9B:0D:5E:A7:2C:0A:88:03:A3:D0:1D:E6:C3:8C:21
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0651
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/k346sXmbDV6nLAqIA6PQHebDjCE.roa
Signing time: Tue 04 Mar 2025 06:58:42 +0000
ROA not before: Tue 04 Mar 2025 06:58:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.146.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 07:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1617 (0x651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 06:58:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=937E3AB1799B0D5EA72C0A8803A3D01DE6C38C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:ec:10:10:23:53:a8:6a:30:3b:cf:8d:9a:
82:93:86:f7:69:f9:6a:ec:b6:01:3d:30:fc:0a:95:
6c:8d:f1:8f:de:47:b7:c3:15:36:0b:80:07:6e:30:
46:cb:9f:18:f3:b9:3b:32:8d:27:f1:df:1d:9c:96:
5e:98:4e:fa:64:35:c5:6e:66:cd:c2:c4:6d:86:6c:
22:f3:60:8c:cf:ad:30:1b:b4:97:be:a1:b6:bc:9c:
43:b7:ee:43:ec:98:12:91:dd:28:1a:c4:00:a5:dd:
5e:04:f5:35:f2:d7:61:77:f2:ea:bb:cb:20:b5:9e:
c7:de:f3:57:e3:89:5a:6d:d3:64:da:d2:48:97:09:
6b:b6:82:0c:e0:46:07:ec:69:41:6e:77:4d:b7:85:
1d:6b:02:dd:d2:45:a4:41:f5:ae:2a:47:4e:d2:db:
91:98:b1:9b:3f:43:75:50:11:bf:e6:76:c5:1a:27:
1f:31:76:62:34:a8:77:60:3a:4a:fb:a6:80:61:d8:
f8:66:10:d7:1c:3f:fe:ef:fc:24:c7:88:47:8a:72:
a6:71:36:37:54:34:a5:dc:7c:d9:6e:c7:b2:62:25:
0a:06:0e:06:95:85:4a:fb:42:30:2f:c5:d5:77:ca:
55:89:69:bb:25:d2:11:26:5f:82:08:d8:28:cc:e6:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7E:3A:B1:79:9B:0D:5E:A7:2C:0A:88:03:A3:D0:1D:E6:C3:8C:21
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/k346sXmbDV6nLAqIA6PQHebDjCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8f:d1:35:06:f2:dd:ba:da:4c:ad:a0:36:89:f4:62:0a:ba:
04:2f:53:5a:53:c4:46:cb:51:8e:0e:66:d4:5a:bc:38:61:a2:
14:38:ec:5d:89:ca:18:b0:a2:8e:fd:ea:75:da:0e:ea:84:76:
b7:16:7e:ec:86:d5:dd:98:1c:71:70:29:70:79:ff:e1:64:8f:
4e:75:0e:1b:70:9a:86:71:7a:e2:38:5d:ac:b5:98:64:71:2e:
6b:a5:9c:4f:54:0e:5e:af:95:59:e5:01:e7:b4:31:d8:ee:4a:
0e:43:6b:c4:49:c3:b6:bd:8a:cb:0e:cc:fb:9a:d1:78:16:d5:
f8:81:66:11:94:20:42:63:ee:17:ae:25:1b:65:a7:20:54:04:
7b:44:0c:0a:9c:b8:9d:65:f3:79:d6:75:a5:1c:c3:6a:16:d4:
aa:72:2f:70:6c:17:6e:aa:51:17:65:93:4e:11:64:16:a5:c2:
76:52:3b:0f:26:3e:1e:9c:1e:b7:f1:bb:ce:11:78:2d:a9:a9:
8d:42:1c:2c:ab:1d:49:72:20:4b:22:7d:b6:fb:23:e1:24:84:
78:18:ed:6d:2d:65:f3:48:0a:b3:93:da:6f:4d:f6:09:dc:59:
48:24:fc:7a:22:b9:86:3c:39:c9:fb:90:87:50:a9:49:c6:58:
f7:88:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:29 2025 by rpki-client