Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/mdspJTvtN7IqO6BWB43rfhF6rWQ.roa
File: mdspJTvtN7IqO6BWB43rfhF6rWQ.roa (raw, json)
Hash identifier: MYnaHwrKps2isywvJDgFD1l/VPSKTrBNF7E8McAAXr4=
Subject key identifier: 99:DB:29:25:3B:ED:37:B2:2A:3B:A0:56:07:8D:EB:7E:11:7A:AD:64
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 11EE
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mdspJTvtN7IqO6BWB43rfhF6rWQ.roa
Signing time: Sat 26 Apr 2025 13:19:06 +0000
ROA not before: Sat 26 Apr 2025 13:19:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23853
IP address blocks: 211.147.79.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 26 Apr 2025 13:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4590 (0x11ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Apr 26 13:19:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=99DB29253BED37B22A3BA056078DEB7E117AAD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:49:e5:08:f8:4e:8b:ac:22:75:f9:0b:40:
9d:e3:ba:7b:52:86:d3:bd:ec:9a:dc:0c:6b:10:ec:
3d:fb:31:64:f4:90:ff:a2:1b:f4:9c:a6:6d:ed:b2:
f5:ac:ae:97:5b:89:ad:ef:ad:68:e7:50:cf:b8:e7:
e7:36:4c:86:fd:70:b3:1a:bf:01:92:e5:6a:d7:c7:
9e:0b:1c:6a:e4:e7:b1:c1:e4:4b:4f:51:46:f5:9b:
ea:38:20:3b:34:b9:29:25:1b:f6:c5:b6:35:73:d6:
f0:d2:48:93:7f:63:0c:fe:e2:5d:b9:e3:11:1c:6c:
83:6a:4f:e8:5b:1f:52:87:ec:5c:6c:b0:c2:6c:11:
3b:11:3c:75:06:a0:61:b2:be:b7:91:6e:49:04:04:
02:c4:92:72:c6:45:b5:0b:d4:48:1c:f9:b2:05:dc:
76:50:96:82:f3:7a:79:e6:f0:4d:de:4f:30:23:d6:
63:24:92:e1:53:ab:20:7a:ba:90:5a:35:f1:26:bd:
12:e1:7a:32:2f:4b:d3:06:c9:a8:86:a4:df:f9:41:
51:6d:12:01:33:02:04:ca:2a:eb:8c:11:ee:c7:11:
8a:1c:c8:80:f2:90:a0:af:a8:47:56:aa:b0:c3:30:
ad:98:f7:83:6b:fa:2a:20:88:93:38:9b:bd:2b:cf:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:29:25:3B:ED:37:B2:2A:3B:A0:56:07:8D:EB:7E:11:7A:AD:64
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mdspJTvtN7IqO6BWB43rfhF6rWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.147.79.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e6:2f:b9:a5:b9:9e:18:83:8f:69:7c:a6:b3:f5:e2:c1:64:
8d:ce:b8:5f:dd:3e:ce:a3:8c:a3:96:46:c6:50:87:56:03:a5:
c4:21:04:f9:ec:d8:e9:b8:d9:f2:e7:06:c0:bb:7e:c2:e2:f9:
79:53:7f:75:3b:99:bc:0c:a4:26:8d:28:58:1f:b6:6e:87:72:
db:68:be:5c:6a:07:f2:7c:29:0f:98:38:e4:9b:4e:72:98:d9:
66:a2:1d:aa:fd:79:c9:dd:0b:0d:52:05:cf:c2:34:ba:d2:bb:
52:4c:5b:23:7a:ec:8a:b1:e9:48:60:f3:20:97:7b:d4:bb:5d:
03:ea:52:8f:4b:be:5b:2b:f1:72:64:d1:81:d9:3e:bc:fb:47:
27:76:98:cf:a1:7a:b2:bd:e0:fe:8c:48:5b:73:4c:e4:e9:c0:
e8:1d:0f:f7:f0:43:ab:e9:66:5b:dd:f5:50:87:24:03:43:f8:
29:13:d0:26:dd:f7:9d:e7:2f:9b:a8:43:30:cd:76:7a:85:1c:
88:85:aa:85:ac:ac:a1:36:e7:84:a5:df:95:75:fc:b4:e4:63:
03:44:07:e0:1a:1f:29:a5:94:3a:73:19:37:f5:54:eb:fa:8e:
29:33:73:68:82:87:56:b5:9c:b5:7b:50:98:74:36:a7:e3:70:
16:63:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:23:28 2025 by rpki-client