Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/B0X-2Ja2DRLEwejfShOoy_ftdVk.roa
File: B0X-2Ja2DRLEwejfShOoy_ftdVk.roa (raw, json)
Hash identifier: YgIrG4EdLHTWcNrfX9QAkG7zflD+MsF1xk+01tvNsO4=
Subject key identifier: 07:45:FE:D8:96:B6:0D:12:C4:C1:E8:DF:4A:13:A8:CB:F7:ED:75:59
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0C74
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/B0X-2Ja2DRLEwejfShOoy_ftdVk.roa
Signing time: Wed 04 Jun 2025 07:19:21 +0000
ROA not before: Wed 04 Jun 2025 07:19:21 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 43.248.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 07:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: Jun 4 07:19:21 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=0745FED896B60D12C4C1E8DF4A13A8CBF7ED7559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:69:37:b1:13:c0:c1:2e:8e:fb:0f:df:f6:
f8:07:14:c2:a1:27:4f:19:bb:44:5b:c2:fb:ce:73:
4d:1c:7c:e0:61:45:78:b7:60:68:e1:44:26:0b:2b:
b7:78:f2:d5:99:d6:f9:d6:1c:e0:85:0e:a4:8f:40:
36:a5:5e:f8:79:96:c4:11:5f:35:12:7b:41:aa:96:
45:91:bb:39:df:02:ce:6c:48:ed:e4:0b:12:bc:a9:
cf:4a:c0:54:07:ff:c5:05:b4:6f:ed:69:64:96:8d:
d5:05:44:e3:db:ba:cb:22:cb:5b:a1:91:83:c7:c0:
ab:7d:42:f9:25:f0:cf:8f:7a:71:ce:3a:63:67:ff:
83:ab:e5:06:a1:bf:54:ed:9d:1e:98:c2:a4:74:df:
b7:05:f3:82:e5:b5:d1:41:94:1c:1a:3a:4e:f1:47:
3a:f9:99:2d:8e:ea:b0:cc:26:50:46:d0:ef:a4:6c:
ca:dd:c0:ad:eb:25:5d:2a:2b:fb:58:e0:7f:f3:de:
65:53:a1:19:2d:0c:6a:ea:0c:a2:a5:04:66:ed:1c:
86:67:34:b7:74:f3:68:77:63:a6:af:ad:1a:a1:c9:
b8:d2:62:23:17:51:96:82:85:79:ea:cb:68:7e:be:
95:72:3c:ce:e1:86:a0:a7:77:37:dd:60:c9:8a:88:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:FE:D8:96:B6:0D:12:C4:C1:E8:DF:4A:13:A8:CB:F7:ED:75:59
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/B0X-2Ja2DRLEwejfShOoy_ftdVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:ce:cc:ee:ab:01:73:38:73:2c:8b:61:53:66:92:b2:ab:23:
58:c4:93:b7:87:d5:7e:98:be:08:8d:91:85:ec:2d:6d:35:9e:
5d:23:33:92:f7:4a:1b:f9:f7:c3:87:fa:75:ab:28:6b:25:70:
40:bb:5d:37:25:e4:96:eb:3f:4e:7e:68:91:82:40:fc:46:b9:
98:84:3a:61:df:44:44:3c:54:2c:b0:99:f1:55:73:b1:d4:65:
70:69:b8:98:5f:cf:46:7a:49:47:d4:e3:30:3e:6a:46:fa:2a:
c1:03:c4:77:a5:38:dd:28:b0:e4:79:81:ab:0f:8b:6d:74:ca:
50:68:c4:82:30:31:a4:68:06:36:54:b3:2e:3d:ac:24:61:18:
12:27:83:b7:e3:f0:86:b2:48:5d:85:1e:b3:f8:10:b3:3d:64:
63:d1:b0:64:09:86:50:ae:58:47:8b:cd:a4:71:ca:6e:e0:15:
d3:0a:8a:7e:a1:02:3d:ff:a3:73:14:30:0c:92:f5:18:00:82:
23:67:3d:01:1e:34:fc:60:23:66:91:94:4e:d5:f0:c0:a6:ab:
99:a0:62:f9:a5:90:7a:52:9c:69:05:27:fb:cc:a7:8d:08:3c:
00:31:da:e7:d0:a7:30:75:34:29:dc:e5:ab:80:45:9c:82:e9:
68:af:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:55:18 2025 by rpki-client