Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/B6SG1AtyybGA_4UKON6I1SVPNb0.roa
File: B6SG1AtyybGA_4UKON6I1SVPNb0.roa (raw, json)
Hash identifier: 8V78uCZZEl0wyaICCh2bzL38OHMtYliI6ThiaIPNKdk=
Subject key identifier: 07:A4:86:D4:0B:72:C9:B1:80:FF:85:0A:38:DE:88:D5:25:4F:35:BD
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0C88
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/B6SG1AtyybGA_4UKON6I1SVPNb0.roa
Signing time: Thu 05 Jun 2025 03:51:19 +0000
ROA not before: Thu 05 Jun 2025 03:51:19 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 43.248.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: Jun 5 03:51:19 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=07A486D40B72C9B180FF850A38DE88D5254F35BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:be:a2:44:6a:59:a9:21:fb:3e:83:ca:10:
64:a1:c4:76:d0:09:dd:c8:a9:be:ca:d7:99:78:79:
24:59:20:95:d4:ff:e8:e8:9b:c6:3a:39:48:eb:3a:
8f:e0:5e:85:6a:5e:f2:75:45:ea:3d:91:a7:27:ef:
62:5a:0e:65:a4:0a:ff:a0:4b:d1:cd:4b:c7:1b:6a:
cb:e7:9c:2b:dd:ca:3a:b0:5f:bf:f6:9a:fd:0b:89:
2d:3c:61:e2:26:a6:04:e2:91:dc:18:b7:16:8d:96:
7b:c6:6a:64:af:30:46:d2:9f:cd:01:95:32:2a:6b:
14:05:bd:16:bb:bc:1f:8a:c8:cb:9f:66:88:3c:2e:
e0:e9:c6:9d:fc:1f:50:8a:28:d2:b6:b1:52:25:e4:
1d:56:2b:e3:85:21:7b:a8:13:b3:e9:56:f9:ca:ba:
21:f4:80:cd:d6:d3:5c:97:a2:25:e3:0f:a6:97:f1:
1a:d4:ae:c9:a5:f7:98:9f:e4:63:4a:4a:4c:32:53:
06:bd:f5:5c:4a:5c:78:c6:bf:50:ed:35:61:bd:72:
6a:b4:e1:b4:dd:46:e9:ad:d4:17:82:c1:6e:c4:23:
8c:9a:65:33:3f:b0:f3:6b:f7:84:52:85:95:fd:7e:
43:1b:c8:06:72:17:6a:40:d8:d7:c0:f6:ed:ec:58:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A4:86:D4:0B:72:C9:B1:80:FF:85:0A:38:DE:88:D5:25:4F:35:BD
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/B6SG1AtyybGA_4UKON6I1SVPNb0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7e:36:0b:a7:6e:73:b8:82:93:37:72:b7:64:39:8b:c6:3f:
9c:2a:2e:da:ba:8c:cd:c9:b7:f6:a2:6f:43:89:09:fe:95:cc:
15:85:76:b8:3b:a6:6a:16:8f:c4:f7:9b:5c:9b:b7:44:06:03:
84:88:8d:45:6a:cc:2e:10:19:f6:38:ed:17:88:2a:40:38:39:
24:20:b3:ae:a5:4b:77:b5:1f:f0:44:85:28:8b:02:df:33:db:
52:0a:84:79:12:84:6d:0d:b5:00:79:10:60:ce:3c:ac:93:dd:
e1:4d:dd:11:49:a7:2c:5e:be:f1:97:3b:4f:36:a1:96:e1:26:
37:b4:c5:e4:49:20:05:dc:a3:72:6c:b9:75:c9:10:ab:a2:17:
7c:68:00:48:43:c4:9d:2c:2c:ae:aa:52:e3:03:0f:fd:87:d3:
6c:9b:ff:63:50:c1:67:72:e2:eb:4b:ce:10:b1:c0:5a:6e:cf:
1b:13:01:18:0a:ee:3a:07:c3:96:88:01:c8:c8:eb:f4:70:37:
82:59:76:ca:66:b9:0b:f5:3c:f7:cb:26:4a:51:f7:69:2f:e4:
ae:06:0b:e7:11:1b:fe:91:bb:6c:ec:d5:50:59:f3:08:d5:11:
86:42:a9:ec:85:53:21:09:9f:72:f3:35:b6:4f:20:b2:3a:e4:
27:d6:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:32:15 2025 by rpki-client