Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa
File: Z5hAKvxguOsASJpgwUdi4NnpZOs.roa (raw, json)
Hash identifier: O/EzgyKNo6PYkpxalObOJROOjjHcKmOl0tEmOSOFhwk=
Subject key identifier: 67:98:40:2A:FC:60:B8:EB:00:48:9A:60:C1:47:62:E0:D9:E9:64:EB
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0C5D
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa
Signing time: Sat 31 May 2025 10:58:39 +0000
ROA not before: Sat 31 May 2025 10:58:39 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 43.248.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 07:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: May 31 10:58:39 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=6798402AFC60B8EB00489A60C14762E0D9E964EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:0d:43:0d:58:07:2f:78:2c:f0:bf:ff:b3:
e8:2b:82:5f:c7:46:17:a1:63:a6:fb:79:fd:44:49:
7b:f0:05:07:a9:54:3c:98:95:ec:dc:7e:cb:93:2e:
2f:fd:80:48:b6:f6:63:a6:fa:3e:7d:cf:78:51:a6:
88:a6:08:00:2e:b8:98:ed:7e:c8:7b:3a:e6:73:45:
e1:a6:e6:59:e7:90:c9:02:91:0e:9f:05:e0:40:51:
d4:ab:77:4e:7b:54:41:00:48:fa:a4:ae:eb:ea:9a:
56:f5:a6:87:12:8a:5c:e2:04:a8:a9:2c:9f:2d:3e:
1d:45:6a:2b:98:87:3b:1a:e3:a1:2a:ea:a9:ac:0a:
37:f1:69:43:04:96:b0:f6:37:12:fb:a3:f0:51:a1:
2c:ce:4f:e3:b1:4a:37:69:ab:95:6c:6e:a3:3d:21:
b4:af:69:dd:3d:60:a5:c7:34:00:24:23:7a:b5:b9:
71:ac:68:d0:9e:fe:69:a9:e8:88:00:2d:2e:4d:d6:
98:1f:3b:1f:95:1a:e5:ab:56:ea:58:e8:38:b1:96:
3c:6f:b9:c3:8f:27:33:c1:3b:28:52:58:ce:67:ca:
ef:b0:58:d0:1e:ab:3b:9f:37:c5:d1:a9:ed:0e:22:
74:ac:86:4b:eb:fc:af:b6:dc:50:8b:a1:e4:7f:84:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:40:2A:FC:60:B8:EB:00:48:9A:60:C1:47:62:E0:D9:E9:64:EB
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Z5hAKvxguOsASJpgwUdi4NnpZOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
68:ec:7e:0e:4e:1e:02:e5:9b:ac:f0:6b:df:51:4e:a4:0e:39:
d6:8f:54:a6:9c:2f:28:61:37:19:2b:e9:a1:5d:45:a9:dd:e8:
a8:e3:b6:ff:42:6d:e3:46:a7:5b:a0:8a:87:5d:19:91:7b:b6:
ba:1d:07:63:d1:6f:c9:df:52:84:f8:f7:09:41:73:ac:d9:ba:
68:cc:11:08:d1:62:23:a7:12:ec:c3:c6:a3:04:00:f1:c8:32:
64:b2:78:de:44:83:60:52:fc:d4:c8:d9:69:96:ec:c6:b7:a0:
12:0f:b1:23:cd:1a:1f:ee:16:a2:e8:7c:b2:ea:69:ff:66:ad:
e7:35:bc:2b:bc:6a:ee:2d:b2:0c:a0:8f:81:58:97:b7:5e:46:
1a:27:1e:91:41:ca:78:93:37:25:f2:ca:73:80:c3:b7:63:93:
c6:c8:74:1f:16:a3:ae:a4:a5:bc:71:50:3d:f7:ed:e2:87:a2:
ad:4c:6d:fa:67:cc:e1:13:cb:48:95:03:29:16:37:7b:a7:d4:
ab:3c:cc:39:43:52:c6:4e:ea:c3:dc:5a:9e:5b:8d:20:a5:85:
41:4e:df:48:be:08:a4:ea:98:e7:0e:51:f0:79:53:7b:d7:40:
eb:27:58:0b:d9:56:4f:f3:ff:f9:d0:7b:3f:aa:f7:1f:e5:7c:
00:11:49:a5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJC
NEM1RkE5NkI4NzQxQkY2OEI0OEJGMDA0REJENkZEOTYzNkZBRDAeFw0yNTA1MzEx
MDU4MzlaFw0yNjA0MDkwNjQxMDBaMDMxMTAvBgNVBAMTKDY3OTg0MDJBRkM2MEI4
RUIwMDQ4OUE2MEMxNDc2MkUwRDlFOTY0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC18A1DDVgHL3gs8L//s+grgl/HRhehY6b7ef1ESXvwBQepVDyY
lezcfsuTLi/9gEi29mOm+j59z3hRpoimCAAuuJjtfsh7OuZzReGm5lnnkMkCkQ6f
BeBAUdSrd057VEEASPqkruvqmlb1pocSilziBKipLJ8tPh1FaiuYhzsa46Eq6qms
CjfxaUMElrD2NxL7o/BRoSzOT+OxSjdpq5VsbqM9IbSvad09YKXHNAAkI3q1uXGs
aNCe/mmp6IgALS5N1pgfOx+VGuWrVupY6DixljxvucOPJzPBOyhSWM5nyu+wWNAe
qzufN8XRqe0OInSshkvr/K+23FCLoeR/hMzFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZ5hAKvxguOsASJpgwUdi4NnpZOswHwYDVR0jBBgwFoAU27TF+pa4dBv2i0i/
AE29b9ljb60wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw
LzI3VEYtcGE0ZEJ2MmkwaV9BRTI5YjlsamI2MC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL1o1aEFLdnhndU9zQVNK
cGd3VWRpNE5ucFpPcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAQr+LAwDQYJKoZIhvcNAQELBQADggEBAGjsfg5OHgLlm6zwa99RTqQOOdaPVKac
LyhhNxkr6aFdRand6Kjjtv9CbeNGp1ugioddGZF7trodB2PRb8nfUoT49wlBc6zZ
umjMEQjRYiOnEuzDxqMEAPHIMmSyeN5Eg2BS/NTI2WmW7Ma3oBIPsSPNGh/uFqLo
fLLqaf9mrec1vCu8au4tsgygj4FYl7deRhonHpFByniTNyXyynOAw7djk8bIdB8W
o66kpbxxUD337eKHoq1MbfpnzOETy0iVAykWN3un1Ks8zDlDUsZO6sPcWp5bjSCl
hUFO30i+CKTqmOcOUfB5U3vXQOsnWAvZVk/z//nQez+q9x/lfAARSaU=
-----END CERTIFICATE-----
Generated at Sat Jun 21 21:12:47 2025 by rpki-client