Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/yY8xpSvgE7Kl2z8IRAJVTi5icfk.roa
File: yY8xpSvgE7Kl2z8IRAJVTi5icfk.roa (raw, json)
Hash identifier: in6p7xmIR1t1zDSWrZzqJy0UQnyXYFOl5p3lpyFoLeg=
Subject key identifier: C9:8F:31:A5:2B:E0:13:B2:A5:DB:3F:08:44:02:55:4E:2E:62:71:F9
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 57
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/yY8xpSvgE7Kl2z8IRAJVTi5icfk.roa
Signing time: Fri 18 Apr 2025 01:19:34 +0000
ROA not before: Fri 18 Apr 2025 01:19:34 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 45.248.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 14:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 18 01:19:34 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=C98F31A52BE013B2A5DB3F084402554E2E6271F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:45:c4:e3:e9:3b:29:8c:70:9b:2e:8f:b8:
6f:f4:a0:b1:d9:3a:6b:24:fb:0a:66:4b:4c:0e:b9:
57:7f:ed:b9:16:d4:b6:9c:f8:38:6a:3a:15:c2:bb:
cb:34:10:95:08:ca:e8:a5:79:8d:c8:be:2f:37:0a:
56:1e:19:70:cf:b4:86:41:6a:72:84:86:31:75:57:
e8:6d:a3:fe:e6:61:dc:c0:ff:58:7a:9b:51:96:e6:
80:19:a6:29:32:6d:57:76:89:51:b7:40:4a:19:48:
eb:bf:fd:81:1f:ec:d7:13:59:7c:e9:74:83:1c:42:
0c:28:0a:e1:75:f6:d5:eb:a5:95:a3:24:c7:5d:24:
b6:f1:1d:16:fb:5c:55:3b:27:af:98:f9:a9:dd:70:
e3:46:fa:1d:7a:90:34:bd:73:96:ff:fa:b1:2b:83:
0b:6e:b3:b5:5e:df:2d:b0:37:5f:64:4f:49:d9:d9:
7a:83:7b:fb:1c:05:9e:84:fb:3c:63:f0:ab:96:ca:
87:62:7b:52:a1:b5:05:7e:28:68:0a:35:6c:9f:d2:
67:6c:ea:81:4e:a2:5c:20:86:0c:14:f1:a0:0d:ff:
bd:20:cb:ce:32:c7:a1:34:93:99:32:16:d6:4d:70:
7b:a3:7f:a6:15:a2:2c:8b:4f:a9:ae:59:88:c4:10:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:31:A5:2B:E0:13:B2:A5:DB:3F:08:44:02:55:4E:2E:62:71:F9
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/yY8xpSvgE7Kl2z8IRAJVTi5icfk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:c3:eb:0a:a5:05:f1:0c:3a:31:94:88:9c:d8:05:2b:b1:17:
4c:f7:51:24:07:d6:0d:95:13:cf:85:fc:d7:8b:ef:66:29:ca:
12:c1:25:2f:27:11:89:45:fc:f0:7f:e1:fa:86:a3:f6:f2:72:
90:e6:7e:0f:99:82:6c:53:63:b0:35:61:98:8d:82:1a:03:f2:
92:1d:a5:80:18:cf:e8:79:2b:66:5e:f9:0b:d4:f3:5c:7e:29:
88:f1:69:6b:e5:de:91:b1:8a:74:76:f4:41:91:34:a2:33:13:
dc:a6:73:c5:a0:7a:ed:1b:bf:3c:45:24:73:f3:d3:ad:fd:ab:
c8:66:48:02:90:8a:2e:b4:b7:a4:21:16:76:43:6c:bf:31:d2:
ef:f6:b0:ba:af:b9:2c:4a:23:8f:61:4b:b2:b1:23:8d:7c:9e:
ea:a7:07:bd:d2:74:ac:57:6f:4d:c0:e7:c4:03:78:83:42:bf:
37:49:a5:ef:c6:c4:7a:1c:20:f9:18:1b:20:31:df:14:72:0a:
81:83:eb:0c:87:bd:c8:d1:41:89:13:89:0a:6a:46:98:6b:9a:
44:1d:1a:2f:c6:eb:20:e4:61:53:1c:98:23:94:42:e9:8f:fb:
49:94:4f:b5:00:35:8f:3a:42:71:51:0c:fe:15:1e:9a:52:8d:
0e:9f:17:27
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF
ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxODAx
MTkzNFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQzk4RjMxQTUyQkUwMTNC
MkE1REIzRjA4NDQwMjU1NEUyRTYyNzFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKJVRcTj6TspjHCbLo+4b/Sgsdk6ayT7CmZLTA65V3/tuRbUtpz4
OGo6FcK7yzQQlQjK6KV5jci+LzcKVh4ZcM+0hkFqcoSGMXVX6G2j/uZh3MD/WHqb
UZbmgBmmKTJtV3aJUbdAShlI67/9gR/s1xNZfOl0gxxCDCgK4XX21eullaMkx10k
tvEdFvtcVTsnr5j5qd1w40b6HXqQNL1zlv/6sSuDC26ztV7fLbA3X2RPSdnZeoN7
+xwFnoT7PGPwq5bKh2J7UqG1BX4oaAo1bJ/SZ2zqgU6iXCCGDBTxoA3/vSDLzjLH
oTSTmTIW1k1we6N/phWiLItPqa5ZiMQQ2AECAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBTJjzGlK+ATsqXbPwhEAlVOLmJx+TAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj
QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2
L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi95WTh4cFN2Z0U3S2wy
ejhJUkFKVlRpNWljZmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCLfhYMA0GCSqGSIb3DQEBCwUAA4IBAQCPw+sKpQXxDDoxlIic2AUrsRdM91Ek
B9YNlRPPhfzXi+9mKcoSwSUvJxGJRfzwf+H6hqP28nKQ5n4PmYJsU2OwNWGYjYIa
A/KSHaWAGM/oeStmXvkL1PNcfimI8Wlr5d6RsYp0dvRBkTSiMxPcpnPFoHrtG788
RSRz89Ot/avIZkgCkIoutLekIRZ2Q2y/MdLv9rC6r7ksSiOPYUuysSONfJ7qpwe9
0nSsV29NwOfEA3iDQr83SaXvxsR6HCD5GBsgMd8UcgqBg+sMh73I0UGJE4kKakaY
a5pEHRovxusg5GFTHJgjlELpj/tJlE+1ADWPOkJxUQz+FR6aUo0Onxcn
Generated at Wed Apr 23 17:41:57 2025 by rpki-client on console.sobornost.net