Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/6q0GGf6RZtsfGOazaSc9TL9h3EQ.roa
File: 6q0GGf6RZtsfGOazaSc9TL9h3EQ.roa (raw, json)
Hash identifier: /gfhFUhyfqzfjhZlxROpSg3qb6MMjtNbTIfvat40I7U=
Subject key identifier: EA:AD:06:19:FE:91:66:DB:1F:18:E6:B3:69:27:3D:4C:BF:61:DC:44
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 07BE
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/6q0GGf6RZtsfGOazaSc9TL9h3EQ.roa
Signing time: Mon 12 May 2025 10:37:02 +0000
ROA not before: Mon 12 May 2025 10:37:02 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 7641
IP address blocks: 2403:600::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 May 2025 13:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 12 10:37:02 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EAAD0619FE9166DB1F18E6B369273D4CBF61DC44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:3b:62:e9:9d:0b:0d:e7:35:fe:78:c1:16:
df:f5:4d:05:5f:0d:6f:d1:fb:fc:f9:b2:00:1b:54:
0e:72:0a:d8:4b:18:a6:f7:69:1d:39:7c:3a:81:bd:
9d:79:3c:13:b2:14:aa:90:ce:1a:ff:d0:d4:3c:56:
a9:b5:c8:a7:f1:e4:28:c4:08:b0:94:c5:d8:3e:cf:
a7:cf:5b:52:19:ee:8e:14:fb:db:e4:5b:75:4b:0e:
9d:bc:c7:1d:4e:bd:d3:55:18:81:3c:79:1a:b1:e5:
97:c9:81:87:9a:36:84:5b:24:a0:a0:62:41:58:38:
80:5c:0b:9a:25:41:20:f9:19:74:d7:5b:a7:3d:f6:
66:5b:d6:45:31:20:73:66:46:c9:40:86:fa:46:b2:
a4:8c:92:e2:04:71:6a:f9:66:22:71:7d:d9:b5:be:
0b:7c:7b:65:76:40:10:db:c9:68:ea:9c:10:d3:ea:
b3:98:28:e6:bb:d4:b9:30:2f:8a:4a:cc:8e:36:e3:
ee:40:a2:80:dd:6c:98:1c:b3:20:c7:02:41:c2:8e:
49:fd:26:de:ec:cf:9e:ca:5f:13:0e:aa:ad:36:f0:
8c:bd:41:9c:0b:e0:0d:8c:0b:4d:be:76:ff:7b:27:
8f:04:97:05:48:98:f5:2b:e1:f4:d8:b0:59:10:1d:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:06:19:FE:91:66:DB:1F:18:E6:B3:69:27:3D:4C:BF:61:DC:44
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/6q0GGf6RZtsfGOazaSc9TL9h3EQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:600::/32
Signature Algorithm: sha256WithRSAEncryption
33:a5:6d:2b:9f:f9:7e:09:94:7a:aa:29:65:53:d3:ee:25:51:
af:11:5a:87:05:b6:d5:f5:ec:c8:84:e3:68:8a:87:d1:6f:2c:
b2:4b:1c:0b:cd:81:f4:ad:19:f6:50:27:0b:b7:db:92:5e:51:
dd:96:d0:bc:79:4d:14:4d:7b:a4:25:89:40:97:5d:d2:e5:8e:
47:94:7f:7c:0d:35:47:a4:1a:82:66:1e:00:5f:52:71:e0:9d:
8e:b8:b9:6d:72:a5:9e:b5:1d:e6:f6:90:27:1d:73:8b:1e:22:
5c:2c:ca:1a:f0:c4:bf:ac:ca:40:87:0c:7b:3f:7d:be:26:8a:
d1:5e:d7:ba:f1:9d:4d:03:cf:97:70:4f:e0:45:82:15:6c:d0:
ad:d1:12:65:99:9c:a6:33:bc:9b:4d:88:e5:21:e7:f3:fc:ea:
b5:21:16:68:a7:0e:4d:2e:74:f6:7e:3e:51:c2:dd:ef:ad:c9:
9f:09:29:27:fc:64:5d:10:59:1e:24:87:27:8c:0c:15:ff:b1:
e0:55:46:a8:85:02:e7:e9:d3:93:aa:01:22:32:a7:8d:70:3d:
67:af:f0:0c:53:1e:2c:2f:02:93:ed:65:da:9c:a1:98:62:ce:
de:a9:e7:6e:e5:af:17:6a:42:a4:8e:6c:27:94:60:4b:05:cf:
1b:f2:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:21:33 2025 by rpki-client