Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/SobTR5BOD7hJTSdJtPza_22sMcY.roa
File: SobTR5BOD7hJTSdJtPza_22sMcY.roa (raw, json)
Hash identifier: w+Mk8ZcbIVVlHy7BFEtjtvPD8YfWbNxho6vSvPxOVaE=
Subject key identifier: 4A:86:D3:47:90:4E:0F:B8:49:4D:27:49:B4:FC:DA:FF:6D:AC:31:C6
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 12B2
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/SobTR5BOD7hJTSdJtPza_22sMcY.roa
Signing time: Thu 31 Aug 2023 09:15:50 +0000
ROA not before: Thu 31 Aug 2023 09:15:50 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 58859
IP address blocks: 43.254.128.0/22 maxlen: 24
103.73.244.0/22 maxlen: 24
103.73.248.0/22 maxlen: 24
103.203.100.0/22 maxlen: 24
103.249.12.0/22 maxlen: 24
103.249.192.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4786 (0x12b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Aug 31 09:15:50 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=4A86D347904E0FB8494D2749B4FCDAFF6DAC31C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:08:c6:ec:96:53:1c:cb:29:6b:7b:7a:74:
12:c0:7b:54:81:a8:2f:3a:17:2f:55:00:8c:a7:ea:
06:68:fe:b6:3e:45:ba:79:56:ef:ed:55:da:69:16:
3b:e0:b2:f4:79:90:36:31:32:72:1b:ed:7f:4b:3f:
bc:ec:f1:1b:a5:5e:68:97:33:e2:67:97:5e:19:54:
1c:f1:99:41:2b:a4:b8:00:8f:fc:9a:49:27:b1:33:
86:8e:4a:29:58:f3:95:27:af:dc:a2:f4:22:cd:64:
03:7b:70:3a:e1:80:c4:ad:db:42:ea:5a:ee:c4:52:
19:ff:2c:88:d0:2a:e1:c8:e6:6d:ae:6a:a5:5b:93:
ae:d3:57:ba:12:01:2e:45:8f:da:bf:7e:94:2d:b1:
ae:89:d5:68:35:d1:03:d8:90:59:8f:65:cf:c5:ac:
04:fd:25:fd:06:26:3f:36:97:b2:63:30:7c:40:90:
62:55:1a:56:ba:8b:f7:a1:68:03:de:60:ec:05:69:
17:17:e0:a5:01:10:2d:aa:a3:77:91:5a:fc:a8:09:
28:19:51:05:f4:a4:eb:e4:f6:ae:d7:c9:34:d2:30:
1e:76:3f:10:42:e4:7b:02:ac:07:53:e7:f5:bf:48:
8a:85:42:4f:e2:27:f7:8c:df:77:92:8b:52:e8:25:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:D3:47:90:4E:0F:B8:49:4D:27:49:B4:FC:DA:FF:6D:AC:31:C6
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/SobTR5BOD7hJTSdJtPza_22sMcY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
103.73.244.0-103.73.251.255
103.203.100.0/22
103.249.12.0/22
103.249.192.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8d:ae:99:51:8b:4d:ba:5d:fb:3f:31:6d:ef:57:c4:cd:03:
60:6d:76:2e:c2:51:31:9b:0c:f7:86:34:b3:28:03:45:f8:93:
60:67:f1:df:b8:b8:ce:d5:f4:75:7d:1d:5c:c8:36:cf:9a:16:
ee:b9:e4:39:75:ef:f2:88:c6:6f:7d:5a:1a:4f:70:5a:c4:28:
89:0f:96:17:9a:c5:12:cd:fa:bd:4d:a5:37:23:d6:6b:00:8a:
e9:bc:e5:ff:91:71:65:74:2e:85:5e:fc:d1:6a:e6:7b:90:a6:
e6:d5:6f:20:1b:c7:89:99:8c:c4:20:5e:0a:b9:3e:39:6f:85:
53:a8:8c:fe:8f:8a:fa:23:e6:aa:87:8e:d9:3f:f4:16:c3:74:
4c:b0:30:2a:42:13:d2:b0:dc:56:11:38:a2:72:b5:1b:41:e3:
7b:50:19:d3:cf:51:e7:59:fa:70:ee:f0:ab:b2:f2:8c:32:62:
a9:47:6f:77:60:e0:32:ee:17:85:e0:dd:3b:f2:09:63:ea:1a:
c8:eb:d6:ed:5b:3b:f2:a6:40:c9:9a:c8:64:2a:19:63:8b:7f:
ba:83:86:97:4b:6e:dd:38:01:6c:b7:e1:51:04:d7:9a:57:77:
43:f4:32:ca:02:a0:76:1c:a5:93:1f:d1:6b:c5:a0:b5:92:2b:
8d:ac:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 12:45:27 2023 by rpki-client on console-fra.rpki-client.org