Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/UOB2ohR1XsZ9nQNMiWNqMNzLFLE.roa
File: UOB2ohR1XsZ9nQNMiWNqMNzLFLE.roa (raw, json)
Hash identifier: oe26RlnTZuPckNO+cxVDMdTdvvFgga7ZSINaKAWqRRE=
Subject key identifier: 50:E0:76:A2:14:75:5E:C6:7D:9D:03:4C:89:63:6A:30:DC:CB:14:B1
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 12B8
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/UOB2ohR1XsZ9nQNMiWNqMNzLFLE.roa
Signing time: Thu 31 Aug 2023 12:06:44 +0000
ROA not before: Thu 31 Aug 2023 12:06:44 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 58859
IP address blocks: 103.73.244.0/22 maxlen: 24
103.73.248.0/22 maxlen: 24
103.249.12.0/22 maxlen: 24
103.249.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4792 (0x12b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Aug 31 12:06:44 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=50E076A214755EC67D9D034C89636A30DCCB14B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:3a:76:6d:ff:72:eb:67:d8:3b:69:a4:c0:
ed:c0:cd:e4:e3:ad:36:7b:21:ac:9a:23:43:ed:45:
19:df:5a:30:f7:f8:0d:02:cd:df:62:0a:08:52:59:
5e:20:62:d0:8f:16:b6:2d:fb:c5:84:06:d0:e9:09:
86:67:5b:0a:b1:45:f4:06:f4:3a:c3:a9:23:96:13:
eb:9f:ff:f1:2c:7c:9d:84:25:fb:95:c3:93:5d:c7:
2e:e6:fd:2f:a6:76:bf:d8:ed:b1:b5:6f:f4:f1:20:
e1:f7:70:62:97:87:0b:b7:43:29:32:2b:30:9a:5a:
8c:6a:44:cd:87:be:37:12:4b:2a:3f:1d:fe:2e:0f:
42:f4:e5:e7:61:4d:8b:92:76:e2:c4:2b:ff:0d:a1:
cb:99:51:d0:3b:f2:13:91:7e:7e:5e:aa:7d:d0:ab:
ad:21:54:91:49:af:6c:72:c1:12:8e:9b:33:b4:1b:
2a:33:73:3d:99:72:ee:4d:8f:03:00:41:04:25:fe:
5b:ac:8b:d3:9e:68:3f:88:d3:28:6b:92:03:4d:36:
be:9b:3f:0c:e4:c1:33:6d:5e:cc:30:37:2e:f1:1e:
03:b3:c7:30:b8:d3:d9:7c:8b:4e:f3:d6:03:7c:b0:
47:5d:9d:c3:dc:8f:fe:b1:52:6a:b5:2f:9f:87:6c:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:76:A2:14:75:5E:C6:7D:9D:03:4C:89:63:6A:30:DC:CB:14:B1
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/UOB2ohR1XsZ9nQNMiWNqMNzLFLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.244.0-103.73.251.255
103.249.12.0/22
103.249.192.0/22
Signature Algorithm: sha256WithRSAEncryption
90:89:e3:41:35:d1:54:12:61:b8:2c:33:3f:e7:71:c5:28:46:
8d:5e:81:e3:eb:80:c6:17:52:f4:76:99:35:32:0d:9c:fc:d5:
f8:59:b2:7e:5d:4e:98:01:b1:e0:e0:52:2f:fe:7a:ec:87:20:
4a:fa:91:be:f4:54:17:0e:70:da:62:b7:7d:ee:aa:27:e6:d9:
a7:e0:45:9b:62:27:3e:75:32:95:95:51:84:5b:53:48:ac:f4:
d5:b5:9d:0a:2f:60:76:03:ca:72:3b:3e:fd:fe:0b:85:45:ff:
8b:eb:3a:2d:ef:93:c0:76:78:df:3b:c7:9b:30:5a:62:5e:ae:
0d:b1:b1:39:28:7c:03:61:e8:25:ec:1a:95:40:7b:eb:1b:ca:
e2:3d:91:0e:d3:86:28:0c:54:b4:b8:6c:c5:44:3b:dc:ae:48:
62:fa:d1:21:89:26:7f:77:bd:ec:85:ae:80:31:54:be:96:b0:
2f:f2:c5:27:b3:bd:2f:08:de:f1:43:ca:1b:b7:79:39:cf:97:
84:bb:3f:a9:0e:bd:91:bd:14:a2:b0:7c:ac:07:74:0b:fa:68:
33:a5:0c:60:88:8a:c7:ee:8d:4d:d8:7f:2c:c3:b1:7e:84:bb:
47:ab:83:84:db:60:d6:63:4e:e3:9c:47:56:29:30:4f:59:75:
82:32:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 04:11:58 2023 by rpki-client on console-ams.rpki-client.org