Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/_u671lIDIbnEztX4s_HJPyPAROo.roa
File: _u671lIDIbnEztX4s_HJPyPAROo.roa (raw, json)
Hash identifier: tEDbtlXfGzWWgkha1pQTvQOOcQvsL4VFOplfF9oWO24=
Subject key identifier: FE:EE:BB:D6:52:03:21:B9:C4:CE:D5:F8:B3:F1:C9:3F:23:C0:44:EA
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 12BA
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/_u671lIDIbnEztX4s_HJPyPAROo.roa
Signing time: Thu 31 Aug 2023 12:07:49 +0000
ROA not before: Thu 31 Aug 2023 12:07:49 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 996
IP address blocks: 43.254.128.0/22 maxlen: 24
103.203.100.0/22 maxlen: 24
103.236.232.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4794 (0x12ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Aug 31 12:07:49 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=FEEEBBD6520321B9C4CED5F8B3F1C93F23C044EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:b2:06:33:cf:58:a6:33:e2:c6:7c:a5:4a:
73:08:be:44:54:14:92:24:b2:cb:f5:83:71:2b:f4:
4a:27:4d:29:83:26:c7:b5:7e:7b:90:ab:72:de:39:
c0:22:77:b0:cf:2c:f4:0f:7c:25:5f:bb:7b:9f:6e:
8b:f8:18:96:61:21:4b:6b:8f:ee:c4:f6:7c:14:b6:
88:02:71:05:3c:72:cf:aa:95:b4:ae:d2:f5:10:0d:
ca:61:7a:ad:35:2c:b9:78:30:f5:3f:b1:e6:37:fa:
67:bd:d5:b3:16:1d:a9:dc:fe:92:e9:57:7f:38:a6:
b3:33:b8:2c:b6:0e:9d:de:17:d9:35:e6:95:7a:e6:
a7:06:00:a3:a8:53:e0:87:9f:bd:8b:20:0d:86:07:
12:b1:b6:d0:70:b5:2a:fe:d8:87:59:00:a2:12:59:
9f:94:86:65:fc:a1:3c:0b:2b:cf:b2:09:d8:b5:e1:
79:e5:31:2b:94:a4:24:d8:1d:a0:fc:40:2e:cc:0f:
08:47:4e:68:8f:f5:14:d2:44:f7:5a:a9:1b:1a:fa:
71:85:f3:89:57:e8:b9:cb:a4:2c:06:4c:9c:e8:aa:
bd:92:c5:c8:83:5b:31:60:d2:d8:a5:f1:d5:7a:06:
bc:6a:1f:73:49:da:aa:67:e3:c9:a0:59:24:39:ce:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:BB:D6:52:03:21:B9:C4:CE:D5:F8:B3:F1:C9:3F:23:C0:44:EA
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/_u671lIDIbnEztX4s_HJPyPAROo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
103.203.100.0/22
103.236.232.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:e8:2c:0b:37:cf:4c:cb:0c:de:0f:97:e2:61:8c:b4:f8:31:
86:2c:48:23:00:68:31:bb:a4:f7:f6:14:33:58:9c:1a:3d:a9:
cb:cc:e6:74:e8:6d:f9:c7:43:f0:fd:4f:af:83:fc:6d:3c:2c:
fb:63:c4:fe:90:75:75:93:1f:75:e3:18:6b:65:e6:15:9d:8d:
ef:ae:e0:14:19:b9:ba:c3:00:61:c3:56:b6:49:bf:3d:df:87:
e6:61:d0:4c:9f:ac:b0:3b:7b:67:22:29:ee:6f:01:a9:c3:e7:
c6:50:d4:46:76:52:55:9b:ed:88:27:88:e0:18:6a:75:5f:55:
53:e1:2c:02:ca:82:05:30:85:4f:00:46:83:50:c2:5b:9a:38:
de:91:c1:c3:6e:2e:f3:fb:4d:96:8d:ca:8a:2c:05:81:35:da:
bf:d7:f0:1b:a6:27:ce:76:4d:9d:a8:f1:46:32:0c:48:9c:b4:
be:23:7d:98:40:0b:69:ac:fa:b9:c8:9e:b9:ba:54:be:b8:fe:
5b:8a:66:11:f0:e4:e3:5e:71:66:fc:74:79:c3:d9:a3:b2:8b:
9b:48:03:a7:a1:38:a1:83:da:e5:bf:f5:15:69:6e:fe:82:78:
a9:ed:62:cc:21:e0:71:64:0c:f8:f2:9b:dc:6a:32:3b:9c:80:
2f:f6:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 04:30:15 2023 by rpki-client on console-fra.rpki-client.org