Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/xIxXj-I9C1jz3JUipuwJfF1GaN8.roa
File: xIxXj-I9C1jz3JUipuwJfF1GaN8.roa (raw, json)
Hash identifier: Eq+alPP7L4kGH3iI0K5fXXMKGNGpX2RUKkszIBh+kck=
Subject key identifier: C4:8C:57:8F:E2:3D:0B:58:F3:DC:95:22:A6:EC:09:7C:5D:46:68:DF
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 1144
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/xIxXj-I9C1jz3JUipuwJfF1GaN8.roa
Signing time: Tue 20 Jun 2023 03:32:44 +0000
ROA not before: Tue 20 Jun 2023 03:32:44 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 996
IP address blocks: 43.254.128.0/22 maxlen: 24
103.203.100.0/22 maxlen: 24
103.236.232.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4420 (0x1144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jun 20 03:32:44 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C48C578FE23D0B58F3DC9522A6EC097C5D4668DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:e6:c7:bd:e8:d1:5f:0d:10:42:1d:38:6d:
ec:0b:18:e2:5a:bb:47:da:74:11:80:0d:95:c3:f2:
96:35:70:eb:83:d0:07:3a:ee:49:09:45:bb:41:d5:
e0:de:47:a6:25:72:56:55:30:56:c2:6f:3c:03:ca:
af:e0:58:84:f0:b1:da:63:16:f8:1d:74:8e:99:e7:
96:0d:68:c2:2d:3d:b5:95:a2:56:3a:a8:ad:f9:bd:
67:81:95:d3:d8:e1:0d:57:e5:d8:2e:c7:12:ee:2a:
b7:4b:ba:cb:26:de:e7:c2:26:9e:73:e5:12:cb:ed:
24:7d:37:e3:87:08:84:76:2c:e3:27:cf:c1:d7:f5:
13:d3:44:38:d3:f9:43:c1:24:5d:64:33:4a:da:91:
13:0d:4a:b9:3f:0c:0d:cb:5f:3b:31:21:24:ad:3e:
7c:eb:20:c0:1b:b9:ae:0b:90:cb:54:23:b2:da:9f:
16:69:6d:c0:a8:f0:b1:85:13:4d:8b:44:a2:0c:94:
94:f5:f2:da:19:82:81:46:63:cf:3d:d7:09:e3:bc:
57:e4:67:af:5d:af:ef:ff:3e:4c:84:67:91:95:7b:
df:09:40:37:3d:8e:c5:7c:fd:46:45:a2:84:11:f3:
32:60:e0:2a:ca:34:4f:c1:88:b4:f6:f2:a7:8c:25:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:57:8F:E2:3D:0B:58:F3:DC:95:22:A6:EC:09:7C:5D:46:68:DF
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/xIxXj-I9C1jz3JUipuwJfF1GaN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
103.203.100.0/22
103.236.232.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
65:17:e7:da:7c:2c:f0:33:25:a1:74:8a:ef:d5:5d:33:7e:86:
82:1f:7d:08:83:94:90:ac:ea:33:23:29:f0:c1:b3:f0:ae:68:
d0:99:79:ea:df:9f:53:c0:4b:8f:60:29:32:92:d3:d4:d9:e1:
94:08:26:92:7f:f5:b2:f8:f6:dd:62:86:b8:58:3c:d8:00:2c:
b6:02:9b:31:08:42:39:41:17:04:75:3f:32:b3:f7:4b:eb:41:
07:74:d4:57:33:5f:49:88:b3:f4:d6:b7:5e:31:44:3e:63:eb:
d3:06:4e:4c:00:10:61:8e:39:76:b3:57:3c:c0:68:09:ef:72:
e2:0a:75:ad:e4:85:4a:35:29:11:60:35:43:72:17:49:7f:12:
27:18:40:b8:fb:2f:01:c0:e4:de:32:a1:2a:72:58:9a:cd:c1:
64:f8:29:2b:1f:16:23:ff:be:e5:02:4d:bd:9a:b2:bc:a3:77:
4e:af:2a:d6:c3:9b:8e:2b:b0:49:3f:66:b8:68:18:1d:ba:8b:
53:62:ae:b8:74:fe:86:8f:3c:a1:00:2c:6d:3c:c6:04:c2:04:
6f:8e:9d:6f:d8:ec:7c:c9:ff:96:4d:62:8c:6b:0c:5e:ef:ac:
40:c0:db:3c:44:8b:19:b3:58:af:2b:5e:c3:a1:18:ea:a1:e0:
0c:6c:78:0b
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICEUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4
M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yMzA2MjAw
MzMyNDRaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEM0OEM1NzhGRTIzRDBC
NThGM0RDOTUyMkE2RUMwOTdDNUQ0NjY4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyd+bHvejRXw0QQh04bewLGOJau0fadBGADZXD8pY1cOuD0Ac6
7kkJRbtB1eDeR6YlclZVMFbCbzwDyq/gWITwsdpjFvgddI6Z55YNaMItPbWVolY6
qK35vWeBldPY4Q1X5dguxxLuKrdLussm3ufCJp5z5RLL7SR9N+OHCIR2LOMnz8HX
9RPTRDjT+UPBJF1kM0rakRMNSrk/DA3LXzsxISStPnzrIMAbua4LkMtUI7LanxZp
bcCo8LGFE02LRKIMlJT18toZgoFGY8891wnjvFfkZ69dr+//PkyEZ5GVe98JQDc9
jsV8/UZFooQR8zJg4CrKNE/BiLT28qeMJTA7AgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUxIxXj+I9C1jz3JUipuwJfF1GaN8wHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt
eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL3hJeFhqLUk5QzFqejNK
VWlwdXdKZkYxR2FOOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD
BAIr/oADBAJny2QDBAJn7OgDBAJzH0QwDQYJKoZIhvcNAQELBQADggEBAGUX59p8
LPAzJaF0iu/VXTN+hoIffQiDlJCs6jMjKfDBs/CuaNCZeerfn1PAS49gKTKS09TZ
4ZQIJpJ/9bL49t1ihrhYPNgALLYCmzEIQjlBFwR1PzKz90vrQQd01FczX0mIs/TW
t14xRD5j69MGTkwAEGGOOXazVzzAaAnvcuIKda3khUo1KRFgNUNyF0l/EicYQLj7
LwHA5N4yoSpyWJrNwWT4KSsfFiP/vuUCTb2asryjd06vKtbDm44rsEk/ZrhoGB26
i1Nirrh0/oaPPKEALG08xgTCBG+OnW/Y7HzJ/5ZNYoxrDF7vrEDA2zxEixmzWK8r
XsOhGOqh4AxseAs=
-----END CERTIFICATE-----
Generated at Wed Aug 30 08:51:39 2023 by rpki-client on console-ams.rpki-client.org