Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/6PpekPmNVWwhTWbgVwwj1TmGrEE.roa
File: 6PpekPmNVWwhTWbgVwwj1TmGrEE.roa (raw, json)
Hash identifier: npUBtrsCx50H7NdiUPK1HEzWRM3xQrKfs21r4f+GKOo=
Subject key identifier: E8:FA:5E:90:F9:8D:55:6C:21:4D:66:E0:57:0C:23:D5:39:86:AC:41
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 0B
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/6PpekPmNVWwhTWbgVwwj1TmGrEE.roa
Signing time: Thu 24 Nov 2022 05:41:37 +0000
ROA not before: Thu 24 Nov 2022 05:41:37 +0000
ROA not after: Thu 23 Nov 2023 05:43:14 +0000
asID: 63701
IP address blocks: 45.116.208.0/22 maxlen: 24
45.123.128.0/22 maxlen: 24
103.57.12.0/22 maxlen: 24
103.63.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Nov 24 05:41:37 2022 GMT
Not After : Nov 23 05:43:14 2023 GMT
Subject: CN=E8FA5E90F98D556C214D66E0570C23D53986AC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:74:94:ce:82:64:51:1e:7c:f8:59:cd:64:
35:4d:38:40:d1:6f:83:37:c3:4a:e1:2e:bd:28:c0:
64:99:b5:e4:a9:1a:92:0f:eb:8e:32:2a:60:67:63:
9e:2d:f3:b5:44:f5:70:5c:f9:52:03:fe:8b:30:ae:
fd:32:2e:e1:d6:46:1c:1f:ba:55:69:a1:51:36:af:
2a:3a:d3:0d:3a:b3:5a:54:ef:a2:0c:89:97:76:dd:
d1:2d:34:79:3e:20:4c:07:f8:26:76:4b:03:d9:96:
ab:e3:68:29:90:19:0d:cf:62:7a:cb:f1:a2:e3:11:
e8:b4:cc:4f:2c:c8:8d:f2:8a:83:12:b3:8a:13:f8:
10:38:2a:8f:9d:33:b6:23:9c:a0:52:dd:a2:e3:98:
9f:bd:0c:30:58:60:fd:6d:b4:eb:1c:46:69:97:99:
ab:d5:dd:03:05:e6:b4:0c:a0:39:b3:65:51:3c:21:
8c:66:d7:bf:d3:74:fc:de:8a:14:46:77:de:5e:68:
94:57:82:1b:5d:46:8c:bc:89:81:ef:1d:8e:9f:f8:
8c:13:61:0a:3f:fb:23:21:0b:8c:f9:f0:b6:af:c0:
03:31:2d:7c:c6:65:61:a6:6c:60:d6:9f:52:ec:80:
4b:2a:17:95:b3:f5:34:90:16:56:4c:98:da:36:0b:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:5E:90:F9:8D:55:6C:21:4D:66:E0:57:0C:23:D5:39:86:AC:41
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/6PpekPmNVWwhTWbgVwwj1TmGrEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.208.0/22
45.123.128.0/22
103.57.12.0/22
103.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
43:22:40:26:d1:9e:65:cc:fd:e7:42:71:1d:24:d3:d8:19:11:
a9:b4:47:11:6d:de:be:32:83:45:ed:06:db:d7:bc:d1:5e:a9:
8c:c8:1d:e4:5b:2b:d2:ba:23:c5:73:d7:d4:7b:b1:41:af:03:
d6:79:7e:9c:fe:3f:e9:59:77:f7:ff:87:7f:e5:91:37:56:30:
a3:8c:f4:86:13:49:5a:6c:c8:a2:ed:94:11:86:44:1e:bb:06:
64:82:a6:e4:de:40:b9:a2:47:71:7c:8a:39:94:65:60:85:a3:
ff:12:dd:05:a8:ea:70:52:1f:5f:72:f9:dd:67:be:1b:a4:8c:
4e:b6:67:09:ae:47:8f:3c:14:37:af:aa:a0:ed:f6:8d:cb:da:
28:cf:fe:56:52:8c:18:9c:98:23:31:22:97:ce:83:85:41:4a:
cf:32:7f:ef:d2:ee:aa:ec:1e:08:96:ed:ef:ec:1a:be:25:87:
15:d9:ea:87:14:c5:9e:5b:82:e3:ac:2c:db:c2:d2:ce:5f:60:
b6:15:1d:fd:09:e7:c4:39:7d:8a:61:29:15:20:0e:2a:89:3c:
d6:3f:cc:55:e0:c2:1c:08:ed:38:01:8d:65:28:c3:9e:ec:66:
f0:27:4c:95:b0:35:78:ba:33:f1:61:f3:80:e6:94:cf:26:bf:
03:a8:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 06:34:47 2023 by rpki-client on console-ams.rpki-client.org