Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/um4HEXGLuB62V5eQgjzuuqQORTI.roa
File: um4HEXGLuB62V5eQgjzuuqQORTI.roa (raw, json)
Hash identifier: exJt7b4cSBFtahM79H1nFShSgQK4jgOgON9H8UQ+9kg=
Subject key identifier: BA:6E:07:11:71:8B:B8:1E:B6:57:97:90:82:3C:EE:BA:A4:0E:45:32
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 06E4
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/um4HEXGLuB62V5eQgjzuuqQORTI.roa
Signing time: Thu 09 Nov 2023 05:45:32 +0000
ROA not before: Thu 09 Nov 2023 05:45:32 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 63701
IP address blocks: 45.116.208.0/22 maxlen: 24
45.123.128.0/22 maxlen: 24
103.57.12.0/22 maxlen: 24
103.63.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Nov 9 05:45:32 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=BA6E0711718BB81EB6579790823CEEBAA40E4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:95:fc:40:b4:22:61:2e:41:91:f5:f3:5e:
d8:d8:08:22:51:d5:9a:bf:80:50:bd:f9:82:cf:b3:
48:b3:ab:79:44:3a:16:9e:8d:d9:6a:34:38:f5:aa:
62:33:d5:64:a7:be:b5:ce:b5:30:2c:37:57:7c:94:
40:51:d3:79:02:b8:25:c7:f3:e0:8b:3a:66:12:a8:
44:ee:13:51:4a:a9:60:a3:0c:38:d6:c5:6c:1b:e8:
d3:0a:2c:51:1f:df:41:ea:e5:a6:0f:30:9c:23:b8:
17:3c:a6:fe:bb:78:cf:6c:b2:ac:97:54:e5:0b:89:
01:29:d3:3d:ed:e1:af:41:21:11:c3:14:81:9c:66:
40:d4:5f:41:ae:45:9e:84:32:cf:fa:b9:47:8e:91:
df:66:6d:32:d3:e9:a5:4d:0a:34:cb:fa:8b:a8:f1:
f4:d3:7d:21:01:d1:f9:58:13:40:8b:3a:06:c8:5e:
ba:80:a1:64:df:c9:9d:9f:9e:48:2b:66:1a:d5:1a:
7d:ae:37:fa:de:a5:53:05:5d:87:46:70:97:1c:ae:
d2:f9:51:89:83:82:7e:74:a0:c4:6d:27:99:e3:f0:
72:9f:a1:08:85:f3:a2:ba:51:72:87:dc:04:78:0d:
02:e7:79:a0:0d:05:a3:1f:cc:c3:db:aa:cf:0e:09:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:07:11:71:8B:B8:1E:B6:57:97:90:82:3C:EE:BA:A4:0E:45:32
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/um4HEXGLuB62V5eQgjzuuqQORTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.208.0/22
45.123.128.0/22
103.57.12.0/22
103.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c7:bc:10:0a:6d:e0:22:50:22:e0:be:ef:42:07:b6:c6:26:
82:e2:5e:69:0f:e4:3a:4f:e4:eb:13:09:ec:46:d3:5d:43:11:
6c:74:56:d0:b5:20:e4:e9:55:44:56:fe:23:e8:4c:98:30:51:
8a:97:75:d0:7f:2c:4d:f3:f0:75:26:47:23:40:ab:27:6f:74:
a7:82:88:bd:1d:e4:bc:ed:89:f6:3c:62:6d:05:24:2f:da:2b:
fa:0d:51:64:07:d2:cb:7b:38:e7:4f:a5:f7:68:0b:cf:1c:ae:
28:76:78:0e:3e:09:22:ec:31:d8:06:5f:74:75:ce:b5:91:0e:
11:9b:5c:37:95:f3:e8:16:95:4b:5c:37:02:2b:a9:4f:67:27:
1d:65:12:12:e6:eb:b8:3f:64:88:c5:7b:05:60:a8:60:79:4e:
3d:dd:49:27:8c:55:65:dc:0c:74:ba:c8:3d:f2:0b:70:6e:45:
57:9e:82:9f:6c:17:85:98:c8:79:bc:9a:6c:6c:b2:4c:11:5d:
4d:72:ae:36:c6:4a:35:44:3f:ca:6b:1e:ac:c1:62:9a:3c:11:
8d:fd:a1:26:b9:6d:74:ee:7d:f1:c5:5a:7d:c1:28:ff:61:c9:
17:c0:7d:3b:13:9c:42:e6:80:e4:d3:fa:9f:6f:d0:82:4c:17:
19:85:0f:0b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz
RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yMzExMDkw
NTQ1MzJaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKEJBNkUwNzExNzE4QkI4
MUVCNjU3OTc5MDgyM0NFRUJBQTQwRTQ1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp+5X8QLQiYS5BkfXzXtjYCCJR1Zq/gFC9+YLPs0izq3lEOhae
jdlqNDj1qmIz1WSnvrXOtTAsN1d8lEBR03kCuCXH8+CLOmYSqETuE1FKqWCjDDjW
xWwb6NMKLFEf30Hq5aYPMJwjuBc8pv67eM9ssqyXVOULiQEp0z3t4a9BIRHDFIGc
ZkDUX0GuRZ6EMs/6uUeOkd9mbTLT6aVNCjTL+ouo8fTTfSEB0flYE0CLOgbIXrqA
oWTfyZ2fnkgrZhrVGn2uN/repVMFXYdGcJccrtL5UYmDgn50oMRtJ5nj8HKfoQiF
86K6UXKH3AR4DQLneaANBaMfzMPbqs8OCXc1AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUum4HEXGLuB62V5eQgjzuuqQORTIwHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG
2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx
MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvdW00SEVYR0x1QjYy
VjVlUWdqenV1cVFPUlRJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAi100AMEAi17gAMEAmc5DAMEAmc/9DANBgkqhkiG9w0BAQsFAAOCAQEAg8e8
EApt4CJQIuC+70IHtsYmguJeaQ/kOk/k6xMJ7EbTXUMRbHRW0LUg5OlVRFb+I+hM
mDBRipd10H8sTfPwdSZHI0CrJ290p4KIvR3kvO2J9jxibQUkL9or+g1RZAfSy3s4
50+l92gLzxyuKHZ4Dj4JIuwx2AZfdHXOtZEOEZtcN5Xz6BaVS1w3AiupT2cnHWUS
EubruD9kiMV7BWCoYHlOPd1JJ4xVZdwMdLrIPfILcG5FV56Cn2wXhZjIebyabGyy
TBFdTXKuNsZKNUQ/ymserMFimjwRjf2hJrltdO598cVafcEo/2HJF8B9OxOcQuaA
5NP6n2/QgkwXGYUPCw==
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:46:28 2024 by rpki-client on console-fra.rpki-client.org