Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/wb_gMm3OuZ532Zao9bSF-gcM-yw.roa
File: wb_gMm3OuZ532Zao9bSF-gcM-yw.roa (raw, json)
Hash identifier: 3DWuXRY6T7GSpUIkTa17Gl+jSiZzfgLNMcJGkI1QLMY=
Subject key identifier: C1:BF:E0:32:6D:CE:B9:9E:77:D9:96:A8:F5:B4:85:FA:07:0C:FB:2C
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 06D1
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/wb_gMm3OuZ532Zao9bSF-gcM-yw.roa
Signing time: Tue 04 Jul 2023 06:56:27 +0000
ROA not before: Tue 04 Jul 2023 06:56:27 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 149628
IP address blocks: 45.116.96.0/22 maxlen: 22
103.23.164.0/22 maxlen: 22
103.56.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 May 2024 02:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Jul 4 06:56:27 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C1BFE0326DCEB99E77D996A8F5B485FA070CFB2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:a8:5a:30:a0:89:44:2a:13:16:4b:a4:c4:
1a:c4:79:5d:a2:70:f9:92:a9:55:c3:08:34:e8:b8:
74:0d:84:8c:a4:41:b6:5e:46:80:a0:0d:81:e7:17:
8e:1b:e0:9f:20:58:0d:27:c8:61:b0:2a:4d:3a:ef:
1f:c6:7b:15:a5:f8:de:99:c8:0b:53:87:d4:f6:ea:
8b:01:ba:c8:b2:0d:3b:8c:eb:93:a6:23:58:98:37:
f8:24:77:c4:3f:45:18:e9:6f:94:1a:f6:18:2c:8e:
d9:c3:bb:fa:73:e5:5e:9d:33:d5:37:f6:79:b1:b4:
62:75:60:50:4a:10:71:5d:ea:42:75:9a:02:28:a8:
45:8a:1c:49:e2:83:aa:26:bd:0d:b6:3e:a7:ed:b4:
7b:d4:5c:5a:c2:e2:df:62:9b:ae:9a:15:bd:24:c2:
ab:d2:c5:ca:02:72:68:f0:4d:53:a7:9f:24:02:fb:
19:06:95:72:ee:f7:14:80:07:55:48:2f:a1:a8:76:
29:68:63:53:df:91:a8:62:99:97:16:4a:3f:22:10:
2f:0b:27:b0:db:10:aa:65:b4:dd:34:07:94:5d:48:
16:ed:12:64:a4:a9:25:9b:49:b0:4b:e4:c4:19:fd:
53:62:c2:b4:01:09:05:64:02:c2:1f:3c:ab:21:be:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:E0:32:6D:CE:B9:9E:77:D9:96:A8:F5:B4:85:FA:07:0C:FB:2C
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/wb_gMm3OuZ532Zao9bSF-gcM-yw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.96.0/22
103.23.164.0/22
103.56.140.0/22
Signature Algorithm: sha256WithRSAEncryption
91:4a:6d:f0:99:f7:fc:d0:64:77:4b:db:78:de:2c:73:d9:2d:
bf:7a:7c:fe:a8:e4:37:3a:41:e3:64:34:e3:0f:25:9d:92:4a:
ce:59:f7:0a:a7:66:e9:07:21:9b:c6:86:bb:8b:b2:d1:ad:7c:
4b:59:aa:ae:83:14:37:76:34:0d:2f:96:86:94:e3:bd:ed:16:
f0:5b:c7:40:92:7b:7f:1c:d9:61:d6:ca:e1:41:cd:fb:0a:48:
16:aa:f3:6d:75:e1:9c:8b:4c:44:95:1b:23:4a:e2:2d:0b:82:
2e:68:01:e3:38:2c:e6:bc:2b:ef:b6:1b:1e:e7:e5:6a:2f:9f:
bb:ea:e7:6c:66:19:e3:d3:80:40:b0:7a:bb:f8:82:8c:be:e7:
1c:8b:46:5c:64:b9:da:04:ad:69:35:9a:a9:91:66:7c:e4:42:
9a:c3:88:c5:50:5f:1c:3b:e1:44:70:52:d4:f0:12:6e:1a:72:
2c:65:42:35:8f:0a:e2:04:f0:9a:00:53:72:59:6a:cc:2c:2f:
18:01:41:79:39:ce:c6:0f:2e:ef:33:5d:02:2d:77:02:76:2f:
84:3a:80:f0:bd:cc:68:65:e6:d7:6b:66:42:7f:71:15:64:3f:
d8:1b:16:f6:1b:2d:f1:79:06:c8:69:70:9c:e1:33:c8:87:3f:
6e:dd:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:54:56 2024 by rpki-client on console-fra.rpki-client.org