Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jc1tF-t1bnhjr3FKS_kH6E04t6w.roa
File: Jc1tF-t1bnhjr3FKS_kH6E04t6w.roa (raw, json)
Hash identifier: fJKx5D6tpc3U01HuCP5c12qAeQxsHpP+GlD9Un+7Z9w=
Subject key identifier: 25:CD:6D:17:EB:75:6E:78:63:AF:71:4A:4B:F9:07:E8:4D:38:B7:AC
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0C4D
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jc1tF-t1bnhjr3FKS_kH6E04t6w.roa
Signing time: Wed 31 Jan 2024 14:30:36 +0000
ROA not before: Wed 31 Jan 2024 14:30:36 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 62387
IP address blocks: 103.83.180.0/22 maxlen: 24
103.235.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jan 31 14:30:36 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=25CD6D17EB756E7863AF714A4BF907E84D38B7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6a:8d:89:e0:20:b1:00:d5:ec:cc:06:41:64:
1d:c5:21:f0:1b:dc:cd:83:d0:ca:ac:f8:b8:77:83:
b5:b5:cc:1a:3e:3d:e7:61:dc:b8:9e:05:0f:b9:2d:
dc:9f:c9:f9:85:5c:13:dc:00:41:a6:3c:32:35:5c:
70:2f:12:b2:ee:15:6a:1b:c1:83:2a:ea:5d:89:55:
3b:7b:b7:46:ec:00:a7:75:99:25:97:75:d7:81:e8:
53:63:9b:d8:8c:a4:56:fe:58:25:4b:b8:ab:73:86:
0c:71:a8:b2:b2:23:37:a3:91:ab:f1:73:fb:05:04:
08:a3:33:10:ca:01:64:3a:5a:94:29:5b:6c:df:df:
4c:7c:8a:85:c7:ae:f2:6e:57:59:aa:3b:01:1e:42:
8d:45:37:d8:79:50:36:60:62:34:49:18:a6:fb:d6:
24:55:2c:50:8c:71:5d:88:47:fb:ee:22:b0:c5:47:
66:54:28:87:b6:f4:33:68:96:1b:e6:1c:07:63:49:
33:4c:72:1f:e4:f4:70:a3:96:39:94:f1:90:3f:bd:
95:a8:f7:9c:d4:39:b9:ca:56:55:73:0b:a1:b0:05:
bc:cb:d9:5c:73:f9:71:ab:1b:43:5e:3a:e3:4f:32:
f7:24:da:2b:b2:1c:57:d4:1e:d4:01:79:2b:b8:58:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:6D:17:EB:75:6E:78:63:AF:71:4A:4B:F9:07:E8:4D:38:B7:AC
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jc1tF-t1bnhjr3FKS_kH6E04t6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
103.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:97:73:07:f5:2d:e0:0f:4a:63:29:6a:3a:73:41:93:ec:ac:
d9:7c:d4:f6:46:e8:03:e1:18:68:1c:a2:ac:65:ba:b2:14:5e:
95:0f:df:77:82:fa:96:2c:bb:be:26:28:d6:66:ea:d6:86:68:
ba:41:a2:93:5c:ba:0b:f5:ac:b0:37:5f:96:e9:44:4b:6a:7b:
94:62:ea:82:3f:7b:3c:07:df:c9:80:9b:72:79:27:9c:23:77:
9d:b6:2f:a5:a8:15:43:c1:53:e5:07:88:15:10:9d:ea:90:67:
2c:16:da:b7:ce:bd:7e:82:e7:25:6d:7e:a5:84:f8:a1:f0:5e:
32:f1:da:24:6b:40:15:d7:3b:25:a5:5b:06:1e:cf:3f:9b:ef:
c9:48:ec:a6:fc:0a:c9:e5:81:6c:57:b0:b2:5b:aa:f5:b1:d5:
48:b9:45:72:21:64:f8:8c:a1:a9:54:e2:40:0d:40:fc:d0:ed:
fb:41:0f:41:1f:6c:16:bd:b9:d6:c8:2b:d5:b0:d2:dc:5a:3d:
c8:18:a7:ec:a1:a5:de:f3:99:83:d6:96:ed:96:ec:87:32:f6:
35:c3:b7:ff:02:a4:22:1e:8c:45:71:b1:4d:89:08:36:2b:be:
1a:9e:4f:66:37:48:10:e3:d0:6b:b3:8f:05:93:9b:a0:f4:cd:
fa:e3:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org