Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/kRw7c3kYfm-a9JUnPwBwW-nMDoM.roa
File: kRw7c3kYfm-a9JUnPwBwW-nMDoM.roa (raw, json)
Hash identifier: fno3ihZ9gsWyAzFtofhEby8dg2kvPYCQ5i5ELa88+7Y=
Subject key identifier: 91:1C:3B:73:79:18:7E:6F:9A:F4:95:27:3F:00:70:5B:E9:CC:0E:83
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 10E8
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/kRw7c3kYfm-a9JUnPwBwW-nMDoM.roa
Signing time: Tue 24 Sep 2024 00:17:59 +0000
ROA not before: Tue 24 Sep 2024 00:17:59 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 62387
IP address blocks: 103.83.180.0/22 maxlen: 24
103.235.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 08:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4328 (0x10e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Sep 24 00:17:59 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=911C3B7379187E6F9AF495273F00705BE9CC0E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:3a:44:46:fc:1c:81:eb:7e:b6:cb:3c:81:
71:3a:c2:c0:c4:69:ad:5b:df:3f:32:b2:79:9a:a5:
83:0e:d8:f2:24:69:5a:b4:78:60:01:4e:7c:05:69:
92:86:9b:10:0c:45:d5:f8:fa:d3:c6:da:55:2a:d9:
26:9f:b1:97:d4:09:4e:46:b6:5b:ec:6e:93:55:28:
c7:56:ce:a1:67:a8:df:7d:b5:11:6d:c0:d4:32:ab:
1a:71:0b:44:22:73:34:bb:d3:9e:4d:94:01:80:ad:
68:58:70:53:fc:d0:1a:f3:72:a3:c3:83:bf:7b:93:
b4:ff:77:98:41:aa:d8:1a:93:9e:c9:cd:d1:fe:4a:
4c:f8:af:9f:64:02:76:ab:3a:5b:1d:c8:27:48:b4:
3c:7f:86:33:09:e7:9b:e7:5d:83:e2:ee:12:46:0c:
60:b9:c0:d4:28:21:96:dc:4d:fa:a8:be:4b:1f:56:
c0:a4:c2:fb:6c:2a:e7:b6:9f:5d:76:a4:1e:24:4c:
e9:c6:1c:99:18:67:28:fb:7c:dc:6c:35:b1:c8:bb:
c5:33:2c:b7:ab:dd:c8:6c:bd:e8:84:1a:b4:d5:f3:
7e:d3:87:5e:05:c6:08:39:31:f1:94:69:8e:bb:56:
7a:a9:b1:d2:1a:be:74:00:d3:14:61:3a:42:bc:54:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1C:3B:73:79:18:7E:6F:9A:F4:95:27:3F:00:70:5B:E9:CC:0E:83
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/kRw7c3kYfm-a9JUnPwBwW-nMDoM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
103.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
69:43:15:67:29:9d:49:75:df:b6:22:9b:1a:7f:f6:9a:5a:cb:
df:91:c6:0c:94:61:0e:f0:00:3a:e0:ec:eb:57:95:e4:50:ec:
51:8c:b7:7e:09:78:65:10:c3:c4:8a:31:27:f9:b4:90:6e:fb:
47:11:f9:c8:36:f8:35:73:f4:f9:d0:b3:20:3c:a8:2c:e5:d1:
13:78:63:6a:47:ad:ab:51:28:f7:02:b0:c4:83:c9:26:ad:38:
8a:38:e6:31:10:56:14:f3:2b:54:9b:31:ff:f0:d4:a6:4d:c6:
41:bc:28:d8:f1:e5:95:20:01:69:62:ee:c9:34:76:02:3f:36:
a7:b3:0e:e0:33:9d:3f:51:d1:1a:46:94:c6:40:8e:65:b1:d6:
73:7c:47:fe:6c:1d:03:d2:55:48:f7:ab:bf:28:ed:e8:93:39:
04:25:9d:ba:0a:ea:6f:fe:7f:05:bb:86:1a:d8:c4:c9:db:78:
e7:0f:b2:ff:e0:d3:e8:69:06:5f:80:18:5b:d3:e9:a1:f1:b1:
43:ac:9d:d9:1e:93:99:89:88:4f:20:33:dc:05:f0:19:11:1c:
de:4e:99:35:5d:a9:bd:55:2a:d9:a5:83:67:5d:d2:d0:8f:33:
aa:d4:97:e4:4b:ae:50:2f:8c:ab:9c:99:22:db:75:13:b5:a0:
0d:40:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 10:09:08 2024 by rpki-client on console-fra.rpki-client.org