Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/443GJCjnTAdJ7DAVRAN7Y2gqq_0.roa
File: 443GJCjnTAdJ7DAVRAN7Y2gqq_0.roa (raw, json)
Hash identifier: Pl/R03ErzZkzpo/eoGFGDcVieXZ5mumuHf8sRPzWFxY=
Subject key identifier: E3:8D:C6:24:28:E7:4C:07:49:EC:30:15:44:03:7B:63:68:2A:AB:FD
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 08EC
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/443GJCjnTAdJ7DAVRAN7Y2gqq_0.roa
Signing time: Mon 28 Aug 2023 01:36:39 +0000
ROA not before: Mon 28 Aug 2023 01:36:39 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 28 01:36:39 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E38DC62428E74C0749EC301544037B63682AABFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:ce:4c:e7:cc:5e:a8:49:54:e5:b6:8e:9c:
34:46:d9:d0:33:a7:17:d2:26:80:22:18:c2:ef:83:
64:d4:2b:c6:46:2f:6c:34:be:70:2d:c8:a0:66:96:
4d:ad:7c:8c:87:22:e0:dd:fd:00:0a:6d:7a:e9:5f:
8e:1e:1f:55:f2:ea:16:c8:ec:19:1d:ea:13:f1:aa:
bb:2e:e3:00:95:24:9f:e3:50:16:90:ca:fb:78:5a:
d8:30:96:25:80:66:d3:22:aa:86:bc:5b:b4:06:ff:
35:fa:52:b0:e8:ea:fa:39:c2:c6:05:26:12:ee:ca:
e1:9b:26:67:08:dd:8c:99:dd:0f:f3:0a:1b:32:f3:
b8:75:08:61:ab:e6:81:9c:a1:17:5e:df:df:c7:f2:
9d:e1:8e:65:c7:a7:d7:73:25:e5:81:12:d5:9e:23:
8b:79:db:43:22:d4:59:ca:1a:18:43:a2:fb:a2:87:
20:ae:14:5f:82:1d:90:a6:d9:2c:1a:0a:c5:b7:6c:
cd:39:42:36:92:d2:d1:4e:01:5f:3a:1d:e5:9e:3e:
d9:2b:81:0a:88:cb:1b:3d:8e:c5:29:23:cf:ae:fd:
68:d9:f8:1d:7d:6c:1d:fd:5a:b4:90:38:a8:d3:93:
7e:9a:9a:85:57:28:66:01:61:82:9d:fb:00:20:74:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:C6:24:28:E7:4C:07:49:EC:30:15:44:03:7B:63:68:2A:AB:FD
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/443GJCjnTAdJ7DAVRAN7Y2gqq_0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:65:42:d4:73:24:e5:fa:24:e8:92:cd:7a:c1:68:e3:e7:6d:
0f:9a:76:14:c9:ef:88:99:74:f3:3c:b2:eb:66:e8:de:2d:72:
d6:89:b8:c8:7c:ad:2b:20:c7:e6:ef:3f:df:e3:7f:a0:74:bb:
f5:9b:13:76:b0:1e:11:6c:6e:c5:6c:a1:6e:5f:fd:82:7c:b3:
38:40:67:e3:c2:4a:ff:8f:a8:11:e3:ed:a2:19:1e:6f:a9:c6:
94:fd:02:fe:7d:df:7e:6b:b0:c1:91:d3:3b:fc:d3:b0:57:f2:
7b:a1:f2:1f:5d:0e:db:b6:e0:95:d7:9b:14:6e:08:9f:f6:fd:
cc:e1:ee:49:03:89:e4:98:1b:d9:26:61:d9:2c:2a:b6:53:77:
bd:f5:0b:8a:45:09:f1:f5:db:c0:ad:15:d2:7a:58:67:7b:0e:
9e:3d:e9:77:6c:c4:e8:f5:c4:e2:3e:d5:38:71:95:84:ae:30:
ec:3c:35:ac:11:fc:6d:9e:8a:9c:4d:83:f2:f0:f2:be:8d:79:
a5:6f:63:1f:d8:dc:31:18:5f:5f:cb:05:01:cb:8a:e6:5a:bd:
c3:d8:ad:0a:0d:2f:cd:d3:59:12:12:91:f2:80:16:7e:81:a5:
a6:b6:85:e3:7f:0f:a1:84:e5:53:96:64:28:fd:0f:a5:4f:ab:
19:df:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 02:26:53 2023 by rpki-client on console-fra.rpki-client.org