Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/4Cxk8SX6y1LVU1KZLh-38mZch5A.roa
File: 4Cxk8SX6y1LVU1KZLh-38mZch5A.roa (raw, json)
Hash identifier: MQw36hWnVZYKWDksWOGHZk0Uq05tKLwxaWK4Zwoc5+0=
Subject key identifier: E0:2C:64:F1:25:FA:CB:52:D5:53:52:99:2E:1F:B7:F2:66:5C:87:90
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 08DE
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/4Cxk8SX6y1LVU1KZLh-38mZch5A.roa
Signing time: Sat 26 Aug 2023 07:20:32 +0000
ROA not before: Sat 26 Aug 2023 07:20:32 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 140292
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 26 07:20:32 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E02C64F125FACB52D55352992E1FB7F2665C8790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:a6:bc:fc:11:c2:af:3f:93:40:ab:db:3b:
aa:20:61:b5:dd:3e:02:e0:52:b2:6b:49:ac:a0:38:
b3:83:40:3d:98:b3:3b:cd:f3:5b:cb:1a:a1:0a:5c:
f7:5e:7b:99:ee:13:15:4e:26:b7:8d:24:b4:b8:01:
18:1d:f2:d0:44:48:e0:a2:78:8d:68:fa:c5:e4:0e:
4a:14:d1:a9:87:26:43:db:28:8f:82:fd:8a:59:b7:
b8:63:2a:fb:31:54:88:c7:be:40:ab:05:aa:d1:07:
ed:5a:e1:22:95:39:e2:b0:e1:f9:80:e5:5e:8e:60:
32:51:80:c2:56:c7:ce:65:48:26:9a:1e:20:88:35:
e7:2b:00:b7:82:c8:b4:96:f5:3f:df:48:9c:95:a5:
70:79:bc:3f:fc:42:a1:71:70:fd:56:db:68:4a:e8:
a0:f0:db:ed:0c:a5:c3:86:f4:4c:79:72:8d:66:a2:
19:0a:1b:aa:50:57:a3:f1:c1:bf:89:24:2e:db:1e:
55:b7:2f:07:cc:7a:cf:cf:dd:58:19:d7:e2:b4:52:
d4:69:ef:fb:45:4f:6a:20:1e:47:80:cd:32:04:90:
f9:aa:93:36:77:4e:37:32:f7:dc:ee:1f:4d:b3:27:
97:36:20:18:b0:d0:03:f5:02:7e:71:42:28:e2:60:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:64:F1:25:FA:CB:52:D5:53:52:99:2E:1F:B7:F2:66:5C:87:90
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/4Cxk8SX6y1LVU1KZLh-38mZch5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7d:58:cf:e3:ca:e6:df:bb:2f:7a:c9:d6:41:d7:5e:42:e6:
65:8d:e6:23:e4:05:19:db:95:14:d2:ff:93:31:32:72:3b:6f:
9d:e5:9b:d5:f0:12:7e:e0:ed:18:92:93:bd:e4:19:b7:9b:de:
90:ce:92:cf:2d:49:a9:62:43:ae:fa:09:91:88:24:63:0f:c3:
95:e3:b9:45:a0:8d:36:5b:8c:14:83:33:f2:b5:16:c9:2a:30:
ef:73:75:bc:f0:eb:74:24:13:56:b0:b5:57:8b:df:ae:c4:56:
58:92:ca:9f:38:8d:6b:02:83:bd:bc:c6:1d:18:bb:ad:b1:ac:
db:26:5d:00:51:79:2f:a5:ce:50:24:44:54:7a:c6:1e:fb:6c:
02:b3:59:22:c5:d0:39:f3:c2:01:2a:e1:68:93:c1:1e:bc:ac:
8f:37:1c:ca:42:36:89:e5:c0:f8:07:e4:bd:8a:c4:2d:b6:1b:
5a:7a:cb:c5:0b:65:f0:5e:44:f8:63:d8:bf:20:26:38:db:98:
8f:6f:e9:be:67:76:16:3b:ea:01:12:5b:b4:44:f4:51:21:2d:
16:69:38:f8:b4:45:5c:98:79:22:b0:42:d7:5c:58:d2:de:58:
7e:b3:67:ff:de:d2:da:68:de:92:b9:52:e1:64:2c:e5:47:19:
98:d1:71:dc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yMzA4MjYw
NzIwMzJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEUwMkM2NEYxMjVGQUNC
NTJENTUzNTI5OTJFMUZCN0YyNjY1Qzg3OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx1aa8/BHCrz+TQKvbO6ogYbXdPgLgUrJrSaygOLODQD2YszvN
81vLGqEKXPdee5nuExVOJreNJLS4ARgd8tBESOCieI1o+sXkDkoU0amHJkPbKI+C
/YpZt7hjKvsxVIjHvkCrBarRB+1a4SKVOeKw4fmA5V6OYDJRgMJWx85lSCaaHiCI
NecrALeCyLSW9T/fSJyVpXB5vD/8QqFxcP1W22hK6KDw2+0MpcOG9Ex5co1mohkK
G6pQV6Pxwb+JJC7bHlW3LwfMes/P3VgZ1+K0UtRp7/tFT2ogHkeAzTIEkPmqkzZ3
Tjcy99zuH02zJ5c2IBiw0AP1An5xQijiYAAnAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU4Cxk8SX6y1LVU1KZLh+38mZch5AwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvNEN4azhTWDZ5MUxW
VTFLWkxoLTM4bVpjaDVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEAp31Yz+PK5t+7L3rJ1kHXXkLmZY3m
I+QFGduVFNL/kzEycjtvneWb1fASfuDtGJKTveQZt5vekM6Szy1JqWJDrvoJkYgk
Yw/DleO5RaCNNluMFIMz8rUWySow73N1vPDrdCQTVrC1V4vfrsRWWJLKnziNawKD
vbzGHRi7rbGs2yZdAFF5L6XOUCREVHrGHvtsArNZIsXQOfPCASrhaJPBHrysjzcc
ykI2ieXA+AfkvYrELbYbWnrLxQtl8F5E+GPYvyAmONuYj2/pvmd2FjvqARJbtET0
USEtFmk4+LRFXJh5IrBC11xY0t5YfrNn/97S2mjekrlS4WQs5UcZmNFx3A==
-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org