Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/9E7b3UQQG_60HoDFA1chQQ9ZBDw.roa
File: 9E7b3UQQG_60HoDFA1chQQ9ZBDw.roa (raw, json)
Hash identifier: 9p5oNvW6eEfTENo67jjIpb7/kLJDUMkvx8XxRPKlGp0=
Subject key identifier: F4:4E:DB:DD:44:10:1B:FE:B4:1E:80:C5:03:57:21:41:0F:59:04:3C
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 0E21
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/9E7b3UQQG_60HoDFA1chQQ9ZBDw.roa
Signing time: Fri 24 May 2024 02:25:07 +0000
ROA not before: Fri 24 May 2024 02:25:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 140292
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: May 24 02:25:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F44EDBDD44101BFEB41E80C5035721410F59043C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:cd:7c:c2:e5:fa:ba:ce:e8:60:06:51:4b:
8f:c1:5d:25:ce:44:3a:65:e0:c9:9c:d7:9f:cb:f7:
e0:6c:71:a6:76:bd:3d:e1:95:c0:79:71:8f:0c:2d:
b8:87:0a:e4:aa:51:f7:a3:f7:d1:ac:d0:dd:64:71:
5a:b2:f3:92:11:3f:b9:b9:c4:be:4c:ed:64:0f:4f:
e7:f5:da:82:71:50:ce:99:9e:e3:d6:09:63:b5:ce:
b4:1c:f2:e2:4d:80:e4:1f:ef:9e:c9:55:9e:c3:2a:
1d:00:37:5c:fa:bf:e8:e3:ad:bc:5b:3e:7f:62:11:
43:4e:64:35:f6:17:be:2d:d0:1c:5c:d0:45:ba:15:
e7:f3:ee:af:c3:57:a5:b0:54:35:c9:6d:be:c3:fc:
9a:74:72:f1:41:97:dc:6a:08:8e:5d:2d:7f:86:ee:
66:8d:5d:e2:c7:0f:00:cf:9d:9c:28:e6:74:31:02:
86:35:01:d0:e1:8a:2f:75:24:3a:9f:43:d6:3f:1d:
44:6f:de:d2:a7:70:99:25:31:e6:9f:cf:4f:7a:be:
30:63:aa:27:57:29:36:38:56:6e:17:52:67:c3:23:
f6:f9:97:55:0e:df:5a:34:4a:a3:6d:49:e8:18:6b:
11:c4:ef:7f:b7:9a:ea:c2:3f:6d:8f:3a:d1:50:f5:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:DB:DD:44:10:1B:FE:B4:1E:80:C5:03:57:21:41:0F:59:04:3C
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/9E7b3UQQG_60HoDFA1chQQ9ZBDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6b:cf:ce:98:e4:c2:ff:1c:3c:8b:d9:fb:14:96:1d:52:5c:
ab:68:8c:c3:5e:7b:bc:42:de:ff:44:00:22:c9:7f:ee:c8:bb:
12:81:e4:52:08:14:70:f8:57:4e:2e:2c:12:73:d6:78:ab:72:
70:af:b8:ab:08:bb:1c:cc:25:74:94:ba:3d:2a:41:47:fa:80:
22:3d:66:8e:93:13:8a:cb:74:73:23:81:72:bc:7a:97:38:fb:
90:a9:aa:2e:6f:ff:7e:f9:a9:37:f3:10:3d:6f:56:36:97:da:
9a:03:48:60:72:92:48:32:1a:a5:5b:7f:eb:ab:22:8c:df:50:
43:26:33:d5:f9:53:08:c6:27:31:a6:7b:c0:6a:7b:73:ed:00:
69:fd:1b:91:f4:b4:a7:39:22:b7:2d:c5:3c:6b:f3:c6:da:2c:
1c:a2:ee:1d:ca:be:6c:8c:49:9a:41:49:cc:07:e9:5b:c2:13:
65:4f:b9:06:9e:c3:c2:19:6e:f2:9a:7c:37:45:e9:71:3d:7e:
ee:ca:c0:a3:7c:2f:cf:cf:ad:7b:83:5f:74:54:d2:b2:53:3a:
01:e7:f7:82:b8:17:43:fe:6c:b9:f6:3d:af:5d:5f:49:b9:b5:
a5:bf:f4:91:e7:37:80:c9:48:dd:99:68:51:37:ed:05:4f:be:
28:ba:63:1b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yNDA1MjQw
MjI1MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY0NEVEQkRENDQxMDFC
RkVCNDFFODBDNTAzNTcyMTQxMEY1OTA0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEmc18wuX6us7oYAZRS4/BXSXORDpl4Mmc15/L9+BscaZ2vT3h
lcB5cY8MLbiHCuSqUfej99Gs0N1kcVqy85IRP7m5xL5M7WQPT+f12oJxUM6ZnuPW
CWO1zrQc8uJNgOQf757JVZ7DKh0AN1z6v+jjrbxbPn9iEUNOZDX2F74t0Bxc0EW6
Fefz7q/DV6WwVDXJbb7D/Jp0cvFBl9xqCI5dLX+G7maNXeLHDwDPnZwo5nQxAoY1
AdDhii91JDqfQ9Y/HURv3tKncJklMeafz096vjBjqidXKTY4Vm4XUmfDI/b5l1UO
31o0SqNtSegYaxHE73+3murCP22POtFQ9XXlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU9E7b3UQQG/60HoDFA1chQQ9ZBDwwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvOUU3YjNVUVFHXzYw
SG9ERkExY2hRUTlaQkR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEAWGvPzpjkwv8cPIvZ+xSWHVJcq2iM
w157vELe/0QAIsl/7si7EoHkUggUcPhXTi4sEnPWeKtycK+4qwi7HMwldJS6PSpB
R/qAIj1mjpMTist0cyOBcrx6lzj7kKmqLm//fvmpN/MQPW9WNpfamgNIYHKSSDIa
pVt/66sijN9QQyYz1flTCMYnMaZ7wGp7c+0Aaf0bkfS0pzkity3FPGvzxtosHKLu
Hcq+bIxJmkFJzAfpW8ITZU+5Bp7Dwhlu8pp8N0XpcT1+7srAo3wvz8+te4NfdFTS
slM6Aef3grgXQ/5sufY9r11fSbm1pb/0kec3gMlI3ZloUTftBU++KLpjGw==
-----END CERTIFICATE-----
Generated at Thu Oct 31 08:55:12 2024 by rpki-client on console-ams.rpki-client.org