Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/aBtZSBPIAuioDyAyWeaMU2jeoZw.roa
File: aBtZSBPIAuioDyAyWeaMU2jeoZw.roa (raw, json)
Hash identifier: 944zIs6oLHQXaCBXbOo7rShht0n6TcbuWcNHJzSxuoY=
Subject key identifier: 68:1B:59:48:13:C8:02:E8:A8:0F:20:32:59:E6:8C:53:68:DE:A1:9C
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 0894
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/aBtZSBPIAuioDyAyWeaMU2jeoZw.roa
Signing time: Sat 12 Aug 2023 05:36:32 +0000
ROA not before: Sat 12 Aug 2023 05:36:32 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 140292
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 12 05:36:32 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=681B594813C802E8A80F203259E68C5368DEA19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:97:98:3c:69:a4:3a:28:e5:02:54:77:d7:
eb:03:5f:c0:78:b1:81:4b:9a:da:ed:75:cd:35:38:
71:7b:b0:98:7a:57:73:62:44:79:cb:29:48:1e:12:
62:f7:d6:7b:3e:4f:2b:07:e5:8f:e1:d1:4c:ca:73:
cd:99:82:8b:ce:29:31:84:a0:cb:32:16:37:9b:43:
4b:73:42:5b:29:37:69:c0:7f:95:aa:42:a6:f2:67:
a6:6f:04:b5:5e:57:0c:9c:d3:30:3d:4a:8c:27:f2:
7b:8d:ad:51:28:aa:c7:3c:02:60:6b:67:1c:a2:f2:
03:16:4d:19:75:7b:fd:bd:e4:76:74:07:eb:a2:15:
87:c9:71:a2:4e:71:f0:e4:26:7f:fe:e1:30:83:78:
32:b6:e9:c7:b3:d8:99:c9:a7:a4:b9:ef:de:2c:02:
b3:90:38:51:88:00:5f:2a:b2:39:46:4a:38:01:71:
09:b7:2d:2b:83:6f:43:5d:f9:6e:4e:b2:00:00:14:
44:54:ba:5f:5a:5b:1c:6a:58:6c:6c:51:3d:42:f0:
1f:29:ea:c9:ef:fe:3b:bf:b9:61:ea:2f:0d:6a:8f:
19:d5:db:05:5d:d6:0a:57:3d:da:cc:a6:41:f2:95:
b9:81:fe:fb:a0:61:a1:81:d4:c6:6e:8a:ce:46:86:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:59:48:13:C8:02:E8:A8:0F:20:32:59:E6:8C:53:68:DE:A1:9C
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/aBtZSBPIAuioDyAyWeaMU2jeoZw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0d:59:d5:eb:e4:5f:98:d3:b3:e9:e9:aa:ca:80:21:bb:7e:
f0:d7:4e:58:6d:5b:20:d2:f6:48:19:84:f7:c9:0f:f3:dc:bc:
64:71:aa:1d:81:e0:2f:c6:0b:5f:f6:92:98:0e:aa:67:fe:92:
ca:e3:1e:e6:ff:d8:c3:78:47:cc:7d:3b:a3:ea:ce:d6:63:30:
c9:8f:3d:48:3d:97:55:8d:91:fc:b9:0d:4e:61:4a:66:9c:4e:
e5:bc:a5:82:61:90:18:a1:16:dd:2a:50:c0:09:e2:2f:3f:6d:
69:8b:94:75:36:7b:b7:b6:55:26:09:97:76:e5:2d:e1:6a:aa:
27:e8:19:28:53:f7:38:2e:31:be:c1:c5:74:34:c6:df:41:a0:
ce:10:a3:c0:92:e3:0f:68:f8:a0:6d:80:da:35:79:f3:fe:24:
5a:1d:79:20:b2:20:6f:3d:5c:d9:c2:a6:c1:20:26:81:c6:db:
10:e3:cf:8c:b9:c0:5b:06:ed:90:ff:08:80:20:3c:80:a4:30:
33:e5:c9:72:68:ab:66:75:f3:fe:d1:59:45:d7:c5:d4:9d:34:
30:9e:6a:52:ab:dc:57:fa:6b:92:80:1c:96:d1:66:35:3d:23:
02:6c:a9:9e:0f:98:79:41:86:8b:1a:02:f9:b7:d7:45:74:37:
22:64:9e:f5
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yMzA4MTIw
NTM2MzJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDY4MUI1OTQ4MTNDODAy
RThBODBGMjAzMjU5RTY4QzUzNjhERUExOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIHJeYPGmkOijlAlR31+sDX8B4sYFLmtrtdc01OHF7sJh6V3Ni
RHnLKUgeEmL31ns+TysH5Y/h0UzKc82ZgovOKTGEoMsyFjebQ0tzQlspN2nAf5Wq
QqbyZ6ZvBLVeVwyc0zA9Sown8nuNrVEoqsc8AmBrZxyi8gMWTRl1e/295HZ0B+ui
FYfJcaJOcfDkJn/+4TCDeDK26cez2JnJp6S5794sArOQOFGIAF8qsjlGSjgBcQm3
LSuDb0Nd+W5OsgAAFERUul9aWxxqWGxsUT1C8B8p6snv/ju/uWHqLw1qjxnV2wVd
1gpXPdrMpkHylbmB/vugYaGB1MZuis5GhjnLAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUaBtZSBPIAuioDyAyWeaMU2jeoZwwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvYUJ0WlNCUElBdWlv
RHlBeVdlYU1VMmplb1p3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEACw1Z1evkX5jTs+npqsqAIbt+8NdO
WG1bINL2SBmE98kP89y8ZHGqHYHgL8YLX/aSmA6qZ/6SyuMe5v/Yw3hHzH07o+rO
1mMwyY89SD2XVY2R/LkNTmFKZpxO5bylgmGQGKEW3SpQwAniLz9taYuUdTZ7t7ZV
JgmXduUt4WqqJ+gZKFP3OC4xvsHFdDTG30GgzhCjwJLjD2j4oG2A2jV58/4kWh15
ILIgbz1c2cKmwSAmgcbbEOPPjLnAWwbtkP8IgCA8gKQwM+XJcmirZnXz/tFZRdfF
1J00MJ5qUqvcV/prkoAcltFmNT0jAmypng+YeUGGixoC+bfXRXQ3ImSe9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 12 06:51:08 2023 by rpki-client on console-ams.rpki-client.org