Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/l09jp9zSS8OVEGuLg2VHQ-uimUE.roa
File: l09jp9zSS8OVEGuLg2VHQ-uimUE.roa (raw, json)
Hash identifier: 5AbNCegl/ujbJUlB8BViqYcN+RXxTSZOK+RYFAuFlhs=
Subject key identifier: 97:4F:63:A7:DC:D2:4B:C3:95:10:6B:8B:83:65:47:43:EB:A2:99:41
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 0895
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/l09jp9zSS8OVEGuLg2VHQ-uimUE.roa
Signing time: Sat 12 Aug 2023 05:36:32 +0000
ROA not before: Sat 12 Aug 2023 05:36:32 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 12 05:36:32 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=974F63A7DCD24BC395106B8B83654743EBA29941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:76:8f:3d:7c:2e:95:0d:17:4e:bf:6c:93:
3d:aa:32:5b:07:2b:20:0a:59:5e:fb:83:1a:4d:6b:
2c:9a:27:cc:d2:b2:98:b6:51:9f:26:e1:7b:95:4b:
9f:19:6c:ac:a2:71:66:b6:7b:76:96:79:b9:84:7d:
9d:77:2c:aa:ac:22:5b:00:e5:2c:43:4a:76:aa:57:
a9:60:76:b2:62:41:89:ff:1c:78:0f:b4:82:f5:29:
e2:c2:df:b8:38:f8:d5:65:80:3c:a2:98:75:c0:08:
4c:7b:c3:6f:81:f3:d9:52:f6:cb:39:6f:62:15:88:
37:0e:68:67:b1:25:8a:9c:83:1a:a9:a2:d8:f9:29:
8e:c8:36:22:c6:4c:65:a3:f9:1e:c3:26:3b:c9:b6:
fb:da:d7:3d:3c:f8:45:14:e5:46:53:23:bb:3d:a6:
4e:13:45:62:bd:21:9f:15:f2:00:62:78:33:da:9d:
98:d5:f6:5b:e3:ba:f4:7a:cf:9c:6f:73:25:00:ca:
62:aa:bc:67:60:31:c9:d3:57:0f:95:85:de:6c:39:
ee:e2:95:14:a0:88:af:c5:77:98:e0:dd:aa:b2:04:
63:e2:fb:af:82:f7:6e:a2:3f:0d:55:a8:cc:0a:62:
8c:3b:1f:fd:fa:ee:ff:a8:02:cb:36:32:12:65:76:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:63:A7:DC:D2:4B:C3:95:10:6B:8B:83:65:47:43:EB:A2:99:41
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/l09jp9zSS8OVEGuLg2VHQ-uimUE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1e:3b:ea:ba:a0:03:0f:e4:1b:f7:2a:01:db:03:ac:3d:87:
f5:2a:25:05:c9:da:9d:6b:b5:e8:3c:eb:b5:a1:b3:90:08:cb:
5b:7c:43:a8:24:c5:38:7f:46:ce:79:43:c9:19:4e:ce:e8:63:
d9:e7:bd:5a:b2:15:12:e6:32:e8:26:9b:eb:21:44:ce:50:8f:
43:5f:2c:e7:0e:c8:0b:71:af:df:9f:fe:44:ae:09:d7:99:a8:
24:7b:05:37:74:a6:29:0f:7a:64:e2:ca:3b:8c:ba:d3:85:2d:
fc:57:85:f8:17:47:5c:87:ac:1b:ec:b0:94:56:e3:5e:eb:df:
cb:e2:59:ee:7e:48:b7:69:fd:4a:1c:ba:79:48:21:79:6f:ec:
d8:11:ed:6f:ce:62:c5:e2:db:f7:ac:c7:d0:03:27:e8:a1:7b:
65:4d:e1:4a:bc:e0:c7:03:f1:1d:4a:d0:d2:f7:30:92:07:c1:
70:b1:4d:af:b5:15:56:13:3d:85:20:10:4f:fb:62:8a:fa:2d:
7d:4c:10:3c:5d:c4:94:f2:38:99:8c:27:09:7f:7d:9d:9e:44:
73:ef:47:90:37:58:be:a1:7f:ca:f0:f3:03:f2:1c:8e:a8:68:
82:6b:90:96:41:ac:36:73:b1:6a:d8:23:a6:4b:15:98:f7:20:
f4:cd:9e:98
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yMzA4MTIw
NTM2MzJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk3NEY2M0E3RENEMjRC
QzM5NTEwNkI4QjgzNjU0NzQzRUJBMjk5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUfnaPPXwulQ0XTr9skz2qMlsHKyAKWV77gxpNayyaJ8zSspi2
UZ8m4XuVS58ZbKyicWa2e3aWebmEfZ13LKqsIlsA5SxDSnaqV6lgdrJiQYn/HHgP
tIL1KeLC37g4+NVlgDyimHXACEx7w2+B89lS9ss5b2IViDcOaGexJYqcgxqpotj5
KY7INiLGTGWj+R7DJjvJtvva1z08+EUU5UZTI7s9pk4TRWK9IZ8V8gBieDPanZjV
9lvjuvR6z5xvcyUAymKqvGdgMcnTVw+Vhd5sOe7ilRSgiK/Fd5jg3aqyBGPi+6+C
926iPw1VqMwKYow7H/367v+oAss2MhJldiAZAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUl09jp9zSS8OVEGuLg2VHQ+uimUEwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvbDA5anA5elNTOE9W
RUd1TGcyVkhRLXVpbVVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEAmB476rqgAw/kG/cqAdsDrD2H9Sol
BcnanWu16DzrtaGzkAjLW3xDqCTFOH9GznlDyRlOzuhj2ee9WrIVEuYy6Cab6yFE
zlCPQ18s5w7IC3Gv35/+RK4J15moJHsFN3SmKQ96ZOLKO4y604Ut/FeF+BdHXIes
G+ywlFbjXuvfy+JZ7n5It2n9Shy6eUgheW/s2BHtb85ixeLb96zH0AMn6KF7ZU3h
SrzgxwPxHUrQ0vcwkgfBcLFNr7UVVhM9hSAQT/tiivotfUwQPF3ElPI4mYwnCX99
nZ5Ec+9HkDdYvqF/yvDzA/IcjqhogmuQlkGsNnOxatgjpksVmPcg9M2emA==
-----END CERTIFICATE-----
Generated at Sat Aug 12 06:49:59 2023 by rpki-client on console-fra.rpki-client.org