Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/mM8qnCJZTkTl2-A1TLyZs1EGlgE.roa
File: mM8qnCJZTkTl2-A1TLyZs1EGlgE.roa (raw, json)
Hash identifier: 4in6SDaiHxGelMlsSYSTaVDQqRNXC2rvMFqWzdW9+ns=
Subject key identifier: 98:CF:2A:9C:22:59:4E:44:E5:DB:E0:35:4C:BC:99:B3:51:06:96:01
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 08E9
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/mM8qnCJZTkTl2-A1TLyZs1EGlgE.roa
Signing time: Mon 28 Aug 2023 01:18:42 +0000
ROA not before: Mon 28 Aug 2023 01:18:42 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 131563
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 28 01:18:42 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=98CF2A9C22594E44E5DBE0354CBC99B351069601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:c5:f0:2c:1a:d2:e3:1b:eb:4a:e7:5a:71:
e7:cd:69:94:c0:d1:66:cd:31:a3:c3:45:51:dd:4b:
a6:0f:99:8f:73:ea:e6:42:bb:2c:13:d8:12:b6:69:
2c:73:01:60:c7:a0:81:16:25:86:04:de:ca:df:68:
c0:f9:fb:91:f4:ba:44:83:24:c7:80:39:46:72:d3:
3e:07:e2:f9:4f:22:e3:f4:53:10:e5:de:c9:e9:a9:
9e:a4:1c:b6:84:4d:93:7c:a1:11:f3:d5:f1:b6:33:
09:7b:0e:7d:c3:4e:7d:7a:05:f7:81:a1:20:2b:38:
4b:39:16:79:d6:fc:97:2f:9f:4c:dc:36:08:fd:42:
f2:ab:9c:d8:3b:58:86:11:7d:cd:b3:5a:c7:12:8f:
ed:39:80:7f:ef:a9:b8:c8:a3:58:d2:de:2b:2a:b6:
c5:8a:cb:95:a1:7f:6b:0d:ad:ab:88:5a:ba:6c:e6:
7d:c1:1c:fa:87:94:70:99:69:02:3f:7a:f9:2c:65:
60:9a:01:a3:6f:e9:d3:9f:f9:da:e2:b5:a7:6c:73:
4b:e5:c2:68:07:69:fb:6e:bf:85:22:c0:9a:ee:cc:
b3:2d:e9:32:f5:cc:af:b6:4a:08:b0:f3:06:cd:e0:
06:f1:ac:2e:6b:ae:5d:62:af:ea:f5:16:06:65:d2:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:2A:9C:22:59:4E:44:E5:DB:E0:35:4C:BC:99:B3:51:06:96:01
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/mM8qnCJZTkTl2-A1TLyZs1EGlgE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:fb:fa:96:68:1a:6c:e8:d8:76:fe:b5:3e:eb:08:c3:65:3b:
65:58:88:e1:f1:4d:53:bb:17:e9:76:82:fb:88:df:09:d9:85:
94:e8:61:fa:62:29:1b:38:da:1c:1f:02:61:da:9c:b1:e9:b7:
e8:4e:e2:b7:1a:3a:01:a8:ec:6a:1d:6d:5c:52:c0:69:20:ed:
75:97:53:cd:63:56:f7:9b:8f:b3:ca:b3:b4:49:6a:75:2d:2a:
ea:5b:5a:20:a7:30:cc:16:8c:82:31:41:6e:f6:09:0b:54:06:
67:0f:ef:62:0d:3f:d3:12:1c:f9:ef:93:5e:42:8a:79:c6:8b:
0a:f4:ca:26:ca:6a:af:5a:f6:1e:53:0e:0b:90:53:12:a8:de:
74:bd:34:b5:46:1f:ae:21:62:81:48:bf:8e:d1:a6:74:0f:06:
f6:79:02:f9:40:aa:7d:3b:06:75:67:ce:00:4e:01:2d:18:de:
b9:fe:6b:1b:84:bd:53:10:da:c9:ca:7a:87:63:80:06:fe:2c:
14:91:ef:f6:3c:e6:31:bc:62:1e:c0:0a:00:3e:0d:02:5f:4c:
3f:e4:b8:3b:0b:1c:23:b1:81:38:d6:39:f4:db:03:f1:c1:ba:
b2:10:48:e2:fc:fb:d1:a3:a4:75:ae:1b:ac:45:0c:b4:4b:07:
13:ec:35:a5
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yMzA4Mjgw
MTE4NDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDk4Q0YyQTlDMjI1OTRF
NDRFNURCRTAzNTRDQkM5OUIzNTEwNjk2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/qsXwLBrS4xvrSudacefNaZTA0WbNMaPDRVHdS6YPmY9z6uZC
uywT2BK2aSxzAWDHoIEWJYYE3srfaMD5+5H0ukSDJMeAOUZy0z4H4vlPIuP0UxDl
3snpqZ6kHLaETZN8oRHz1fG2Mwl7Dn3DTn16BfeBoSArOEs5FnnW/Jcvn0zcNgj9
QvKrnNg7WIYRfc2zWscSj+05gH/vqbjIo1jS3isqtsWKy5Whf2sNrauIWrps5n3B
HPqHlHCZaQI/evksZWCaAaNv6dOf+dritadsc0vlwmgHaftuv4UiwJruzLMt6TL1
zK+2Sgiw8wbN4AbxrC5rrl1ir+r1FgZl0j97AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUmM8qnCJZTkTl2+A1TLyZs1EGlgEwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvbU04cW5DSlpUa1Rs
Mi1BMVRMeVpzMUVHbGdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEAqfv6lmgabOjYdv61PusIw2U7ZViI
4fFNU7sX6XaC+4jfCdmFlOhh+mIpGzjaHB8CYdqcsem36E7itxo6Aajsah1tXFLA
aSDtdZdTzWNW95uPs8qztElqdS0q6ltaIKcwzBaMgjFBbvYJC1QGZw/vYg0/0xIc
+e+TXkKKecaLCvTKJspqr1r2HlMOC5BTEqjedL00tUYfriFigUi/jtGmdA8G9nkC
+UCqfTsGdWfOAE4BLRjeuf5rG4S9UxDaycp6h2OABv4sFJHv9jzmMbxiHsAKAD4N
Al9MP+S4OwscI7GBONY59NsD8cG6shBI4vz70aOkda4brEUMtEsHE+w1pQ==
-----END CERTIFICATE-----
Generated at Mon Aug 28 03:39:57 2023 by rpki-client on console-fra.rpki-client.org