Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/p1AFHgcv9VVRSuhoLleG9VXxzDQ.roa
File: p1AFHgcv9VVRSuhoLleG9VXxzDQ.roa (raw, json)
Hash identifier: S9LzZvE9cb8lYiC0t0O40tpzw7UUMLCUF6UaxDHBNkw=
Subject key identifier: A7:50:05:1E:07:2F:F5:55:51:4A:E8:68:2E:57:86:F5:55:F1:CC:34
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 0E22
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/p1AFHgcv9VVRSuhoLleG9VXxzDQ.roa
Signing time: Fri 24 May 2024 02:25:08 +0000
ROA not before: Fri 24 May 2024 02:25:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 06:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: May 24 02:25:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A750051E072FF555514AE8682E5786F555F1CC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:94:5e:ba:cb:a0:a6:dd:95:3a:aa:5f:dc:
89:88:e3:52:83:8b:a4:4c:11:6e:bc:6b:30:57:9e:
13:cc:bf:2c:33:47:bd:a7:54:54:ae:08:d4:25:66:
53:d1:37:2f:27:43:0b:67:e5:19:ac:52:c9:07:9d:
92:64:1c:6f:b0:24:b8:12:67:e0:c6:cb:2e:5f:26:
3d:ca:82:e3:9f:1d:9f:d1:05:bf:a5:ca:f2:3d:fb:
a9:fa:db:de:d5:71:a2:6e:d5:2b:c0:24:a2:0a:dc:
50:66:7c:a8:7f:31:e5:f5:89:06:22:67:e2:0a:08:
fc:cd:a6:6f:62:12:d6:14:40:c2:91:db:f6:cb:7d:
45:bd:60:53:32:fe:2a:36:ff:0f:74:08:4f:80:74:
19:6d:1a:24:e7:ac:90:23:9c:67:f1:fc:66:5f:9c:
25:e0:51:7a:c9:93:5c:d0:30:8b:5a:8f:e1:dd:df:
32:f0:4f:a0:bb:56:fc:09:53:b5:e4:06:ad:ac:65:
ab:3c:a8:f6:7f:e2:52:53:51:28:58:7d:b7:b3:8a:
33:c8:9c:5c:61:2c:e7:ff:1b:36:60:af:2b:22:1a:
50:de:c6:b9:6b:f1:a1:ea:8b:0c:8f:ff:2b:2f:e5:
cb:fc:6c:56:5d:1e:2f:82:b4:8b:36:21:be:63:b6:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:50:05:1E:07:2F:F5:55:51:4A:E8:68:2E:57:86:F5:55:F1:CC:34
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/p1AFHgcv9VVRSuhoLleG9VXxzDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:94:50:21:27:83:dc:26:2b:8d:54:6d:56:5a:76:8c:62:b1:
e8:37:cd:4f:03:67:24:f1:47:40:c6:9f:ce:24:57:c2:cc:54:
f2:68:ea:97:66:56:25:8d:57:16:48:50:2a:8e:b3:01:3b:1f:
fd:b3:7f:9d:bb:29:9f:8e:bb:b2:c8:90:c0:65:b6:a2:fb:c3:
74:03:46:e6:03:d4:9b:95:43:a1:9b:bd:c5:e7:75:51:4e:e9:
02:78:f8:f2:77:7a:5d:5c:74:82:30:df:7a:e5:33:29:80:6e:
20:38:f1:8c:dc:fc:9b:b8:32:9b:11:1a:76:d0:b6:a2:07:f9:
6f:49:85:4b:9b:d3:66:0b:4d:83:ff:ee:3b:5e:df:75:4c:fa:
84:85:f6:00:a0:06:3d:f0:9c:fd:5a:09:52:7e:a5:d1:f0:da:
71:cc:e9:1f:8b:83:65:e2:2f:5e:df:38:42:7d:23:e7:2a:8f:
6f:c3:28:a6:a6:fe:73:ac:07:4f:6a:b7:be:5a:cd:33:47:b4:
67:93:72:45:23:18:67:d4:56:bf:33:8d:de:ee:95:b9:57:d8:
77:f8:59:ce:ab:d5:a4:b2:0e:42:06:3b:03:e5:33:46:6e:93:
0f:83:63:e4:a7:75:12:70:df:6e:2f:d6:9b:d9:a1:ae:d1:3a:
75:9b:d6:aa
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjFE
ODQ0QjE5ODZFNzM2NDY2RjVBMThGRjA2QjI5OEVGQ0JCRDZFRDAeFw0yNDA1MjQw
MjI1MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE3NTAwNTFFMDcyRkY1
NTU1MTRBRTg2ODJFNTc4NkY1NTVGMUNDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC46ZReusugpt2VOqpf3ImI41KDi6RMEW68azBXnhPMvywzR72n
VFSuCNQlZlPRNy8nQwtn5RmsUskHnZJkHG+wJLgSZ+DGyy5fJj3KguOfHZ/RBb+l
yvI9+6n6297VcaJu1SvAJKIK3FBmfKh/MeX1iQYiZ+IKCPzNpm9iEtYUQMKR2/bL
fUW9YFMy/io2/w90CE+AdBltGiTnrJAjnGfx/GZfnCXgUXrJk1zQMItaj+Hd3zLw
T6C7VvwJU7XkBq2sZas8qPZ/4lJTUShYfbezijPInFxhLOf/GzZgrysiGlDexrlr
8aHqiwyP/ysv5cv8bFZdHi+CtIs2Ib5jtnnjAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUp1AFHgcv9VVRSuhoLleG9VXxzDQwHwYDVR0jBBgwFoAUsdhEsZhuc2Rm9aGP
8Gspjvy71u0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NkaEVzWmh1YzJSbTlhR1A4R3NwanZ5NzF1MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjYvcDFBRkhnY3Y5VlZS
U3Vob0xsZUc5Vlh4ekRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdg1jANBgkqhkiG9w0BAQsFAAOCAQEAe5RQISeD3CYrjVRtVlp2jGKx6DfN
TwNnJPFHQMafziRXwsxU8mjql2ZWJY1XFkhQKo6zATsf/bN/nbspn467ssiQwGW2
ovvDdANG5gPUm5VDoZu9xed1UU7pAnj48nd6XVx0gjDfeuUzKYBuIDjxjNz8m7gy
mxEadtC2ogf5b0mFS5vTZgtNg//uO17fdUz6hIX2AKAGPfCc/VoJUn6l0fDacczp
H4uDZeIvXt84Qn0j5yqPb8Mopqb+c6wHT2q3vlrNM0e0Z5NyRSMYZ9RWvzON3u6V
uVfYd/hZzqvVpLIOQgY7A+UzRm6TD4Nj5Kd1EnDfbi/Wm9mhrtE6dZvWqg==
-----END CERTIFICATE-----
Generated at Thu Oct 31 08:55:12 2024 by rpki-client on console-ams.rpki-client.org