Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/uAbuhJN1OsV_V3Hf9XU_nCsVb-E.roa
File: uAbuhJN1OsV_V3Hf9XU_nCsVb-E.roa (raw, json)
Hash identifier: vVb7TdVHJHKoHZoVtC7IrGor9a8UA75BtaCRD4RtFL0=
Subject key identifier: B8:06:EE:84:93:75:3A:C5:7F:57:71:DF:F5:75:3F:9C:2B:15:6F:E1
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 08EF
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/uAbuhJN1OsV_V3Hf9XU_nCsVb-E.roa
Signing time: Mon 28 Aug 2023 03:20:26 +0000
ROA not before: Mon 28 Aug 2023 03:20:26 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Aug 28 03:20:26 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B806EE8493753AC57F5771DFF5753F9C2B156FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:a4:b1:68:73:d0:0e:e3:b0:c5:29:42:05:
f3:4a:f4:f8:b3:e0:fe:a8:0a:09:d4:c3:d2:63:52:
cd:8e:a7:e3:0e:03:ee:73:70:d1:da:27:c0:52:15:
37:6b:1a:4d:a4:7b:09:9f:76:87:1c:d0:e3:c5:0a:
ab:21:8b:68:12:d1:04:b0:be:48:25:a8:7e:6a:2e:
1c:d3:bd:3d:7c:4b:a1:49:47:55:6a:6c:0e:39:a1:
51:42:5e:8d:89:c8:91:32:d0:17:3e:4d:5f:94:cc:
f6:86:07:aa:9a:42:88:82:bd:22:56:59:09:40:f7:
18:2b:64:f8:25:c6:81:d2:4c:fe:05:89:41:71:ca:
ee:6a:8a:ff:d6:a1:fe:d2:95:ad:00:49:28:af:72:
26:f4:c2:2e:ad:ad:9f:e9:e8:4a:d6:3b:b8:f3:52:
c6:62:fd:96:42:7c:d9:da:c3:5b:38:bd:9c:4c:ad:
e7:2a:8b:d3:93:40:1e:13:70:a5:74:ba:44:ea:f8:
1c:a1:22:dc:e1:53:9d:8d:b8:68:24:a1:2b:15:a9:
cd:8e:e6:70:4a:a0:4b:8b:6a:f1:67:3b:5e:84:c2:
e6:e1:a3:c6:8b:6e:a1:87:67:00:cd:fb:e4:ef:5b:
b1:6d:02:1c:43:dd:e6:de:c3:b8:5a:de:b9:2c:12:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:EE:84:93:75:3A:C5:7F:57:71:DF:F5:75:3F:9C:2B:15:6F:E1
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/uAbuhJN1OsV_V3Hf9XU_nCsVb-E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c8:06:c5:f0:b5:ac:12:f8:05:5c:ee:51:b8:ec:e6:a2:81:
cc:10:a9:9d:04:19:5b:53:a2:60:b2:05:68:12:6a:3a:e0:cc:
15:90:7f:46:59:d3:d2:9c:2d:cc:59:a0:11:22:be:fe:dd:5a:
4b:0d:7f:cf:1d:7d:ab:f6:cb:25:91:6e:79:b1:07:45:3c:b1:
ba:fb:fd:d4:be:e3:2b:d6:37:dd:3a:41:44:a0:59:c5:29:5e:
45:d9:b0:2b:3d:74:46:aa:e1:90:11:0c:f1:b4:fe:28:27:0b:
b7:9d:0f:e3:46:f9:f9:5d:d6:7d:2f:8c:e4:80:dc:74:7f:67:
50:6d:24:41:b5:87:df:bc:06:48:21:19:22:39:64:6e:8d:c7:
1d:c9:c6:30:85:99:4f:11:5e:db:ba:3a:d1:7a:48:f9:8a:de:
9e:f8:2c:f2:ff:22:38:27:22:9f:81:a2:f1:1b:21:55:51:06:
d8:21:d8:bc:f3:f3:d6:22:06:c9:ee:9a:cd:e7:5f:25:51:58:
ee:17:bc:42:d7:8e:77:87:76:a7:b6:a3:6c:d0:cd:74:40:82:
33:62:91:ac:4b:05:f0:40:d3:76:24:ba:9b:93:41:0d:18:9a:
e7:84:1b:c7:f4:b8:02:93:43:b4:7b:a5:43:f6:1c:06:33:32:
58:e2:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:54:56 2024 by rpki-client on console-fra.rpki-client.org