Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/vEtZZ1DC4NVHXLY7HzoypyNpiow.roa
File: vEtZZ1DC4NVHXLY7HzoypyNpiow.roa (raw, json)
Hash identifier: egQSNcxpR5tzef/t3cNwkJjehbeeAO1BACQo+ok9RVo=
Subject key identifier: BC:4B:59:67:50:C2:E0:D5:47:5C:B6:3B:1F:3A:32:A7:23:69:8A:8C
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 03
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/vEtZZ1DC4NVHXLY7HzoypyNpiow.roa
Signing time: Mon 25 Dec 2023 07:04:09 +0000
ROA not before: Mon 25 Dec 2023 07:04:09 +0000
ROA not after: Tue 24 Dec 2024 06:51:56 +0000
asID: 152092
IP address blocks: 103.97.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 30 Mar 2024 12:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Dec 25 07:04:09 2023 GMT
Not After : Dec 24 06:51:56 2024 GMT
Subject: CN=BC4B596750C2E0D5475CB63B1F3A32A723698A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:fc:65:7f:31:2b:de:23:e6:bf:01:07:7d:
b4:17:b6:54:3b:55:8f:19:28:b7:db:9c:80:d7:30:
1c:c8:ac:31:47:88:e0:ce:e8:25:f4:ad:f1:98:de:
53:2a:5b:9b:a5:27:e7:af:7e:4b:71:dd:1a:39:0a:
72:2d:d6:1e:b7:b1:bb:28:3a:03:fb:18:80:80:9a:
88:6c:d6:fb:12:be:38:2a:df:47:ae:0e:d4:eb:63:
f5:45:f0:e0:1d:6a:08:e7:31:ec:53:ab:39:f6:05:
5d:17:35:9b:5b:7a:ab:88:ad:be:7f:f1:26:6d:0d:
57:e9:5f:c2:96:a8:0c:31:50:11:1e:f1:00:42:ff:
7d:16:35:0e:0d:ca:82:b3:47:d5:64:43:79:3b:f9:
6e:0e:33:f0:84:60:38:6d:e8:e2:bf:d8:be:c3:88:
71:5c:3d:a8:37:97:f8:76:11:97:28:34:2c:a3:ab:
a0:a8:37:58:10:47:f1:8f:ef:f0:15:aa:70:23:51:
4a:7f:3a:1d:47:79:b7:1a:4f:fe:6d:c8:8d:d4:c7:
ef:d1:99:1b:b8:6f:ff:fb:b2:eb:ff:8b:fd:96:6e:
f0:2e:ae:16:c4:a1:9c:2a:f3:1b:28:e7:44:4e:4b:
39:63:a1:10:2d:9d:bc:da:9b:07:48:6f:fd:ec:17:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:59:67:50:C2:E0:D5:47:5C:B6:3B:1F:3A:32:A7:23:69:8A:8C
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/vEtZZ1DC4NVHXLY7HzoypyNpiow.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
95:12:8e:cd:c8:7a:e1:1a:9f:ca:b4:bf:d3:0b:26:e4:af:49:
c6:d6:f9:40:89:8a:f9:dd:55:99:3d:55:29:bb:d7:27:dc:2d:
59:4f:10:e5:3f:09:5b:2c:19:2d:91:b8:8d:41:e6:4f:0d:b1:
1c:93:3d:3b:5a:d5:68:b8:cc:d0:97:d5:81:84:a9:1f:14:4e:
4c:4b:9c:78:c4:f2:a9:85:ff:cd:d4:72:b7:a1:f7:92:4c:c1:
db:d4:e1:f4:f9:99:61:21:60:39:6b:31:ca:e7:89:24:59:cc:
8d:5f:3a:48:b7:a2:f1:03:6f:a1:ec:c7:cf:26:e7:9b:72:41:
85:b5:f3:c7:3c:5e:d4:30:5f:34:c5:4c:b0:1b:c9:03:d2:ae:
55:c2:29:36:e7:a8:80:12:8d:65:2a:2b:62:8e:c9:d0:a2:16:
30:6e:c4:bc:62:a7:c1:7d:a0:2e:6e:f5:53:ea:43:6b:94:cf:
35:bb:7f:37:60:0d:f9:c7:b4:b9:c5:f9:36:66:02:4f:b8:f8:
c8:9f:71:7c:aa:89:08:7f:83:9b:a6:eb:59:b9:2e:25:6a:09:
d4:bc:14:c7:ed:a3:c6:23:ec:e5:9f:ab:5b:52:ea:91:94:f4:
8d:43:41:d3:e4:76:0c:46:10:eb:ba:8c:49:82:00:fb:e5:ea:
5c:71:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 14:14:02 2024 by rpki-client on console-fra.rpki-client.org