Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/bsUG0pCatviEscyUaEGf6ZXFBrk.roa
File: bsUG0pCatviEscyUaEGf6ZXFBrk.roa (raw, json)
Hash identifier: VnoUf8odeqHMKPZ9OukR7ayGjGVoMa1gnvAf03Ai04g=
Subject key identifier: 6E:C5:06:D2:90:9A:B6:F8:84:B1:CC:94:68:41:9F:E9:95:C5:06:B9
Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Certificate serial: 1014
Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/bsUG0pCatviEscyUaEGf6ZXFBrk.roa
Signing time: Fri 19 May 2023 05:53:54 +0000
ROA not before: Fri 19 May 2023 05:53:54 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131530
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4116 (0x1014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Validity
Not Before: May 19 05:53:54 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6EC506D2909AB6F884B1CC9468419FE995C506B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:a6:44:fa:4b:0a:f6:82:8e:d7:4b:73:81:
2f:cd:a3:9b:d7:aa:cd:36:5f:10:a3:2d:48:b4:3f:
d2:cc:b1:06:c1:97:17:75:e2:ac:ae:63:60:55:d1:
f9:3a:aa:55:6b:58:34:22:ae:82:e7:8e:41:b0:cd:
43:79:27:ee:21:0d:a7:36:69:68:df:3d:2e:3b:d3:
42:fd:d5:31:63:30:e0:39:c7:60:e3:8f:d5:a5:9d:
85:ca:2e:86:29:06:bf:f7:fa:fa:58:5f:0d:4e:ab:
27:6b:9c:fd:35:93:21:c0:8f:dd:fb:0c:6f:95:0d:
b0:3a:77:b6:cf:b3:f7:b6:91:47:f0:4c:30:45:2e:
5b:17:58:88:c9:d8:f9:19:a1:b9:ec:bf:e1:63:fb:
1b:31:5d:07:1d:89:c0:0b:43:d4:62:a1:35:0e:63:
9c:64:73:e0:47:1c:e4:1d:3b:9d:74:d3:c4:1f:be:
61:ec:82:af:46:c1:77:b3:d4:53:a1:f7:f8:71:25:
8a:c6:26:a6:59:00:5c:68:16:e7:c9:b5:40:ef:44:
65:a6:cb:9d:35:f5:b0:32:4a:97:ad:bd:43:08:96:
31:25:48:f0:79:7f:c5:9c:cd:79:59:ea:16:6a:01:
99:f4:fb:64:27:5b:a6:e4:df:e3:54:e5:a1:c3:58:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:06:D2:90:9A:B6:F8:84:B1:CC:94:68:41:9F:E9:95:C5:06:B9
X509v3 Authority Key Identifier:
keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/bsUG0pCatviEscyUaEGf6ZXFBrk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:20:31:5f:d3:76:13:2a:27:35:27:8f:19:dc:b9:82:22:fd:
03:ac:07:80:b7:7c:e4:99:86:ee:86:11:26:05:2f:a7:3b:6b:
cd:89:52:1c:77:de:a1:ff:f1:c1:9b:1d:f8:29:32:6c:89:68:
f1:5e:4c:3f:c5:30:ce:d2:81:b8:17:27:9f:2a:e5:73:27:34:
a4:bb:c9:1d:02:91:92:fc:9b:f5:80:04:a5:e2:de:53:f5:8d:
8b:09:06:f0:c2:68:49:c2:4c:37:19:f9:74:61:ee:00:57:8d:
e7:69:e0:d8:32:bc:51:3d:da:f5:29:55:98:00:b0:a7:1c:b6:
96:e5:97:d3:3b:3c:4f:2d:1b:75:5b:5a:d9:0c:cf:ee:fb:7a:
84:ab:b3:9a:79:2e:7a:91:20:a1:0a:0f:e2:31:35:3f:03:18:
e1:22:f6:0a:c7:3c:a3:ee:47:89:a6:66:f7:0b:93:d1:ac:a7:
be:2d:3f:ac:c2:f7:54:10:bc:3a:13:bd:17:ef:fc:68:64:90:
46:7a:91:a8:26:5a:ac:65:69:c7:b4:be:0e:44:02:ac:a9:26:
cc:6e:61:02:53:20:06:60:04:74:8d:1d:7b:16:4e:40:a5:34:
7c:02:dd:2e:ae:b5:da:60:1c:8d:ae:da:f0:95:02:49:fd:6f:
36:e1:54:20
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy
MUExMUFBQzRFQUUwQTYzMDY1OUIzMUEyMzBCMDhENkI1ODE3NzAeFw0yMzA1MTkw
NTUzNTRaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDZFQzUwNkQyOTA5QUI2
Rjg4NEIxQ0M5NDY4NDE5RkU5OTVDNTA2QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYQKZE+ksK9oKO10tzgS/No5vXqs02XxCjLUi0P9LMsQbBlxd1
4qyuY2BV0fk6qlVrWDQiroLnjkGwzUN5J+4hDac2aWjfPS4700L91TFjMOA5x2Dj
j9WlnYXKLoYpBr/3+vpYXw1OqydrnP01kyHAj937DG+VDbA6d7bPs/e2kUfwTDBF
LlsXWIjJ2PkZobnsv+Fj+xsxXQcdicALQ9RioTUOY5xkc+BHHOQdO51008QfvmHs
gq9GwXez1FOh9/hxJYrGJqZZAFxoFufJtUDvRGWmy5019bAySpetvUMIljElSPB5
f8WczXlZ6hZqAZn0+2QnW6bk3+NU5aHDWMVDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUbsUG0pCatviEscyUaEGf6ZXFBrkwHwYDVR0jBBgwFoAUaiGhGqxOrgpjBlmz
GiMLCNa1gXcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2
NC9haUdoR3F4T3JncGpCbG16R2lNTENOYTFnWGMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2FpR2hHcXhPcmdwakJsbXpHaU1MQ05hMWdYYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NjQvYnNVRzBwQ2F0dmlF
c2N5VWFFR2Y2WlhGQnJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdipDANBgkqhkiG9w0BAQsFAAOCAQEAXCAxX9N2EyonNSePGdy5giL9A6wH
gLd85JmG7oYRJgUvpztrzYlSHHfeof/xwZsd+CkybIlo8V5MP8UwztKBuBcnnyrl
cyc0pLvJHQKRkvyb9YAEpeLeU/WNiwkG8MJoScJMNxn5dGHuAFeN52ng2DK8UT3a
9SlVmACwpxy2luWX0zs8Ty0bdVta2QzP7vt6hKuzmnkuepEgoQoP4jE1PwMY4SL2
Csc8o+5HiaZm9wuT0aynvi0/rML3VBC8OhO9F+/8aGSQRnqRqCZarGVpx7S+DkQC
rKkmzG5hAlMgBmAEdI0dexZOQKU0fALdLq612mAcja7a8JUCSf1vNuFUIA==
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org