Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/eJqTu3JE1YotJGo9sZcfKM-CHx4.roa
File: eJqTu3JE1YotJGo9sZcfKM-CHx4.roa (raw, json)
Hash identifier: GAanGK7QHXSV7M452DOQe8xJcl7zRT78FbxCQozgqtI=
Subject key identifier: 78:9A:93:BB:72:44:D5:8A:2D:24:6A:3D:B1:97:1F:28:CF:82:1F:1E
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 3F18
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/eJqTu3JE1YotJGo9sZcfKM-CHx4.roa
Signing time: Fri 19 May 2023 05:53:28 +0000
ROA not before: Fri 19 May 2023 05:53:28 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
103.102.197.0/24 maxlen: 24
103.102.198.0/24 maxlen: 24
103.102.199.0/24 maxlen: 24
163.53.44.0/24 maxlen: 24
163.53.45.0/24 maxlen: 24
163.53.46.0/24 maxlen: 24
163.53.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16152 (0x3f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: May 19 05:53:28 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=789A93BB7244D58A2D246A3DB1971F28CF821F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:da:94:38:d9:24:98:ee:c7:dd:96:b7:36:
d5:dd:4e:b7:25:4c:f6:74:66:84:e0:07:ad:30:61:
f9:a4:b3:bf:f4:08:21:6d:e3:fd:db:02:eb:56:6c:
fc:80:6a:d8:35:1e:ea:4d:7d:3e:22:21:6b:c9:4c:
34:87:a6:9f:55:ac:fe:b7:23:c6:69:67:8b:b4:77:
bb:c8:e4:e8:20:07:a0:c5:6c:15:a8:db:8d:94:dd:
38:ac:a5:34:0e:f4:5c:e9:e1:29:8c:f8:fa:92:6e:
71:33:ae:40:b0:48:61:9a:23:79:2e:f7:25:93:e9:
e8:e6:64:0f:93:75:ee:69:5d:49:fc:c4:06:09:03:
53:8b:74:c1:d6:80:a6:c1:12:d0:48:a9:c7:f5:f0:
ea:49:e1:48:c7:8a:3d:b1:60:0d:21:ed:dc:28:54:
87:ef:19:ed:97:dd:2c:23:e5:e0:b7:65:24:6c:2c:
f3:16:d1:8b:37:e7:ea:94:06:35:be:06:2a:80:5e:
fe:1c:c1:22:03:65:a2:b6:eb:e4:08:cf:aa:6b:1c:
4b:a7:1b:08:4f:bf:69:90:0b:a6:e6:66:f3:b3:21:
2b:91:b0:f7:1d:de:43:64:78:bc:66:14:db:d0:4b:
2c:58:d4:81:8e:aa:2b:e5:93:62:a7:cb:17:c8:ab:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:93:BB:72:44:D5:8A:2D:24:6A:3D:B1:97:1F:28:CF:82:1F:1E
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/eJqTu3JE1YotJGo9sZcfKM-CHx4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/22
163.53.44.0/22
Signature Algorithm: sha256WithRSAEncryption
36:db:44:30:bc:9f:67:e3:1a:a4:ca:e1:cc:37:7b:7c:d8:6e:
28:2b:35:d5:b1:97:3d:d4:ad:66:e1:e9:8f:e9:97:b5:8d:27:
83:99:cd:26:92:72:2c:58:2b:15:c3:59:81:9b:92:0f:16:04:
e2:0f:55:1d:0b:8f:ce:d2:2f:71:eb:f1:45:e4:18:29:5f:d7:
49:2c:9b:a0:bd:b5:90:a9:3b:70:36:0a:ec:48:3a:f8:17:13:
9c:0a:65:f3:0e:79:6a:0e:a5:bb:99:e7:54:0f:07:c5:c1:6c:
ab:6d:db:d3:87:ce:29:1a:e9:58:64:f8:2c:62:ef:b4:59:87:
53:83:4b:b8:67:33:4e:69:2b:d8:23:b8:d8:7a:aa:7d:8c:c1:
7b:ce:6f:c6:24:5c:0c:4b:51:f9:f1:8b:ff:f1:d4:9e:de:13:
e8:1a:82:c7:c9:8a:01:db:48:36:80:33:c1:db:39:a5:71:85:
ef:0a:88:46:94:82:68:f9:ab:85:bf:3d:e2:80:82:2a:6d:b4:
02:ab:df:36:12:8d:3b:10:14:e6:db:88:8e:20:0f:68:e7:37:
19:ca:a7:71:99:af:72:59:40:d1:4d:38:9d:a3:29:f9:e2:32:
7b:0f:4e:3f:1c:80:a0:47:f9:91:06:03:3d:8e:65:02:3a:d7:
cf:3e:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org