Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/amFbmgeLfWh3-G84FZFg9rbeBAc.roa
File: amFbmgeLfWh3-G84FZFg9rbeBAc.roa (raw, json)
Hash identifier: f0jew2eHyp0xRXatKNwZSnjVP49ffyXg1DH3yTfF4cQ=
Subject key identifier: 6A:61:5B:9A:07:8B:7D:68:77:F8:6F:38:15:91:60:F6:B6:DE:04:07
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 06E3
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/amFbmgeLfWh3-G84FZFg9rbeBAc.roa
Signing time: Thu 18 May 2023 07:24:00 +0000
ROA not before: Thu 18 May 2023 07:24:00 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 58593
IP address blocks: 42.159.0.0/16 maxlen: 24
42.159.0.0/18 maxlen: 24
42.159.64.0/18 maxlen: 24
42.159.128.0/18 maxlen: 24
42.159.128.0/24 maxlen: 24
42.159.192.0/18 maxlen: 24
103.9.8.0/22 maxlen: 24
103.9.8.0/23 maxlen: 24
103.9.8.0/24 maxlen: 24
103.9.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: May 18 07:24:00 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6A615B9A078B7D6877F86F38159160F6B6DE0407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:58:61:c5:a1:a4:1b:2f:f0:6e:c9:cf:68:
24:e5:0a:a1:c2:e3:8b:40:62:53:a2:e8:61:cc:ad:
da:3a:f4:4c:70:fd:01:b3:23:38:54:3f:be:29:0d:
a6:a8:7e:c9:df:44:38:7f:45:ed:0c:e0:fc:9c:ec:
69:57:41:cd:e6:fb:bd:2c:c1:86:12:ce:a1:ab:5d:
ea:7c:9c:78:6d:2f:7c:3d:02:a6:da:c0:44:d9:0f:
80:7f:d1:fd:20:57:fa:0c:76:b9:8e:eb:8e:c7:cb:
2d:13:03:1f:43:4c:e0:61:f1:91:42:0d:5c:10:eb:
b4:6c:ec:54:9e:c1:05:0e:9a:0d:63:d7:18:f2:63:
97:6b:f4:6b:9e:c2:ce:cf:f8:1b:a0:5a:ab:a0:85:
30:75:6c:c3:b7:9c:a6:93:c4:97:9a:aa:8d:9c:e9:
19:0e:d8:47:2f:ed:3b:13:03:3e:7b:aa:59:fb:da:
01:b4:ce:d5:ef:8a:a6:27:96:ab:f1:32:9f:eb:5c:
14:9e:3f:f1:12:f9:93:6b:73:9d:40:37:24:41:c2:
81:0e:4d:cc:8e:01:91:bc:82:f2:a9:48:bf:a3:30:
76:0a:dd:a8:eb:41:09:4d:e0:2f:da:ed:15:7f:61:
26:ad:26:47:9e:37:5b:84:95:75:5c:f3:74:2e:53:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:61:5B:9A:07:8B:7D:68:77:F8:6F:38:15:91:60:F6:B6:DE:04:07
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/amFbmgeLfWh3-G84FZFg9rbeBAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8f:54:1c:50:17:b1:67:60:39:fb:01:e4:3a:da:40:f6:4d:
84:8b:36:87:93:59:66:20:aa:70:e1:38:be:3d:f9:60:f0:25:
9c:51:1a:f6:5b:af:8f:60:2b:22:a7:f5:ad:1f:31:91:12:61:
c4:ce:97:6e:d7:ea:4c:2e:60:1f:a1:0d:60:64:1e:e0:4f:41:
14:07:08:87:92:94:2e:47:fe:e4:04:d5:fd:4b:fe:f3:e2:fb:
10:39:55:f3:e3:4e:0c:17:14:42:1a:1f:bc:6b:aa:86:3e:28:
d8:54:58:94:09:ef:d8:6b:e4:cf:21:1f:87:ef:69:2e:17:b5:
03:5a:46:5d:c9:39:bf:c8:49:4a:be:cf:b9:33:68:f2:6f:16:
83:56:8a:d4:0f:ec:4b:d9:83:65:a6:05:3f:c9:f9:2b:be:23:
bd:a6:30:8a:06:06:c0:18:cc:e0:0f:e0:fe:a9:5b:36:2b:ae:
42:4c:05:85:c1:2f:4b:8b:34:4d:90:89:e6:5d:96:ee:41:0b:
ea:13:7e:80:72:3a:97:99:95:3e:c8:72:ad:e1:f4:3b:9a:18:
9f:b1:a3:ba:f6:b0:e0:8e:52:fe:c1:0f:78:ce:aa:2b:8b:cb:
c2:b6:95:9a:4f:9a:a8:78:58:a4:49:64:13:92:97:17:c2:d5:
da:59:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org