Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/pcskQUogbmekQIwaXIiYMxZgyas.roa
File: pcskQUogbmekQIwaXIiYMxZgyas.roa (raw, json)
Hash identifier: LK06+74CMZsvuRG0ZNRdAj4byRDrFXm7BwaVjGuPY38=
Subject key identifier: A5:CB:24:41:4A:20:6E:67:A4:40:8C:1A:5C:88:98:33:16:60:C9:AB
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 089A
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/pcskQUogbmekQIwaXIiYMxZgyas.roa
Signing time: Mon 14 Aug 2023 02:54:29 +0000
ROA not before: Mon 14 Aug 2023 02:54:29 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 58593
IP address blocks: 163.228.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 13 May 2024 03:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Aug 14 02:54:29 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=A5CB24414A206E67A4408C1A5C8898331660C9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:d7:c3:aa:b8:5a:8e:5b:46:2b:06:2e:36:
38:e4:02:90:fc:ad:93:d6:ba:69:3c:cc:c6:5d:8d:
de:bc:c0:36:2b:00:aa:0b:55:5e:89:b0:39:89:3c:
52:c0:c8:39:3e:4f:59:40:81:29:03:b1:16:55:f8:
74:5e:cb:3f:1d:4b:75:8e:e7:84:87:f5:2f:4b:0c:
b7:c2:99:34:2f:05:de:78:bd:35:3b:09:28:6a:d1:
11:8b:d4:9b:8b:da:61:1c:21:35:fc:9e:7e:0b:44:
52:d9:06:b5:cf:5c:39:e1:fc:8c:87:f8:cb:7d:07:
3f:29:08:5b:21:71:df:c9:d7:c1:17:cd:8b:ff:18:
de:58:85:1c:30:e9:82:cd:ff:e1:35:34:bf:78:7a:
a5:04:02:af:0c:fb:9c:e2:78:4e:61:c0:f3:d9:22:
8f:5a:1b:73:c9:29:26:2b:31:c6:98:e5:ea:94:69:
ce:f1:cb:44:12:45:77:50:5b:c1:10:84:de:45:87:
b7:8a:ba:66:c0:eb:ba:dc:5d:fa:6f:cc:22:66:8e:
05:73:dc:bb:1d:2b:6a:3a:77:25:11:05:e2:00:7d:
65:0b:84:f6:31:a8:25:d7:d2:be:20:71:43:59:a1:
69:85:b4:39:d3:89:54:3b:b0:de:0b:d9:4f:95:cb:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:24:41:4A:20:6E:67:A4:40:8C:1A:5C:88:98:33:16:60:C9:AB
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/pcskQUogbmekQIwaXIiYMxZgyas.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:96:2f:d6:09:73:9e:a3:c2:0f:b2:4d:a6:3a:bf:53:27:5c:
6e:f2:f8:8e:8d:04:28:ef:18:12:0f:07:3f:cb:ed:40:f9:8c:
e3:0f:b2:f4:c9:7d:50:ce:c2:a1:1b:cd:17:a8:b6:9b:9b:75:
1f:38:43:50:fa:7d:3e:21:6a:be:7a:28:60:c4:ef:b6:22:05:
bd:8c:dd:b0:1f:d8:cc:10:b4:29:ec:88:b5:b3:0b:a8:ba:a8:
1e:e6:91:62:b7:ef:f6:1a:f9:bd:5b:9a:56:0c:7f:55:fb:3d:
94:cc:a1:a6:5f:2c:09:b1:69:57:50:fe:c1:90:fd:8d:d3:53:
72:94:c6:ce:35:25:c3:36:42:b3:53:29:bc:04:a0:1a:ac:85:
78:2b:52:d0:f4:5c:fd:33:e8:5c:44:02:d8:4f:a4:34:35:45:
f6:be:f1:04:d1:06:27:28:43:30:d7:bc:18:e8:f0:9c:15:14:
25:d3:23:60:86:85:9d:27:78:a2:c0:21:13:98:b3:58:aa:e4:
1e:44:f5:c2:eb:c6:34:05:4c:86:4c:66:0d:bb:92:22:93:0a:
df:81:fe:c3:4c:0a:d3:b7:46:f6:6f:a0:ac:53:26:47:ad:1b:
c7:8e:3f:67:0f:51:ff:e4:68:48:ab:ec:14:5f:1b:bb:06:fd:
05:a7:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:39:26 2024 by rpki-client on console-ams.rpki-client.org