Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/YwpSuVr_3IjNWK7YVA-YaiPQmL8.roa
File: YwpSuVr_3IjNWK7YVA-YaiPQmL8.roa (raw, json)
Hash identifier: ZcxYGHtXkJ5nyYs0e6J+/e8xzrcYh9o5GJQ+BxNACbk=
Subject key identifier: 63:0A:52:B9:5A:FF:DC:88:CD:58:AE:D8:54:0F:98:6A:23:D0:98:BF
Certificate issuer: /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Certificate serial: 13BA
Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/YwpSuVr_3IjNWK7YVA-YaiPQmL8.roa
Signing time: Thu 14 Sep 2023 12:56:07 +0000
ROA not before: Thu 14 Sep 2023 12:56:07 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 53356
IP address blocks: 103.108.164.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5050 (0x13ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Validity
Not Before: Sep 14 12:56:07 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=630A52B95AFFDC88CD58AED8540F986A23D098BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:c4:b4:48:79:dc:1c:f8:b1:7f:9e:c2:af:
ab:69:07:84:93:54:2d:d0:fd:a4:c9:f4:39:4e:bf:
fe:30:ab:1a:fa:5e:47:d1:cc:66:a9:62:a3:47:66:
3b:33:59:79:d5:d2:44:99:49:8f:da:25:1f:6a:50:
a4:96:69:b4:19:91:aa:7e:f9:c0:6e:fb:76:9d:6a:
14:b2:67:80:42:b5:c3:6b:ec:2c:28:d0:a9:5b:fa:
7c:a9:70:b5:68:c9:b1:55:c5:26:dd:df:42:8f:ad:
a6:39:ff:40:69:68:5f:9b:8a:ef:09:c2:65:72:fe:
f3:be:09:ab:eb:a7:fe:ae:3f:38:a5:62:a1:57:e1:
3c:ee:32:21:a0:94:ae:51:f5:50:2f:94:33:49:0c:
b7:8a:22:af:e5:b4:c1:cb:22:19:8e:08:05:76:8d:
a9:d2:f4:0e:14:76:fd:ee:47:59:b5:5b:db:00:ec:
6b:0a:6a:d8:b4:39:d8:dc:c6:93:2d:e9:e8:91:02:
47:41:d7:e4:88:8b:a2:84:d2:2e:e6:f8:fd:b6:69:
f1:da:eb:3d:58:58:76:71:86:67:d6:50:76:a5:2e:
72:6f:29:e2:04:58:c8:66:a3:87:38:1d:23:27:2c:
a4:ea:87:59:45:fe:7a:6e:ee:a5:3e:ab:09:76:0a:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:52:B9:5A:FF:DC:88:CD:58:AE:D8:54:0F:98:6A:23:D0:98:BF
X509v3 Authority Key Identifier:
keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/YwpSuVr_3IjNWK7YVA-YaiPQmL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:3b:a9:8a:a5:0f:38:be:0d:44:74:7f:0b:f2:a6:a5:49:ea:
eb:a9:d9:c8:de:cd:af:90:c4:9c:d7:6f:00:23:cc:05:d6:b6:
a7:22:1c:f4:26:b9:7f:47:35:61:d4:a0:7c:e8:f0:ae:ad:50:
36:8d:20:b9:f4:06:b8:4d:10:14:e5:e2:4b:ff:20:70:6f:9c:
6e:6e:0c:44:64:63:03:25:8c:0c:79:46:46:46:ec:b5:9a:08:
18:42:d4:77:9c:f8:6a:79:7b:41:8d:f3:32:aa:69:f4:3d:33:
9e:f9:4f:9c:a9:0a:df:be:64:47:d5:73:87:12:5a:30:6b:06:
07:21:3d:93:f1:c4:90:f1:a6:a5:a1:42:37:5b:8d:72:2c:13:
60:48:42:70:9d:c7:f1:52:47:51:1f:69:10:86:57:9b:66:98:
25:45:d6:25:42:ec:23:aa:58:a8:05:80:06:19:82:9a:ee:9c:
15:fd:f2:97:d8:94:aa:ba:b1:fa:2b:1a:c3:84:e9:e8:55:c1:
e5:6f:52:f5:69:42:4d:a2:80:db:94:93:28:1b:dc:32:b4:b3:
f5:8d:8e:09:f3:24:ce:21:0e:c8:53:a9:06:1f:8c:9a:9e:b8:
1b:a8:c8:e0:02:92:89:db:6c:bf:80:bd:c0:e9:ec:60:bc:9a:
29:d9:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 16:07:39 2023 by rpki-client on console-ams.rpki-client.org