Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/koOgkhknBoOG_hTAi4FMfqLj-JU.roa
File: koOgkhknBoOG_hTAi4FMfqLj-JU.roa (raw, json)
Hash identifier: cFiYbHvbyc8YtfeQURNBRSjnYbvLb8VYJiWByugNmxM=
Subject key identifier: 92:83:A0:92:19:27:06:83:86:FE:14:C0:8B:81:4C:7E:A2:E3:F8:95
Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Certificate serial: 1033
Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/koOgkhknBoOG_hTAi4FMfqLj-JU.roa
Signing time: Wed 24 May 2023 03:53:41 +0000
ROA not before: Wed 24 May 2023 03:53:41 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59024
IP address blocks: 103.111.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Validity
Not Before: May 24 03:53:41 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9283A0921927068386FE14C08B814C7EA2E3F895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:18:8e:d0:71:f5:a2:2d:e2:8d:c1:5a:9a:
2a:35:b7:d5:e4:56:2a:56:fb:17:f3:37:ad:0f:fe:
02:ed:36:d1:40:2f:57:c4:02:2e:a7:4a:12:13:e4:
58:d2:ee:33:3c:04:d2:88:97:57:85:ea:96:2e:9f:
de:1c:7b:3f:51:f3:31:85:85:eb:bc:97:53:ea:aa:
78:f3:30:ee:1a:cc:b1:c2:6f:2f:af:85:72:19:af:
db:f7:46:e7:d8:91:5c:3a:92:90:f1:4c:29:6f:ed:
7d:1f:84:ce:42:22:d7:1e:9c:ad:b2:f4:b2:19:dd:
cc:30:c6:a1:e1:fa:5d:72:02:6d:ed:9e:57:5b:9e:
70:e8:c7:a3:b7:08:a4:c5:90:49:ba:5a:9b:e3:bc:
41:dd:68:01:23:99:c4:af:64:4f:31:c6:46:eb:4f:
47:f2:d1:85:40:70:a2:7a:8d:65:b0:c8:d1:1e:23:
17:b0:98:f8:8b:43:64:24:c1:50:dc:6c:6e:9d:ea:
8e:29:02:a4:1e:da:88:bc:30:ac:4f:19:2f:03:fa:
3e:dd:6e:a2:65:be:80:77:e6:61:8c:56:a8:14:9e:
1b:86:65:55:d9:51:c4:43:4f:85:9a:07:81:a6:b8:
73:5b:56:e1:c4:39:f5:3a:ee:f7:51:fc:58:91:d2:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:A0:92:19:27:06:83:86:FE:14:C0:8B:81:4C:7E:A2:E3:F8:95
X509v3 Authority Key Identifier:
keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/koOgkhknBoOG_hTAi4FMfqLj-JU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:be:29:00:45:bd:ce:88:29:88:8b:d7:92:ac:c6:7f:3f:df:
70:c5:db:fb:7b:e9:69:da:c8:b0:3b:f8:18:30:62:77:93:1b:
5e:f9:3d:8a:e9:fb:2b:1d:49:cf:70:1c:c6:26:0c:33:3a:52:
73:02:88:6c:b6:06:be:94:57:f5:8d:f6:16:13:72:b1:7a:e3:
75:8f:24:00:6f:e2:4f:86:40:de:3d:11:27:02:2b:88:2f:33:
6f:5f:e8:0a:f8:fb:d5:21:a8:3e:94:c2:0c:d4:7c:3c:c3:a6:
5a:11:de:5b:67:4e:d8:79:71:8f:97:5f:1f:24:bf:98:43:e0:
53:50:93:42:23:56:8d:ae:e6:49:a3:0b:d0:53:b9:07:c9:5f:
78:18:ef:94:73:69:31:16:4b:25:34:c4:a8:40:94:d3:42:ca:
67:96:ab:bf:d3:e5:4c:33:a9:ba:e3:a3:a8:2b:b9:35:e6:ad:
e7:ef:73:3a:2e:7d:ff:46:d6:21:df:9c:d1:c9:20:6b:ff:32:
02:40:cd:8f:b6:20:61:9d:d9:5c:4d:c0:1c:2e:c4:53:48:83:
42:e3:09:76:91:6c:36:88:d5:b0:cc:19:4f:ad:76:66:0b:54:
91:3a:13:15:4f:01:ee:c5:d6:66:f2:be:ab:72:43:b8:00:ef:
6a:9d:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org