Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/foirDX-X2wUCLwl5x2z_yzjxUx4.roa
File: foirDX-X2wUCLwl5x2z_yzjxUx4.roa (raw, json)
Hash identifier: MLAnocDAd4GR8DUX5GYPswHMMzhKAeliWh/7Zzb2tnU=
Subject key identifier: 7E:88:AB:0D:7F:97:DB:05:02:2F:09:79:C7:6C:FF:CB:38:F1:53:1E
Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial: 101C
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/foirDX-X2wUCLwl5x2z_yzjxUx4.roa
Signing time: Fri 19 May 2023 05:55:23 +0000
ROA not before: Fri 19 May 2023 05:55:23 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137806
IP address blocks: 103.114.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4124 (0x101c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Validity
Not Before: May 19 05:55:23 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=7E88AB0D7F97DB05022F0979C76CFFCB38F1531E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:80:76:f0:a9:47:2e:70:cb:93:7d:15:85:
10:b2:a9:23:6b:01:7f:62:43:16:b4:fa:78:c8:1d:
e5:cf:e3:de:8d:99:26:86:3c:7b:19:99:53:57:ee:
63:9d:f1:6c:5d:12:1f:e5:f8:62:25:16:51:a5:15:
06:cb:0a:ab:b7:03:7a:d0:27:7e:0e:4d:cb:cf:88:
13:5f:60:73:c3:fc:c0:df:ee:a5:10:49:69:7e:07:
d6:f3:77:d1:ff:32:82:ea:05:0a:63:48:72:48:f4:
60:b8:34:31:f0:db:7d:56:40:c5:41:7a:eb:03:9a:
f5:07:bd:e4:04:04:22:2c:57:66:01:96:8a:a8:3f:
12:da:1b:69:97:ae:23:94:8a:7c:1c:95:c4:9a:8f:
b3:b6:60:ee:1a:ae:05:2b:8e:e6:3c:34:0d:7e:14:
a9:12:ea:fe:45:bd:f3:07:f3:5e:e1:5d:c4:b4:15:
2d:b2:e5:8d:e5:0f:40:50:e5:54:b2:ca:6e:eb:86:
ee:80:b2:ff:33:89:50:14:0f:d2:e3:e2:15:6c:74:
78:37:ce:de:79:ad:8a:9b:45:0d:ff:0b:9d:d1:aa:
4c:52:07:94:5e:ae:db:25:2e:85:2f:59:49:02:aa:
c9:7e:56:eb:0e:dc:03:b7:6a:cd:52:06:bf:05:d6:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:AB:0D:7F:97:DB:05:02:2F:09:79:C7:6C:FF:CB:38:F1:53:1E
X509v3 Authority Key Identifier:
keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/foirDX-X2wUCLwl5x2z_yzjxUx4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:23:a9:93:d3:7f:05:24:8b:74:cd:8c:1b:2e:85:2b:c0:4a:
cf:05:0e:6d:14:0a:1a:d5:6e:5a:f3:4d:58:3e:f5:8e:40:ed:
fb:6d:f9:7e:2d:2d:d2:b7:35:21:01:a3:d2:7c:46:bb:91:96:
f5:af:6f:23:24:87:6b:77:22:b3:0b:b0:71:e9:e0:67:3c:35:
ff:10:9b:e9:a2:f7:7b:51:46:d4:bb:e8:7b:b5:36:ea:69:57:
a4:15:12:e4:9c:28:25:49:d7:63:73:d5:a1:42:c8:87:10:f2:
b9:49:38:73:f6:ca:79:37:7d:cb:2c:07:20:59:05:cf:3b:9e:
3f:56:b4:f2:bf:8e:b5:98:ef:19:8c:0d:7a:27:88:de:77:1d:
79:3e:18:ac:cd:cf:81:c3:f2:7f:19:23:98:f4:dc:b9:a6:7d:
ab:0c:a8:79:a4:b0:d7:ca:b1:f6:fa:c5:a2:dd:62:53:82:6a:
c6:37:72:f4:a1:c1:64:33:a7:30:da:98:9d:88:4f:22:de:be:
c2:ff:34:e1:85:d2:da:91:e7:13:8e:af:85:af:72:15:81:55:
39:bf:8f:e0:5c:fe:33:51:19:97:a9:0f:65:d4:4c:59:ac:c7:
3f:f2:f6:80:4e:15:b6:1b:3b:ef:cc:0a:6c:e8:e7:15:bc:a8:
52:d2:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org