Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZJRRay1M2PIbvyaDhYZHnZoBOlM.roa
File: ZJRRay1M2PIbvyaDhYZHnZoBOlM.roa (raw, json)
Hash identifier: ZZXwTCr3U7vkDpP7rpuHcEnQUc6F0lKjXRAPp9pldz4=
Subject key identifier: 64:94:51:6B:2D:4C:D8:F2:1B:BF:26:83:85:86:47:9D:9A:01:3A:53
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 0FED
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZJRRay1M2PIbvyaDhYZHnZoBOlM.roa
Signing time: Wed 24 May 2023 03:53:58 +0000
ROA not before: Wed 24 May 2023 03:53:58 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137797
IP address blocks: 103.116.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4077 (0xfed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: May 24 03:53:58 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6494516B2D4CD8F21BBF26838586479D9A013A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:6a:09:f8:d1:34:83:b0:89:ae:34:14:52:
70:92:cf:8d:a8:15:1d:76:89:16:0c:db:f5:ad:83:
ff:b3:4f:aa:87:c4:2f:2a:cd:26:4a:68:4b:78:86:
39:32:5b:f4:19:c9:3a:50:0e:2f:87:0e:08:3d:07:
21:61:65:b3:9c:b6:18:50:7b:f0:88:ef:19:c9:f6:
13:b6:97:11:2b:5d:06:26:43:e7:7b:f4:20:d6:ee:
ba:bd:51:3f:08:2a:77:59:fd:a3:b6:a7:9b:82:78:
ac:c3:af:96:1d:5c:06:f7:cb:d1:ae:c9:f1:6a:2b:
0f:00:2b:7b:fc:47:0c:02:d6:31:f3:16:ba:87:33:
66:b0:ea:ba:a3:23:e0:78:b8:91:62:be:f3:51:97:
32:9e:d4:9c:e7:a8:e3:40:86:f4:cb:22:c9:89:51:
80:5e:c2:66:ca:24:c1:2b:c0:31:a3:42:7d:0a:cf:
13:2f:7a:75:05:f9:8b:a1:83:1b:76:1b:93:3b:bf:
5b:87:e3:0b:90:a7:c0:a0:35:bf:e2:43:7f:d6:21:
2d:2a:07:0a:d7:e4:86:a1:6a:ee:c8:dd:cc:85:c9:
05:b6:72:a9:f1:aa:b9:1e:59:79:55:bf:1f:40:d4:
f5:0a:dd:2b:40:d0:a7:99:2c:35:e7:67:bd:89:36:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:51:6B:2D:4C:D8:F2:1B:BF:26:83:85:86:47:9D:9A:01:3A:53
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZJRRay1M2PIbvyaDhYZHnZoBOlM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:71:62:32:a7:13:8a:6d:ce:fe:f5:ec:c1:da:01:61:11:fb:
84:49:09:8a:f9:c9:a5:09:d6:ee:6e:91:83:f6:f5:91:42:37:
ce:9e:1b:9c:61:eb:0f:6a:9a:b8:d2:d5:fa:e6:8e:b3:fe:a3:
6c:e1:c8:13:60:36:a6:63:2e:10:b6:52:e7:b4:7a:35:4a:b4:
ea:86:68:05:57:51:af:c4:f5:92:7a:2b:3f:de:a8:b7:a0:54:
ec:3b:ba:b5:67:59:e9:fb:14:16:6e:ed:8d:da:18:c7:52:70:
64:ee:06:2e:09:5b:d5:d3:72:f5:4a:52:b5:93:9a:a3:42:53:
5b:40:3d:f5:83:0e:8f:ce:f1:24:48:43:f2:51:0e:f7:53:11:
d6:d3:df:42:cf:a7:e0:ff:96:e8:ba:77:27:eb:a5:01:0f:73:
f6:de:3b:ca:8c:48:f8:06:f6:77:06:8b:8d:b5:23:80:a1:ce:
b3:3b:c5:b9:5f:1e:72:6d:34:79:6e:95:76:be:f7:50:48:2e:
b7:79:4a:c6:7e:e3:b4:f7:36:8f:51:74:65:df:2b:99:be:88:
89:e9:9a:f9:63:d9:da:97:19:12:2c:33:97:e7:83:7f:94:89:
a7:4e:81:78:61:8b:61:49:a8:db:80:21:e9:bf:97:8f:08:b9:
3c:80:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org