Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/pnmqtlhitTLOENTprB1Z4HepwTw.roa
File: pnmqtlhitTLOENTprB1Z4HepwTw.roa (raw, json)
Hash identifier: RqnJvmdFqMqIHWH2xG4OEpSGn2sEidvaV8zGOF8Ldy8=
Subject key identifier: A6:79:AA:B6:58:62:B5:32:CE:10:D4:E9:AC:1D:59:E0:77:A9:C1:3C
Certificate issuer: /CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C
Certificate serial: 03
Authority key identifier: 3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/pnmqtlhitTLOENTprB1Z4HepwTw.roa
Signing time: Fri 14 Apr 2023 07:14:24 +0000
ROA not before: Fri 14 Apr 2023 07:14:24 +0000
ROA not after: Sat 13 Apr 2024 07:10:54 +0000
asID: 21859
IP address blocks: 103.116.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 07:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C
Validity
Not Before: Apr 14 07:14:24 2023 GMT
Not After : Apr 13 07:10:54 2024 GMT
Subject: CN=A679AAB65862B532CE10D4E9AC1D59E077A9C13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:26:8d:2a:03:4f:b2:c0:4d:a8:8a:d4:89:
a1:db:80:78:e1:9f:8a:32:88:72:af:c0:e4:db:aa:
ae:ac:68:e3:65:ae:32:f1:90:2f:74:81:68:3c:52:
4d:c8:78:31:f8:ab:8f:2b:59:5d:e0:80:5d:7c:be:
63:5a:46:50:51:53:8e:d6:4f:23:12:bf:9a:f3:94:
b6:ae:42:3f:2a:c1:7d:59:30:e0:97:ef:09:db:d6:
44:26:d1:9b:24:00:7b:5a:3e:6b:46:0f:53:38:c9:
d3:ec:b4:97:ac:db:64:bc:f0:b9:f7:38:fd:fb:b3:
51:9c:65:cc:c4:5e:60:00:40:f1:b1:bf:78:17:36:
18:36:dd:f3:86:2e:fe:f3:74:de:c6:c5:8c:d4:dd:
00:89:15:ee:db:ce:5a:68:2b:b9:ab:5e:20:34:b3:
2c:38:4d:a3:bf:c3:52:a0:c9:41:ab:bc:b4:5b:b4:
62:a5:63:06:9b:4e:69:34:d2:91:92:d1:26:e8:86:
95:1e:3b:9b:b0:da:1f:bb:4f:36:af:ef:b2:0f:46:
1c:fb:b6:a8:fb:cd:34:3c:84:9a:e7:68:7d:9e:b9:
19:a6:a8:65:3c:b4:07:35:0e:88:75:f6:d8:97:b3:
27:b8:31:63:11:74:2c:a0:0f:ed:19:74:cb:00:21:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:79:AA:B6:58:62:B5:32:CE:10:D4:E9:AC:1D:59:E0:77:A9:C1:3C
X509v3 Authority Key Identifier:
keyid:3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/pnmqtlhitTLOENTprB1Z4HepwTw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:98:c3:f3:3c:34:23:00:30:53:e2:c3:a0:b0:5e:3b:53:c0:
26:47:61:05:d2:c8:af:5a:77:2f:9c:70:75:f6:b4:15:e6:70:
10:bf:d2:25:76:d4:30:b2:f3:d2:f9:66:3a:64:a3:a5:a0:41:
4d:05:fa:85:d9:51:4c:5f:06:d6:14:4b:2a:1b:6d:24:79:70:
bb:2b:ea:4c:9b:98:96:cc:11:bd:8a:ae:41:88:72:d3:80:58:
2e:41:1a:9a:ec:61:db:6f:f0:2e:9e:6c:93:29:5b:2c:6f:e8:
bb:91:6f:d5:f0:3a:db:0c:c1:5f:1d:de:e3:56:c6:64:78:e5:
a8:58:1b:46:c0:4a:26:dd:cf:50:78:e7:51:b2:7d:bf:7e:d5:
49:ee:2b:9b:3e:35:a3:02:ba:ed:24:5b:f2:61:f0:9a:52:21:
fc:e9:fd:11:ed:53:72:6f:ce:c3:32:18:34:fc:ce:a5:17:5a:
e2:88:03:2b:ec:10:4d:9e:80:3f:53:23:3c:89:f3:0d:a7:b7:
e0:9c:35:69:cc:07:bc:24:fe:e2:6a:a8:d2:f5:ea:58:b4:dc:
31:21:c6:80:1f:2d:a4:c4:07:5f:11:71:0f:5a:10:73:58:5b:
b0:dd:a5:6a:fb:11:ec:4c:d2:20:d2:3a:03:24:c5:62:3b:d3:
37:90:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 08:43:33 2024 by rpki-client on console-fra.rpki-client.org