Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2779/EyQn5BMtECy82CCm2WshIAjEWv8.roa
File: EyQn5BMtECy82CCm2WshIAjEWv8.roa (raw, json)
Hash identifier: 8dJUXkaet347gqanZygx0jRtTFjPAtiKFUZFhZuwHhM=
Subject key identifier: 13:24:27:E4:13:2D:10:2C:BC:D8:20:A6:D9:6B:21:20:08:C4:5A:FF
Certificate issuer: /CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Certificate serial: 070A
Authority key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/EyQn5BMtECy82CCm2WshIAjEWv8.roa
Signing time: Wed 07 Dec 2022 07:12:54 +0000
ROA not before: Wed 07 Dec 2022 07:12:54 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 21859
IP address blocks: 103.119.28.0/24 maxlen: 24
103.119.29.0/24 maxlen: 24
103.119.30.0/24 maxlen: 24
103.119.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Validity
Not Before: Dec 7 07:12:54 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=132427E4132D102CBCD820A6D96B212008C45AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:15:90:11:ba:2f:13:2b:85:43:1e:ce:0b:
01:b5:96:1a:ad:4e:28:58:86:b7:80:14:5a:5e:44:
0e:b0:8f:52:ff:70:f1:18:71:76:9d:08:fa:e1:42:
91:f3:5f:02:d5:c5:8f:62:4c:9b:5d:bc:f0:fe:41:
65:49:ab:40:21:f6:4e:3c:be:b1:b6:1c:a0:9b:55:
ec:95:6e:f1:7b:07:6a:ef:be:58:19:f9:49:a4:dd:
51:96:74:5b:ec:27:fb:bc:fc:b7:ca:09:64:f6:f7:
4e:60:25:8f:4a:85:dd:9e:c2:e5:d7:2f:38:03:03:
7a:ff:d9:07:88:ab:6a:44:53:b6:84:a7:05:2a:cd:
c0:a6:cc:df:b2:4d:b5:5c:60:90:1b:37:86:04:70:
26:ba:ad:a8:b3:4d:0e:8b:f0:4b:2c:ca:0c:03:95:
9b:39:01:73:e0:6e:76:78:02:07:7f:11:d5:e1:eb:
ff:dd:a9:49:46:1d:3e:00:a1:24:70:cb:47:b0:cf:
86:63:5a:f3:04:ba:e8:a2:e4:ba:18:aa:4a:8c:75:
ce:cf:d1:49:66:bb:d8:fc:58:7e:3c:a7:04:9d:5c:
5e:96:7c:46:d3:1a:03:e0:67:ff:33:1c:d1:57:cb:
fd:5c:fe:12:07:61:ca:71:d3:ba:a4:3c:08:23:e6:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:27:E4:13:2D:10:2C:BC:D8:20:A6:D9:6B:21:20:08:C4:5A:FF
X509v3 Authority Key Identifier:
keyid:1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/EyQn5BMtECy82CCm2WshIAjEWv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e8:86:27:9a:3d:d9:ac:bc:15:27:ee:4f:50:c1:ff:42:09:
4c:a0:77:1c:18:28:5b:25:92:d4:2a:0f:80:f0:2e:f0:e9:ba:
53:7b:e7:6d:03:15:70:80:b6:09:05:d4:c1:32:d6:c9:b2:e6:
4c:56:ab:de:d0:28:4f:21:80:85:6f:da:f8:aa:f4:e7:f3:af:
39:4f:90:76:9a:a5:98:50:3a:98:6c:31:11:73:6d:80:2e:99:
e3:fc:5d:5b:e7:84:6f:48:8d:1c:8b:2c:97:93:29:fd:5c:2a:
ec:57:1d:09:f3:91:52:89:24:a0:cf:6f:45:19:c8:57:b1:79:
09:3d:54:48:42:9d:89:38:ab:65:e5:30:44:71:4c:af:2a:23:
a4:e8:4a:ee:54:2d:05:45:26:95:c3:9e:7c:62:9c:e2:ac:a3:
4a:5c:d3:f6:59:29:b9:c2:ec:f6:02:3d:16:7d:d1:d1:a7:92:
ac:b6:02:6d:a8:ee:f4:f9:e6:3a:3e:e8:af:c2:26:36:64:c1:
ee:0a:97:de:92:18:28:71:70:aa:0e:07:b9:d3:f5:0f:2f:30:
7e:8f:e5:2c:a6:c7:50:4f:41:11:8d:63:be:ca:54:c5:8e:06:
56:4d:8f:45:a3:c2:5c:b3:33:7e:d9:78:84:2f:cc:99:d5:3b:
b9:81:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org