Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/64jMI54FXy5p65qb4oTFrhtezzM.roa
File: 64jMI54FXy5p65qb4oTFrhtezzM.roa (raw, json)
Hash identifier: V5j98rvpFda7EVRQBASy7E2wSekvt5RMq/zP4HG0GCc=
Subject key identifier: EB:88:CC:23:9E:05:5F:2E:69:EB:9A:9B:E2:84:C5:AE:1B:5E:CF:33
Certificate issuer: /CN=DEE08F5287F669313CE6990F117401B179848AE1
Certificate serial: 1017
Authority key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/64jMI54FXy5p65qb4oTFrhtezzM.roa
Signing time: Tue 23 May 2023 03:54:54 +0000
ROA not before: Tue 23 May 2023 03:54:54 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137720
IP address blocks: 103.120.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4119 (0x1017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE08F5287F669313CE6990F117401B179848AE1
Validity
Not Before: May 23 03:54:54 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=EB88CC239E055F2E69EB9A9BE284C5AE1B5ECF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:7a:54:1e:94:35:d0:4c:ba:6d:3b:08:d3:
41:e4:67:62:60:d3:71:57:b4:19:6e:e7:4f:c2:c0:
f7:d9:70:36:01:b7:ad:9c:90:cb:13:7e:68:29:f4:
e1:6d:f2:fe:e6:d9:a8:fc:b7:60:cc:be:b4:73:7e:
21:7d:82:41:ac:60:97:00:5c:15:37:6f:bf:43:96:
a1:f9:9d:e3:50:dd:42:f3:b7:96:b6:34:26:bb:08:
e2:aa:eb:e1:d1:1c:54:7e:2e:6a:a7:c8:53:fa:b6:
e8:7c:e7:0d:1c:97:99:c2:55:7c:b5:3b:b0:2e:77:
83:84:a5:07:91:2f:5f:b7:85:b2:f9:11:07:81:23:
72:eb:ac:ba:25:7a:7f:86:0a:f0:95:38:06:d1:f1:
93:d7:95:69:4d:56:c3:da:98:e1:07:cd:3e:c7:23:
19:1b:cc:a7:5c:e8:48:7f:20:c2:1b:80:04:41:49:
8c:28:0d:18:21:0b:ed:6e:8b:8c:75:30:c3:7c:39:
da:53:10:fc:42:b1:1c:a1:d0:18:0c:d2:c6:0c:f5:
0d:e9:fa:0d:7d:7f:a9:d7:09:f7:66:e9:29:b1:27:
de:ba:4e:34:d3:0b:ca:01:a0:eb:5c:e2:ab:1b:58:
c9:e8:8f:45:f4:81:6a:aa:19:a2:85:38:82:1c:0a:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:CC:23:9E:05:5F:2E:69:EB:9A:9B:E2:84:C5:AE:1B:5E:CF:33
X509v3 Authority Key Identifier:
keyid:DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/64jMI54FXy5p65qb4oTFrhtezzM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:83:f1:15:4a:a1:66:04:15:a0:5c:18:25:80:d0:0c:8d:af:
45:7f:e5:5c:39:3b:8a:47:c3:67:29:2f:ca:a7:35:37:b4:a4:
df:c2:a7:04:af:6d:dc:98:0c:8a:ff:04:c7:5b:f9:7b:36:ed:
ba:10:18:19:6b:c4:1d:a1:91:31:ce:83:98:bd:2e:54:b5:8a:
9f:19:e5:72:7d:4a:f4:9d:e0:71:08:21:76:dd:62:6f:e0:30:
88:02:d9:e2:a8:c8:a6:54:46:0e:9d:41:3d:06:73:ce:a9:96:
a3:7b:37:aa:55:6d:93:6a:75:12:28:c3:a2:e9:70:bb:dc:2d:
48:9d:cc:8e:b0:d4:81:98:d0:a0:de:43:2d:90:e7:e1:6a:66:
60:dd:07:62:9f:a1:cc:6d:fc:d2:6b:3f:2c:89:10:e2:e6:c7:
a4:b9:72:2d:9c:c8:68:a9:a5:96:29:89:77:24:50:93:67:5f:
fc:08:08:5f:94:cb:00:c8:b8:7d:ea:fb:bf:68:4d:aa:d6:6b:
ae:df:1e:e2:3e:79:0e:68:79:20:f8:0f:bd:5c:fc:06:84:59:
68:55:c8:8c:4e:d3:5f:44:df:8e:ed:35:5a:21:9f:e0:c3:c3:
65:cd:29:c6:3a:e2:60:4e:53:2b:43:17:34:8e:e6:c2:d0:e8:
13:62:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org