Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/riolJ5f71ssgEI3o2MMKMGyrdsg.roa
File: riolJ5f71ssgEI3o2MMKMGyrdsg.roa (raw, json)
Hash identifier: WbK94jlSXZrwP0lazVLvHoksCYya7pqbfNIYy/NfM6Y=
Subject key identifier: AE:2A:25:27:97:FB:D6:CB:20:10:8D:E8:D8:C3:0A:30:6C:AB:76:C8
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 3E50
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/riolJ5f71ssgEI3o2MMKMGyrdsg.roa
Signing time: Fri 19 May 2023 05:54:05 +0000
ROA not before: Fri 19 May 2023 05:54:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 9392
IP address blocks: 103.122.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15952 (0x3e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: May 19 05:54:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=AE2A252797FBD6CB20108DE8D8C30A306CAB76C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:fa:6b:02:13:4d:e4:5b:35:97:40:ad:e7:
f5:91:fa:ab:1a:4c:01:a7:f2:b6:68:37:c5:ae:8f:
35:30:14:79:e1:34:35:2c:ba:06:d0:79:11:31:9d:
92:85:c4:6d:cb:16:79:7a:38:83:0a:4c:28:27:2c:
6f:de:93:5a:63:65:84:7c:bf:9c:4a:4d:e4:86:63:
7c:2c:e9:ab:82:3d:0e:11:70:59:a1:10:2a:2b:87:
83:1a:4e:17:c7:5b:b2:17:86:34:90:b6:db:1a:bd:
0c:a8:7a:9d:5a:ec:1b:e7:41:75:f2:8d:94:05:29:
24:08:c0:e6:eb:1c:f0:8e:2e:a9:41:da:3e:e3:6f:
c3:d1:29:a7:cd:91:61:97:63:b8:a3:a2:00:2d:0a:
3a:ab:66:24:e0:17:38:af:ab:8f:98:2a:32:c9:75:
5a:41:1c:06:69:34:50:0a:a4:16:21:e9:79:52:b5:
a5:f8:df:b3:d0:97:5e:83:77:71:0c:79:a2:e5:36:
1d:ea:39:bb:18:7f:6a:71:d7:17:79:03:1f:01:b7:
3e:b2:0e:d9:ea:28:0a:ae:f6:04:2e:c6:fb:35:54:
22:03:a4:76:54:fd:3f:bd:34:77:24:43:35:e6:aa:
73:91:16:0f:aa:e9:26:52:8d:3e:51:98:b8:ce:69:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:25:27:97:FB:D6:CB:20:10:8D:E8:D8:C3:0A:30:6C:AB:76:C8
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/riolJ5f71ssgEI3o2MMKMGyrdsg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.240.0/24
Signature Algorithm: sha256WithRSAEncryption
08:53:1f:ad:41:d1:90:ba:f6:2c:39:7a:a0:49:5f:26:bb:4a:
50:bf:d7:e7:71:ce:49:3f:98:a6:38:1c:7b:01:60:b2:4f:68:
c1:4c:73:6d:3b:9c:9d:7d:e3:6b:ac:e7:91:fe:30:6b:83:93:
8f:0b:23:6e:27:25:7d:53:7f:be:e7:4f:ff:e8:25:c0:33:82:
f8:57:fe:e5:99:8f:28:c3:d1:5a:46:27:56:99:87:35:d9:39:
bd:49:8d:82:e7:0e:d7:70:ce:de:a5:af:93:8a:4c:2b:17:ff:
83:b0:a8:1e:e2:ab:43:51:a0:8b:b0:67:43:c0:18:01:c4:5c:
75:8c:5e:39:16:96:9f:19:bb:5f:2b:c5:6e:ee:38:ec:1b:d8:
57:ea:e3:6f:ef:30:30:ce:a0:4b:65:a1:ba:83:27:88:6a:25:
e9:c6:79:a8:d7:6d:97:8f:59:04:5b:58:6c:67:9d:08:19:23:
cd:ed:e9:b2:dc:c9:3f:17:ea:0d:0a:35:ec:28:2b:6a:24:cf:
01:52:4a:1e:3b:6f:45:61:ff:69:0a:51:41:7e:7d:0f:33:fd:
fc:f0:d8:58:56:3a:4c:1e:a5:d0:c8:03:73:86:fc:d3:fe:64:
f5:ef:62:5c:85:4c:72:c5:a4:9c:0e:f9:dd:1f:4e:0e:53:3e:
e2:f9:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org