Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/xzGELDW16MgOqcmcaArYYnYBEFA.roa
File: xzGELDW16MgOqcmcaArYYnYBEFA.roa (raw, json)
Hash identifier: CIWx2KCOWOkTwDt0KqspF7xbiTp4Ecf0V6EvAEkZ0Lk=
Subject key identifier: C7:31:84:2C:35:B5:E8:C8:0E:A9:C9:9C:68:0A:D8:62:76:01:10:50
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 3E4F
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/xzGELDW16MgOqcmcaArYYnYBEFA.roa
Signing time: Fri 19 May 2023 05:54:05 +0000
ROA not before: Fri 19 May 2023 05:54:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 9392
IP address blocks: 103.122.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15951 (0x3e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: May 19 05:54:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C731842C35B5E8C80EA9C99C680AD86276011050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:5e:85:45:65:b7:a7:0b:de:38:4f:af:7a:
54:1a:94:77:f5:ce:a4:fb:37:a5:a5:46:51:62:e1:
e3:79:16:ed:52:17:72:f7:50:a6:2e:91:16:e1:5f:
8c:94:62:f4:ab:15:fa:d0:17:65:dd:a6:60:c6:cf:
4f:ea:12:a0:59:2d:53:0d:8c:3c:b5:6f:8c:bc:79:
c5:2e:88:a2:a9:2f:d7:ea:38:ad:80:d2:3e:eb:f9:
04:c5:a8:16:e3:80:7e:7e:43:94:d8:29:b3:b5:a9:
f3:8a:67:eb:97:68:b7:1e:35:4f:94:72:d1:23:e8:
28:87:02:62:d1:ae:ac:ce:25:13:96:48:59:ea:14:
43:60:5d:98:1b:34:91:80:1f:95:43:03:ab:b6:84:
0a:40:f5:1a:43:46:02:4f:e7:8d:f9:83:ab:6c:57:
91:e2:f8:71:f2:f2:7f:35:60:f3:ab:89:3c:d5:43:
03:e9:87:11:40:fc:fc:92:3a:60:0f:35:a9:68:1a:
40:7c:53:7c:a0:73:76:8e:fb:24:5d:68:8d:3b:f1:
11:a7:f1:ca:4f:53:71:3b:a1:7d:8c:cd:d0:18:d7:
92:fa:fd:a6:2b:ee:40:37:f9:ca:a3:7f:2f:b8:32:
36:6b:e6:11:9f:d6:55:0e:09:f9:32:d8:bd:50:47:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:31:84:2C:35:B5:E8:C8:0E:A9:C9:9C:68:0A:D8:62:76:01:10:50
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/xzGELDW16MgOqcmcaArYYnYBEFA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:92:70:ce:f9:0b:3d:ea:ff:55:4f:ef:e5:33:4a:e3:cb:82:
ce:d2:3e:4a:7b:cd:59:8c:69:2a:53:77:24:43:4f:bb:cb:f9:
a9:93:de:07:d1:96:f8:76:d0:6a:c8:0c:32:43:c2:3a:17:90:
a9:59:40:1c:95:cc:ff:41:20:7b:6e:e9:2f:84:74:dd:b1:cd:
0b:d8:a3:41:52:3c:7d:33:e1:7b:73:a3:0c:f1:9f:de:a7:69:
b8:4d:b2:31:34:f9:7e:0f:bd:7a:98:44:9a:23:e6:42:67:7c:
50:d1:f1:2f:dd:1b:14:41:51:1f:60:2c:a7:85:6f:d9:9c:51:
d4:1a:ed:28:9f:77:4c:d9:f1:9d:2c:fc:2b:7b:61:14:25:49:
fe:f2:f1:96:0c:a9:7d:22:83:8a:c8:81:88:11:9d:9a:d9:d4:
2b:a9:a9:09:2d:1b:23:1c:dc:11:4b:94:5b:42:b9:38:10:27:
06:bf:b0:06:84:7f:0c:3c:06:97:90:01:82:4b:5e:fe:a9:61:
ce:6d:e0:20:79:9c:cc:45:00:e9:66:3b:3e:85:57:a4:6d:6e:
8b:f8:fc:e6:f6:df:79:c0:e2:5d:ca:a1:12:6b:33:df:fb:95:
07:2e:8d:79:e0:aa:c1:48:ec:5c:ee:68:60:b4:db:f9:9f:11:
b2:f0:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org