Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/ySph6zruK3edpPNk2XAWZtxgGNQ.roa
File: ySph6zruK3edpPNk2XAWZtxgGNQ.roa (raw, json)
Hash identifier: iYrN/ICzrbAotfsvDybmtlj/u6nQodvvyjGUic4o0s8=
Subject key identifier: C9:2A:61:EB:3A:EE:2B:77:9D:A4:F3:64:D9:70:16:66:DC:60:18:D4
Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Certificate serial: 06DF
Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ySph6zruK3edpPNk2XAWZtxgGNQ.roa
Signing time: Thu 18 May 2023 07:24:06 +0000
ROA not before: Thu 18 May 2023 07:24:06 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137768
IP address blocks: 103.131.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Validity
Not Before: May 18 07:24:06 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C92A61EB3AEE2B779DA4F364D9701666DC6018D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:43:7e:86:e2:00:32:91:5f:b4:07:d1:b2:5c:
06:db:d2:5c:1f:14:e8:bd:44:3e:ba:d7:cf:28:e3:
9f:6a:6e:ca:16:2c:bb:4c:3f:3f:73:f6:73:0d:70:
04:66:df:85:78:a6:71:5b:64:9e:8f:44:b3:b1:04:
ee:85:48:fd:9a:d1:3a:95:e3:23:b8:15:67:b9:57:
14:2b:52:73:02:9c:5c:46:ab:5a:14:8a:09:1a:b4:
66:09:a9:7b:9a:29:8e:11:ac:b1:b1:5f:f1:59:0a:
31:b9:14:df:21:ad:d1:ae:c9:6d:a5:6c:f6:bd:21:
4e:1c:0d:32:85:f8:d7:e9:90:d2:b6:83:ec:66:67:
ca:92:2c:1d:59:de:4d:c5:62:c3:2c:79:a5:34:cc:
6b:6f:6a:9b:00:5e:7b:c6:c3:af:25:6e:14:fa:10:
32:ef:b2:18:c9:45:49:ca:27:71:2d:e6:93:c4:5f:
0d:e4:af:67:99:30:8c:cb:e0:40:e7:23:24:fe:40:
d7:21:22:97:f5:c0:bb:e8:d4:dc:82:56:ff:03:13:
b9:69:74:54:ae:e7:d8:06:91:0e:da:45:5b:7c:e5:
27:50:65:25:9b:92:1f:a0:e3:7d:a6:55:b2:a7:f2:
cd:7a:f1:67:af:06:e0:e0:02:c1:0c:1b:4f:b0:33:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:61:EB:3A:EE:2B:77:9D:A4:F3:64:D9:70:16:66:DC:60:18:D4
X509v3 Authority Key Identifier:
keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ySph6zruK3edpPNk2XAWZtxgGNQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3d:60:a6:54:c1:65:06:14:69:fa:f4:2f:cb:a5:c7:5a:4c:
1b:07:11:6c:22:6d:05:36:1a:b0:5b:eb:6a:0c:47:90:06:e7:
a2:34:47:6e:75:30:fd:ac:af:6e:cd:b0:e7:27:36:36:e7:20:
41:4d:13:88:8d:12:0c:58:80:87:8d:6d:bf:ae:6a:c0:00:03:
1d:a4:b4:cb:f2:dd:76:dc:ab:8f:a6:06:66:af:52:d0:04:79:
ec:bc:9c:7b:e4:52:e6:6f:ee:1c:ac:6c:3f:9a:0f:2f:21:2a:
b7:7a:53:c3:9f:ec:07:2c:56:a9:90:65:76:03:fa:f8:3d:16:
f2:5d:b2:96:57:fe:b6:d0:f3:12:0c:fe:58:68:83:6b:86:fa:
08:b4:89:ca:d5:e0:d3:42:e0:7c:0a:54:a9:31:66:8b:57:21:
bd:68:15:a0:2b:9c:9c:5c:f5:56:03:83:93:03:56:ed:f8:9c:
2b:e1:cd:2f:95:34:52:f1:88:37:60:2f:f8:a7:40:bb:71:53:
6d:66:ee:a1:3a:ef:ba:1a:c7:85:9f:60:5d:8b:34:bd:30:fe:
b7:53:59:94:c4:ab:c8:46:1c:de:2e:f2:f9:27:0e:91:8e:6c:
d3:a1:ab:62:b1:da:4a:c6:da:54:9c:5c:23:b5:0a:c4:f7:21:
49:3c:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org