Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/k05GbN_cW3p1aGKOi2K6N4kQa1k.roa
File: k05GbN_cW3p1aGKOi2K6N4kQa1k.roa (raw, json)
Hash identifier: 1E3dDN0cb3Yb9/YGDJEHwULoDjsdG/+I1NMhy0JnhvI=
Subject key identifier: 93:4E:46:6C:DF:DC:5B:7A:75:68:62:8E:8B:62:BA:37:89:10:6B:59
Certificate issuer: /CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Certificate serial: 06E1
Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/k05GbN_cW3p1aGKOi2K6N4kQa1k.roa
Signing time: Thu 18 May 2023 07:24:25 +0000
ROA not before: Thu 18 May 2023 07:24:25 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137730
IP address blocks: 103.124.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Validity
Not Before: May 18 07:24:25 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=934E466CDFDC5B7A7568628E8B62BA3789106B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:96:82:f4:a5:5f:7b:4f:4e:2d:5f:0a:a6:2b:
1f:86:23:a3:fe:b7:a1:48:2c:24:b7:72:db:7d:dd:
44:79:3b:7e:ae:76:25:54:e8:4d:21:28:52:2b:92:
5e:53:42:89:12:af:f9:cf:24:fb:28:84:d2:49:7e:
99:0c:f4:50:a0:bd:0a:a7:23:4b:80:e4:54:28:86:
e4:5a:ec:eb:a2:02:8d:11:ed:52:cf:9c:46:9c:7b:
d8:22:a3:68:d4:85:e9:65:b6:10:d0:c1:07:ba:fc:
11:36:66:45:08:0d:f7:83:08:b7:86:ab:d1:19:86:
c2:34:29:05:95:2e:b4:ce:65:2f:79:f4:83:eb:35:
9b:c0:7d:11:f1:a2:c4:09:9b:f6:c1:96:16:73:8d:
19:c0:08:f6:2a:da:f6:c2:cc:19:d1:26:53:43:75:
47:af:82:c9:17:b7:18:18:c1:ad:88:f0:68:23:02:
ab:9c:ee:87:4f:53:44:63:6b:9d:59:ee:6c:0c:35:
80:c1:a1:82:b3:9f:8a:72:ad:38:5b:9d:d0:80:35:
04:06:c2:e8:85:a4:6b:46:49:5c:16:6b:3d:20:a1:
3f:6c:0a:10:97:29:9a:a2:d0:30:a0:ae:45:7d:df:
0d:1c:cd:13:de:f1:0b:77:ec:46:d0:71:d1:90:53:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:46:6C:DF:DC:5B:7A:75:68:62:8E:8B:62:BA:37:89:10:6B:59
X509v3 Authority Key Identifier:
keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/k05GbN_cW3p1aGKOi2K6N4kQa1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.48.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3a:1b:6f:90:04:2e:c8:13:ef:54:99:96:df:7f:73:8d:c0:
78:a1:32:0a:68:e2:b5:72:64:f1:13:d4:b1:da:e7:8a:9f:4d:
05:bd:bb:20:39:36:3d:33:7b:cf:b8:fb:90:b1:d2:72:00:0d:
8d:24:5e:09:81:85:4d:50:ad:cc:c9:cc:2f:74:78:91:5d:50:
19:f9:13:e8:27:98:58:09:f9:5f:6c:5f:af:d9:0c:6c:a9:ea:
76:96:30:fb:34:51:5c:77:c9:99:b6:ce:94:86:1e:79:ac:0a:
8c:c4:f8:4b:ec:c3:03:aa:89:63:2b:8e:3d:31:9d:a3:c6:7d:
be:e9:0e:23:f2:95:71:fa:86:bd:8a:08:36:45:b7:05:d5:99:
62:1e:eb:bb:27:f4:e9:77:68:fe:14:e4:4e:a2:e5:a5:93:6f:
30:06:a8:e2:34:35:97:9c:23:0f:06:f2:00:51:a3:69:3a:3a:
00:b4:4a:2e:c2:d1:c1:7e:c6:b2:1f:28:eb:4b:4e:94:b3:c2:
52:f3:42:3e:0b:86:5f:ea:37:85:39:61:09:95:8f:cb:93:3b:
54:1e:34:70:b1:e4:76:16:dd:60:22:25:13:6b:a5:ff:e6:b8:
42:48:49:9a:5c:a1:a5:f7:44:ec:50:f1:43:47:dd:69:e4:41:
88:2f:62:65
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjY0
N0RBQjY0NTUxMTY5NjRGQUMwMDAxMkNDQzgzMTc0RDRFNDZFMTAeFw0yMzA1MTgw
NzI0MjVaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDkzNEU0NjZDREZEQzVC
N0E3NTY4NjI4RThCNjJCQTM3ODkxMDZCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD9loL0pV97T04tXwqmKx+GI6P+t6FILCS3ctt93UR5O36udiVU
6E0hKFIrkl5TQokSr/nPJPsohNJJfpkM9FCgvQqnI0uA5FQohuRa7OuiAo0R7VLP
nEace9gio2jUhellthDQwQe6/BE2ZkUIDfeDCLeGq9EZhsI0KQWVLrTOZS959IPr
NZvAfRHxosQJm/bBlhZzjRnACPYq2vbCzBnRJlNDdUevgskXtxgYwa2I8GgjAquc
7odPU0Rja51Z7mwMNYDBoYKzn4pyrThbndCANQQGwuiFpGtGSVwWaz0goT9sChCX
KZqi0DCgrkV93w0czRPe8Qt37EbQcdGQU8OPAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUk05GbN/cW3p1aGKOi2K6N4kQa1kwHwYDVR0jBBgwFoAUZkfatkVRFpZPrAAB
LMyDF01ORuEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgy
My9aa2ZhdGtWUkZwWlByQUFCTE15REYwMU9SdUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1prZmF0a1ZSRnBaUHJBQUJMTXlERjAxT1J1RS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MjMvazA1R2JOX2NXM3Ax
YUdLT2kySzZONGtRYTFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd8MDANBgkqhkiG9w0BAQsFAAOCAQEAFzobb5AELsgT71SZlt9/c43AeKEy
CmjitXJk8RPUsdrnip9NBb27IDk2PTN7z7j7kLHScgANjSReCYGFTVCtzMnML3R4
kV1QGfkT6CeYWAn5X2xfr9kMbKnqdpYw+zRRXHfJmbbOlIYeeawKjMT4S+zDA6qJ
YyuOPTGdo8Z9vukOI/KVcfqGvYoINkW3BdWZYh7ruyf06Xdo/hTkTqLlpZNvMAao
4jQ1l5wjDwbyAFGjaTo6ALRKLsLRwX7Gsh8o60tOlLPCUvNCPguGX+o3hTlhCZWP
y5M7VB40cLHkdhbdYCIlE2ul/+a4QkhJmlyhpfdE7FDxQ0fdaeRBiC9iZQ==
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org