Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/yyV5n1YNAwrHQ3rJSxdlUBgJWFM.roa
File: yyV5n1YNAwrHQ3rJSxdlUBgJWFM.roa (raw, json)
Hash identifier: a6Or4fIpztwzfKyfK0OyHFTq4SL9huOx9+nda3oTZqA=
Subject key identifier: CB:25:79:9F:56:0D:03:0A:C7:43:7A:C9:4B:17:65:50:18:09:58:53
Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial: 0346
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/yyV5n1YNAwrHQ3rJSxdlUBgJWFM.roa
Signing time: Thu 12 Sep 2024 11:14:05 +0000
ROA not before: Thu 12 Sep 2024 11:14:05 +0000
ROA not after: Fri 28 Mar 2025 11:22:23 +0000
asID: 43260
IP address blocks: 103.125.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 13:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Validity
Not Before: Sep 12 11:14:05 2024 GMT
Not After : Mar 28 11:22:23 2025 GMT
Subject: CN=CB25799F560D030AC7437AC94B17655018095853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:5d:68:1c:41:65:54:ce:51:11:10:b3:c2:
b9:60:67:ca:04:fe:da:38:28:21:a0:ad:e1:0e:d1:
5a:89:ae:70:3d:f6:61:9d:8a:9d:ef:dc:05:ce:ef:
5b:da:bb:e3:d4:e8:78:66:24:9d:3f:5d:7f:31:18:
0e:4f:83:39:cd:cb:3b:9d:60:e9:1e:69:b2:ec:7d:
99:d7:fb:03:8f:3a:a8:fc:6f:91:fb:1a:ea:d1:14:
19:65:e5:10:54:fa:87:2a:df:81:a0:0d:fa:95:8b:
ea:59:c1:b0:43:10:c5:34:86:c4:b0:aa:cb:89:29:
bf:3f:12:e5:ca:29:e8:63:68:7c:95:b7:5a:4d:91:
27:ba:ee:e3:26:e6:e1:c6:c4:98:d9:30:f8:72:a4:
31:ac:ab:5b:ae:f7:e8:b6:1c:43:ae:e3:ed:0a:97:
3f:fa:51:dd:d9:0a:23:7d:30:64:72:d7:50:e2:56:
3c:a4:da:b7:93:e9:31:6d:4a:98:10:06:ad:67:cd:
de:d6:fa:82:59:6e:6c:ac:b2:e7:da:bc:2b:06:8c:
30:1b:07:5c:9c:41:db:13:fe:3c:e6:c8:7b:3a:b3:
50:7e:1b:81:e9:f7:2e:55:a7:97:75:a6:65:68:02:
08:eb:23:35:b3:ab:5e:a8:5c:47:48:d7:99:8e:e6:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:79:9F:56:0D:03:0A:C7:43:7A:C9:4B:17:65:50:18:09:58:53
X509v3 Authority Key Identifier:
keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/yyV5n1YNAwrHQ3rJSxdlUBgJWFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
94:89:30:87:26:ca:8e:61:68:c9:d6:04:9d:e6:42:25:73:a9:
ae:96:e6:89:3b:31:db:ac:28:d1:da:2d:b8:54:b0:49:db:ab:
cf:1e:e5:5a:a3:ed:27:f6:0e:8f:68:20:e4:b0:ae:31:8e:9a:
21:75:ff:ea:8a:b3:01:d3:69:f5:98:eb:3f:df:9b:dc:f7:e9:
81:a8:f9:f7:53:0c:84:67:b4:91:ee:08:af:69:45:c2:80:19:
07:f2:d6:bb:00:ed:a9:b8:2a:b4:18:95:45:48:ea:10:fa:2c:
20:f4:64:26:56:dc:51:2b:26:56:e6:9c:e7:06:76:a8:96:5d:
2b:21:92:1f:92:f8:fa:8e:81:97:c2:4d:af:aa:64:26:95:a2:
83:9d:9e:9d:cd:a6:77:06:54:0d:98:46:ae:61:00:2c:81:61:
fa:5d:69:6a:7c:69:f0:23:99:5e:3a:97:2a:62:73:39:ed:60:
eb:19:8d:df:f3:b2:2e:19:3b:fa:02:d3:00:f5:19:0c:54:42:
65:11:00:1f:9f:49:21:0d:8b:52:0f:5a:37:4e:80:00:cb:e7:
e8:c8:99:b7:2e:b3:8c:19:0c:e6:d9:10:dd:f0:dc:ee:5a:79:
8b:29:9a:03:17:1b:29:f3:df:46:15:76:72:86:e0:1f:5c:51:
86:da:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:22 2024 by rpki-client on console-ams.rpki-client.org