Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2834/dIeoD4X6_QuLMPa2PiWwWWsK7C4.roa
File: dIeoD4X6_QuLMPa2PiWwWWsK7C4.roa (raw, json)
Hash identifier: PVaZquLSbcS4gqpBHnGyF4jtQs24/fiNBzOdNkpR7Po=
Subject key identifier: 74:87:A8:0F:85:FA:FD:0B:8B:30:F6:B6:3E:25:B0:59:6B:0A:EC:2E
Certificate issuer: /CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Certificate serial: 0EDB
Authority key identifier: 81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/dIeoD4X6_QuLMPa2PiWwWWsK7C4.roa
Signing time: Fri 28 Apr 2023 06:10:19 +0000
ROA not before: Fri 28 Apr 2023 06:10:19 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 21859
IP address blocks: 103.125.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 02:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Validity
Not Before: Apr 28 06:10:19 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=7487A80F85FAFD0B8B30F6B63E25B0596B0AEC2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:92:3b:f4:d4:ea:a9:0e:47:47:d8:27:70:
26:32:cd:ce:38:36:f4:ca:3d:98:04:53:45:ce:8a:
34:d6:e2:6c:10:af:a5:5f:3a:f4:d8:d9:29:87:64:
99:3e:fb:65:d4:f3:73:76:74:f4:13:39:18:25:cd:
85:5b:7f:1f:16:ba:1c:5c:dc:22:8c:17:6a:fe:06:
0d:8f:60:3b:de:36:9c:1a:f4:14:63:f2:78:67:1b:
43:39:96:00:7d:a0:10:48:be:29:ca:c2:e8:8e:c0:
6a:ff:dc:92:a6:93:14:44:bf:f7:3a:5a:fe:4a:2a:
7f:cf:51:95:11:fd:fc:50:47:6b:05:30:f1:0d:00:
3b:b5:02:70:3a:9d:cf:da:4b:de:2d:b1:ca:63:24:
b6:7e:90:90:b1:1c:95:03:27:74:5e:07:e3:50:0e:
94:81:fb:23:62:f1:89:15:fc:cd:d2:de:55:c3:c6:
36:da:4a:68:89:30:52:d2:01:8d:51:75:dc:ec:b1:
0c:4a:d0:82:9b:43:83:c0:ab:0c:58:f3:b3:56:d8:
83:fa:f5:ba:2c:0a:be:81:46:f1:b6:23:c1:c6:ee:
79:4f:4d:6a:b9:0a:3d:b5:64:71:db:21:74:4f:a2:
14:16:7d:e7:11:3f:7e:49:02:91:f8:46:cc:99:a7:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:A8:0F:85:FA:FD:0B:8B:30:F6:B6:3E:25:B0:59:6B:0A:EC:2E
X509v3 Authority Key Identifier:
keyid:81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/dIeoD4X6_QuLMPa2PiWwWWsK7C4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.250.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4a:25:61:24:56:66:81:62:55:9c:92:d8:6f:60:b3:ee:92:
19:e1:f2:0c:29:3b:7a:06:f3:7a:57:92:50:e5:da:f7:3c:d3:
ad:54:47:b7:a7:07:10:7e:1f:75:49:15:b5:e3:bc:59:77:eb:
30:a4:92:13:c8:af:e4:29:2e:13:29:e3:6c:c8:9b:69:02:e5:
29:00:44:f3:e1:44:bb:8c:5e:09:2c:c6:90:49:0a:c7:47:f4:
dc:ec:49:bf:d5:4c:44:a0:9e:2f:61:be:24:8f:41:46:a7:d7:
b7:93:9e:8e:b2:67:3c:6c:48:c7:5d:a7:9f:40:7c:e9:e2:a0:
98:a4:62:c9:b8:3f:03:55:e6:3e:f2:1a:4c:42:aa:01:74:15:
b8:03:3c:7b:44:0d:3e:e8:30:9d:53:3a:8e:cd:c8:c2:cc:56:
90:90:63:e9:55:a8:97:bb:e0:24:aa:fa:67:ed:3f:7f:a7:5b:
37:64:74:6c:04:38:ad:21:63:4d:61:c0:81:e3:63:4e:a3:35:
74:c8:70:9c:ba:1b:4f:a6:bd:b5:0b:0e:a3:7d:8c:89:64:b4:
6e:8d:d8:99:22:bd:98:ab:5f:bc:fb:53:e0:66:90:0b:5d:a5:
f8:fb:55:20:77:d8:7d:1d:ba:db:9a:d5:99:50:7a:c0:aa:26:
2a:53:3c:41
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODFC
NDkzQUNDQjQyOTk4QkZGMDAwQjNERTEwNkZCNTc3MUE0OEQ1QTAeFw0yMzA0Mjgw
NjEwMTlaFw0yNDAyMTcwMjQ2NTlaMDMxMTAvBgNVBAMTKDc0ODdBODBGODVGQUZE
MEI4QjMwRjZCNjNFMjVCMDU5NkIwQUVDMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYlJI79NTqqQ5HR9gncCYyzc44NvTKPZgEU0XOijTW4mwQr6Vf
OvTY2SmHZJk++2XU83N2dPQTORglzYVbfx8Wuhxc3CKMF2r+Bg2PYDveNpwa9BRj
8nhnG0M5lgB9oBBIvinKwuiOwGr/3JKmkxREv/c6Wv5KKn/PUZUR/fxQR2sFMPEN
ADu1AnA6nc/aS94tscpjJLZ+kJCxHJUDJ3ReB+NQDpSB+yNi8YkV/M3S3lXDxjba
SmiJMFLSAY1RddzssQxK0IKbQ4PAqwxY87NW2IP69bosCr6BRvG2I8HG7nlPTWq5
Cj21ZHHbIXRPohQWfecRP35JApH4RsyZp8ENAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUdIeoD4X6/QuLMPa2PiWwWWsK7C4wHwYDVR0jBBgwFoAUgbSTrMtCmYv/AAs9
4Qb7V3GkjVowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgz
NC9nYlNUck10Q21Zdl9BQXM5NFFiN1YzR2tqVm8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2diU1RyTXRDbVl2X0FBczk0UWI3VjNHa2pWby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MzQvZEllb0Q0WDZfUXVM
TVBhMlBpV3dXV3NLN0M0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd9+jANBgkqhkiG9w0BAQsFAAOCAQEAVkolYSRWZoFiVZyS2G9gs+6SGeHy
DCk7egbzeleSUOXa9zzTrVRHt6cHEH4fdUkVteO8WXfrMKSSE8iv5CkuEynjbMib
aQLlKQBE8+FEu4xeCSzGkEkKx0f03OxJv9VMRKCeL2G+JI9BRqfXt5OejrJnPGxI
x12nn0B86eKgmKRiybg/A1XmPvIaTEKqAXQVuAM8e0QNPugwnVM6js3IwsxWkJBj
6VWol7vgJKr6Z+0/f6dbN2R0bAQ4rSFjTWHAgeNjTqM1dMhwnLobT6a9tQsOo32M
iWS0bo3YmSK9mKtfvPtT4GaQC12l+PtVIHfYfR2625rVmVB6wKomKlM8QQ==
-----END CERTIFICATE-----
Generated at Sat Feb 3 06:16:25 2024 by rpki-client on console-ams.rpki-client.org