Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/98R15HsCmCk-sUIbWj0INoq8smQ.roa
File: 98R15HsCmCk-sUIbWj0INoq8smQ.roa (raw, json)
Hash identifier: cGc1E36WC7PE2kKMQNjqL6cVwmnfqmMPTZO8qSsrtVE=
Subject key identifier: F7:C4:75:E4:7B:02:98:29:3E:B1:42:1B:5A:3D:08:36:8A:BC:B2:64
Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial: 100B
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/98R15HsCmCk-sUIbWj0INoq8smQ.roa
Signing time: Fri 19 May 2023 05:54:19 +0000
ROA not before: Fri 19 May 2023 05:54:19 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137571
IP address blocks: 103.126.101.0/24 maxlen: 24
103.126.102.0/24 maxlen: 24
103.126.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4107 (0x100b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
Validity
Not Before: May 19 05:54:19 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F7C475E47B0298293EB1421B5A3D08368ABCB264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:b4:5d:7b:9f:30:0f:68:17:1a:03:5a:42:
81:9c:f8:8e:18:5c:01:64:fe:d4:67:3d:56:a0:e6:
e1:0a:6a:49:06:2b:58:b0:0a:dd:87:11:37:cb:a3:
35:e1:f9:60:36:60:44:8b:63:60:4a:c5:e2:68:59:
a5:b3:94:f8:11:b3:0a:22:6f:4d:23:8b:7a:17:01:
76:9e:93:e1:8a:2f:ca:58:dd:82:dd:6b:8c:b5:2e:
b0:34:33:bd:13:28:a3:b9:3f:38:51:8c:a0:5e:ce:
e2:00:f7:ce:96:fb:81:6c:9e:74:c3:af:80:e0:50:
83:81:84:53:47:09:66:6f:91:32:da:94:19:43:df:
ec:d9:87:f6:8d:26:4e:06:25:d5:e6:0f:2d:8a:69:
d8:b9:ca:98:32:29:2d:e9:e8:25:e6:76:63:95:63:
71:6d:0f:88:4b:a6:88:22:6a:ce:cf:d7:f3:2c:16:
79:be:dc:68:c0:a8:39:79:74:d9:83:88:85:76:2a:
a4:15:0c:31:0a:33:d0:4a:93:79:fd:c8:ba:d3:72:
d0:22:ff:c6:7b:ce:41:72:ce:be:ff:06:c4:b3:78:
67:62:d5:a3:ee:ac:91:78:6f:42:a9:9b:00:58:74:
ee:4b:34:8f:9a:d1:66:c2:34:b9:7c:31:e2:d5:11:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:75:E4:7B:02:98:29:3E:B1:42:1B:5A:3D:08:36:8A:BC:B2:64
X509v3 Authority Key Identifier:
keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/98R15HsCmCk-sUIbWj0INoq8smQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.101.0-103.126.103.255
Signature Algorithm: sha256WithRSAEncryption
1e:f4:46:bb:88:c1:47:41:18:ce:d9:a4:4d:bf:a7:19:0c:c8:
f7:02:de:a1:dd:fc:74:ab:1d:08:7f:55:0b:ff:b1:d8:e3:46:
6a:e5:b7:8e:38:97:f6:45:60:e4:77:eb:75:17:9f:b5:be:3b:
1b:da:13:46:08:d8:99:17:dc:09:b3:73:ee:28:7f:f1:68:40:
25:a3:ed:e0:a3:b1:ca:d3:65:1b:c1:eb:30:55:3b:c3:c3:2a:
27:b7:4b:1a:f9:d0:43:0c:3d:57:d9:a0:dc:29:09:1f:1f:4d:
4e:14:80:db:eb:1a:12:7c:35:eb:a5:44:04:57:99:f8:b8:11:
c3:2e:a8:e5:0e:50:11:15:91:92:ca:50:71:fa:1c:26:1c:11:
a2:77:69:ff:e2:d6:ea:60:cc:90:5e:24:40:30:b8:c8:d6:40:
9d:10:26:91:8e:32:fb:b1:97:54:78:2a:99:30:a0:c9:07:9b:
5c:fd:bf:38:c0:8b:5b:03:5e:b5:3f:fe:3d:94:76:ef:d4:8f:
e1:76:18:9a:c6:c9:ff:db:91:ca:b1:2b:13:02:89:ee:ec:12:
24:13:0b:dd:70:e6:fa:9b:9c:16:bb:78:d0:58:b2:8f:8a:e9:
32:1f:46:c7:4f:93:61:82:29:d8:18:5e:07:f8:87:1b:31:2a:
03:97:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org