Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/0IjueM1ZiRcArKk4Z0KS3p4KjqM.roa
File: 0IjueM1ZiRcArKk4Z0KS3p4KjqM.roa (raw, json)
Hash identifier: qX7I/y+p1sj9+i08959RWdZWSb6cvwhr31cwZqBIf50=
Subject key identifier: D0:88:EE:78:CD:59:89:17:00:AC:A9:38:67:42:92:DE:9E:0A:8E:A3
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1089
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/0IjueM1ZiRcArKk4Z0KS3p4KjqM.roa
Signing time: Thu 15 Jun 2023 08:48:17 +0000
ROA not before: Thu 15 Jun 2023 08:48:17 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4233 (0x1089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jun 15 08:48:17 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D088EE78CD59891700ACA938674292DE9E0A8EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:7f:c6:98:f6:7b:ea:70:7f:52:85:1a:87:
eb:56:b0:7f:2d:34:31:a1:f0:90:99:dd:12:15:fb:
bf:0d:ad:51:51:0f:0f:a6:a1:ca:bd:7a:16:76:13:
94:75:dc:20:55:50:8b:9a:db:23:ab:ca:c0:e2:7e:
4c:40:43:86:48:ee:4b:74:33:d5:02:d8:51:5a:61:
08:14:95:56:fa:13:99:81:e5:2e:c8:4b:c5:28:a6:
28:4a:63:97:eb:99:c3:5d:6a:c7:30:82:93:4d:f1:
d7:ae:8d:34:a1:e6:bd:43:9f:7c:d2:a0:1b:77:30:
0b:80:4e:1f:0b:5a:bd:d9:fd:ef:5e:53:62:5f:15:
9d:70:5c:19:dd:f5:92:55:ef:0d:e6:2a:96:c6:f1:
d6:ae:69:be:71:6a:8e:6c:46:9b:f8:6e:e8:f7:35:
5a:6c:a8:8c:b5:e8:ab:d9:b0:b9:bf:83:f8:d9:b3:
ce:fb:56:9a:99:ab:30:1d:46:b3:03:f7:b6:a2:7c:
04:93:63:fc:13:4e:b3:9c:64:fb:1d:70:19:36:0e:
63:05:33:b2:b2:0b:5d:c0:a5:28:e6:5d:24:fc:ef:
3a:23:a2:88:9c:61:06:f1:18:e6:95:a0:2c:70:fc:
30:55:4f:2d:96:55:56:20:56:20:77:47:e0:58:a1:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:EE:78:CD:59:89:17:00:AC:A9:38:67:42:92:DE:9E:0A:8E:A3
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/0IjueM1ZiRcArKk4Z0KS3p4KjqM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
78:6d:db:53:2f:bb:3b:35:df:84:9c:24:c1:67:0a:f7:c2:0a:
14:21:e5:ab:38:e2:7c:f5:5a:3b:03:65:ef:f6:c8:46:56:ec:
75:09:61:20:72:c4:6a:aa:f2:cc:82:1c:68:a9:b6:31:60:2e:
6c:5b:e9:0c:b5:f7:e7:37:56:0e:d5:98:c5:82:a1:0a:08:e1:
c1:27:ae:30:79:87:0b:6e:2f:4d:a5:17:2d:fd:98:4a:08:d0:
c0:78:3c:a8:1d:59:58:c3:6d:56:fc:ce:1c:90:db:11:39:e8:
6d:c7:91:33:d6:b5:8e:ae:c6:ea:69:de:c6:17:26:5b:40:fd:
35:61:57:01:48:88:4b:68:f6:8a:4d:f5:3e:8c:f1:8f:2a:c4:
fa:60:73:36:08:2e:e4:db:91:aa:91:b4:2f:24:f3:38:ef:42:
ca:fb:c6:90:52:43:52:1c:bf:00:3a:9c:29:e4:86:08:4b:7c:
ef:c4:6f:a4:be:0e:91:76:c1:c5:86:dd:c6:7c:eb:63:6c:48:
11:3c:c7:8d:a5:46:27:4a:82:95:cc:8a:21:dd:13:4d:87:7e:
19:de:b9:5a:c8:7c:85:49:1d:d7:73:24:6e:e6:9b:19:7a:64:
f5:26:94:bb:b1:00:ac:c9:d5:ed:35:d4:92:02:00:79:38:4e:
fd:4f:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 02:58:09 2023 by rpki-client on console-ams.rpki-client.org