Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/GkI6DN2baDVID-Y2KvO1uDU5JKk.roa
File: GkI6DN2baDVID-Y2KvO1uDU5JKk.roa (raw, json)
Hash identifier: 7npRun50Hm/woVWSKfwTPIExNVcxGbttZQMPul2fZ20=
Subject key identifier: 1A:42:3A:0C:DD:9B:68:35:48:0F:E6:36:2A:F3:B5:B8:35:39:24:A9
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 0D9E
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GkI6DN2baDVID-Y2KvO1uDU5JKk.roa
Signing time: Mon 16 Jan 2023 08:53:46 +0000
ROA not before: Mon 16 Jan 2023 08:53:46 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 139021
IP address blocks: 103.139.0.0/23 maxlen: 23
218.247.84.0/23 maxlen: 23
218.247.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486 (0xd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 16 08:53:46 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=1A423A0CDD9B6835480FE6362AF3B5B8353924A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:15:53:5b:96:6d:c1:47:f7:55:02:b0:9f:
c7:97:96:e0:98:5f:3d:dc:16:08:66:37:a8:d3:54:
1e:d1:41:2c:7f:ac:c5:30:3b:bc:8b:6b:ca:9a:16:
9d:59:44:2c:76:68:9d:69:91:69:20:4c:20:17:60:
ea:b2:5d:94:03:8e:08:c7:6f:4a:fb:5f:e9:e5:ad:
e7:2a:35:1b:3e:f3:66:b0:e7:35:65:c5:28:8b:e6:
96:07:d7:c3:4e:51:85:5d:bc:2f:24:f5:35:17:2e:
96:c2:16:01:63:99:b4:58:60:15:c3:35:dd:71:08:
92:36:d5:82:c6:06:34:cd:e9:dc:7d:5c:3f:2c:8d:
e4:0e:be:e3:81:70:75:f4:75:f7:ad:70:0f:ac:09:
75:73:82:a5:6f:d9:b0:3d:4f:d4:b2:a3:26:36:7c:
5c:58:52:10:af:d0:4f:b7:89:0e:c8:0f:6c:b7:40:
32:36:72:90:79:54:83:59:e8:54:0d:57:71:b0:22:
a1:78:15:a5:72:8c:28:25:ca:41:16:f6:da:ac:ac:
cc:25:06:20:32:72:ec:37:af:63:ec:fa:0f:d7:74:
26:c3:4f:55:29:d6:10:60:d6:d2:c6:01:a0:16:8e:
30:63:31:03:50:d2:0f:c2:bd:b3:ac:55:46:d5:1d:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:3A:0C:DD:9B:68:35:48:0F:E6:36:2A:F3:B5:B8:35:39:24:A9
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GkI6DN2baDVID-Y2KvO1uDU5JKk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.0.0/23
218.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
91:2a:8c:09:af:f5:e1:7e:2e:06:32:73:e5:21:52:69:18:10:
60:4a:04:e8:17:76:67:3b:41:64:0e:d2:11:cf:45:69:87:1f:
1c:01:06:25:f5:97:97:e1:ff:82:fe:b3:bd:88:0f:12:2e:21:
9e:34:fd:e2:2f:c3:37:1e:b2:b3:fb:f7:75:c9:e4:a6:64:80:
a0:b9:c1:36:d9:99:19:db:8d:69:e2:80:8f:be:b8:12:06:04:
fd:28:ed:ad:79:38:88:6f:52:5d:95:85:db:e8:82:95:66:77:
eb:46:18:19:b5:82:f2:4b:37:06:ad:0c:a5:34:a6:84:c8:fa:
9f:b9:bf:e6:8c:26:74:5e:79:31:6f:43:02:ac:45:b8:b9:15:
69:5c:95:2c:61:0a:94:3e:91:d1:5e:8a:85:71:38:94:52:42:
7f:07:8b:20:8a:e6:00:af:4d:dc:a6:25:ec:11:71:8a:18:5d:
31:9f:4c:6d:3b:a4:98:85:9d:e9:27:3e:50:36:7f:ff:28:2b:
b8:53:22:ac:a0:a0:18:45:a0:d1:81:c4:a3:d5:76:85:c4:7f:
82:a8:91:f8:48:2a:48:47:2c:5b:11:11:3a:a5:59:25:99:ca:
04:02:8b:75:ae:7b:1c:d3:35:d0:9d:53:30:b7:9d:39:b9:e4:
75:47:4b:b9
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz
QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yMzAxMTYw
ODUzNDZaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDFBNDIzQTBDREQ5QjY4
MzU0ODBGRTYzNjJBRjNCNUI4MzUzOTI0QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOwRVTW5ZtwUf3VQKwn8eXluCYXz3cFghmN6jTVB7RQSx/rMUw
O7yLa8qaFp1ZRCx2aJ1pkWkgTCAXYOqyXZQDjgjHb0r7X+nlrecqNRs+82aw5zVl
xSiL5pYH18NOUYVdvC8k9TUXLpbCFgFjmbRYYBXDNd1xCJI21YLGBjTN6dx9XD8s
jeQOvuOBcHX0dfetcA+sCXVzgqVv2bA9T9SyoyY2fFxYUhCv0E+3iQ7ID2y3QDI2
cpB5VINZ6FQNV3GwIqF4FaVyjCglykEW9tqsrMwlBiAycuw3r2Ps+g/XdCbDT1Up
1hBg1tLGAaAWjjBjMQNQ0g/CvbOsVUbVHTI1AgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUGkI6DN2baDVID+Y2KvO1uDU5JKkwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A
r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4
OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvR2tJNkROMmJhRFZJ
RC1ZMkt2TzF1RFU1SktrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEAWeLAAMEAtr3VDANBgkqhkiG9w0BAQsFAAOCAQEAkSqMCa/14X4uBjJz5SFS
aRgQYEoE6Bd2ZztBZA7SEc9FaYcfHAEGJfWXl+H/gv6zvYgPEi4hnjT94i/DNx6y
s/v3dcnkpmSAoLnBNtmZGduNaeKAj764EgYE/SjtrXk4iG9SXZWF2+iClWZ360YY
GbWC8ks3Bq0MpTSmhMj6n7m/5owmdF55MW9DAqxFuLkVaVyVLGEKlD6R0V6KhXE4
lFJCfweLIIrmAK9N3KYl7BFxihhdMZ9MbTukmIWd6Sc+UDZ//ygruFMirKCgGEWg
0YHEo9V2hcR/gqiR+EgqSEcsWxEROqVZJZnKBAKLda57HNM10J1TMLedObnkdUdL
uQ==
-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org