Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa
File: ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa (raw, json)
Hash identifier: JNas7Wlg0AX26m1efzNFcy+W/bWb/XZ8L4u88VFkih0=
Subject key identifier: 44:EA:64:24:65:A8:8B:A7:BF:BF:AB:D3:E0:5C:52:ED:08:2F:EC:85
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 16FA
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa
Signing time: Tue 14 May 2024 05:30:44 +0000
ROA not before: Tue 14 May 2024 05:30:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.0.0/21 maxlen: 24
219.234.8.0/21 maxlen: 24
219.234.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 12:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5882 (0x16fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: May 14 05:30:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=44EA642465A88BA7BFBFABD3E05C52ED082FEC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:f7:b8:48:56:1f:1b:9d:46:6a:5c:de:0f:
15:17:e1:e5:f4:86:c2:6a:f6:02:d7:5a:87:3a:99:
a8:97:89:f1:98:93:9b:bf:8e:f8:fd:e8:99:2f:48:
43:cc:cf:0f:e6:94:e4:04:ff:e3:c7:c9:55:f5:f4:
7f:d4:38:b3:d5:1c:ee:b2:4b:5b:b9:08:b1:34:37:
f2:9f:b3:38:ad:94:94:64:b3:21:81:eb:57:a9:cd:
00:91:7e:c9:04:0a:c2:31:fd:57:ca:5c:49:65:c4:
93:0a:b7:6a:ae:d3:37:7c:d7:12:82:d1:71:d9:af:
d0:5a:40:bf:f8:61:bd:9e:6e:94:56:6e:ff:09:53:
0a:13:c5:2f:a2:d1:f0:59:46:34:f3:28:e1:3d:c9:
ba:06:f6:54:2e:a1:92:6d:c0:f7:c7:01:ef:34:5e:
38:4e:d0:27:3d:6d:30:d8:f0:37:35:32:cc:ab:26:
dd:c3:19:e2:8e:71:4b:0f:da:db:b4:53:6d:b9:0d:
f1:8a:c7:75:eb:69:5d:1e:a3:95:40:65:7f:2b:36:
2e:70:69:03:49:5c:b6:3e:32:6e:3e:45:26:f5:d2:
ae:5d:04:70:8d:77:39:d9:5f:e4:55:63:1d:f2:d7:
39:ac:7c:ab:bf:87:dd:91:2c:71:35:35:d2:e7:d7:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:64:24:65:A8:8B:A7:BF:BF:AB:D3:E0:5C:52:ED:08:2F:EC:85
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/ROpkJGWoi6e_v6vT4FxS7Qgv7IU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:53:14:03:53:ea:60:cd:9b:de:dd:24:7b:96:8f:d5:c6:80:
aa:03:46:92:b5:96:6f:02:6f:62:ef:93:f4:34:8e:d8:25:1c:
0d:61:fe:3b:a4:d1:6a:31:7c:9e:16:c4:80:da:40:e6:11:13:
6a:81:3f:4d:29:4c:bd:8e:f4:42:e9:17:05:2d:4f:ec:21:d8:
85:2e:cf:29:0b:b5:80:a9:12:e2:b4:bb:f3:9b:02:1f:70:b6:
c4:03:03:d0:72:80:52:26:ba:2f:00:47:c4:0c:30:89:14:00:
0a:cd:3a:4d:52:72:3c:66:de:ed:e4:7f:61:e6:4c:f1:cf:0a:
bb:c5:a5:01:1f:fc:8d:cd:6b:31:39:53:36:b3:af:06:a2:d0:
fc:ff:79:63:28:46:7b:22:5b:16:54:58:72:e6:49:74:1e:60:
43:00:39:98:51:fd:0f:ab:fd:0b:31:1e:2e:f3:bc:1d:47:d3:
b2:c1:1b:1b:52:fd:04:3b:91:6c:4f:86:7c:23:3f:ce:ef:d0:
da:2b:29:4d:8a:f4:53:90:33:d3:f2:25:d7:7a:2c:91:11:99:
02:5c:29:07:a1:c4:c5:de:66:4c:c1:60:b5:3b:44:36:c4:90:
b3:93:fd:bc:5d:cf:22:11:ca:7e:4b:7e:fd:96:75:0b:50:69:
58:e0:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:58 2024 by rpki-client on console-ams.rpki-client.org