Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/pYNNFjRw9ZZlnTCWK3JrZrDW1uY.roa
File: pYNNFjRw9ZZlnTCWK3JrZrDW1uY.roa (raw, json)
Hash identifier: XRE4X/2kd3xOLH6BXnEI5qMBAytYaVvuPEB5qlpE2V0=
Subject key identifier: A5:83:4D:16:34:70:F5:96:65:9D:30:96:2B:72:6B:66:B0:D6:D6:E6
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 0890
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/pYNNFjRw9ZZlnTCWK3JrZrDW1uY.roa
Signing time: Mon 14 Aug 2023 04:33:57 +0000
ROA not before: Mon 14 Aug 2023 04:33:57 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 139021
IP address blocks: 103.139.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 27 Jul 2024 07:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Aug 14 04:33:57 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=A5834D163470F596659D30962B726B66B0D6D6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:e3:4f:6f:fb:f6:b3:bc:10:46:6d:b9:7f:
83:1d:57:66:33:82:29:d3:00:98:71:ff:f3:1f:33:
e8:23:ed:4a:82:4f:b8:72:db:57:97:f9:6c:d1:01:
1f:8d:76:53:fe:29:08:ea:af:e6:28:aa:a6:db:92:
4f:f4:9c:a0:c4:ac:ed:9b:0a:e0:0d:89:b4:e6:a8:
38:fe:2a:c8:a7:8a:90:51:c2:3f:df:1b:36:b7:20:
29:05:2b:04:77:59:8d:c9:a9:6b:2d:76:9f:8d:01:
6a:78:c4:fd:73:f7:1c:ce:5e:63:07:ea:97:6e:d9:
48:26:fb:68:e1:a6:2d:f0:c4:16:fe:3f:6c:a7:4c:
ca:49:64:e1:00:de:18:06:2b:1a:d6:33:8e:6b:1e:
81:fc:58:d0:b5:a4:71:fc:2c:ce:bb:2c:c5:03:82:
81:ad:1b:e1:ba:3c:b7:22:ff:42:6a:cd:4f:e5:b2:
85:9b:ed:62:f6:f0:63:8b:5f:f2:10:38:0b:13:d7:
b9:c9:07:10:73:25:ed:06:fb:b1:fd:65:f8:a1:37:
6b:a2:0b:f3:39:83:ad:1c:f4:a4:2d:0e:23:99:6a:
cf:e5:b3:7e:a2:dd:c4:19:79:aa:97:2a:84:b0:62:
8c:ef:b6:53:1a:98:6d:9d:01:78:c4:98:7f:7e:66:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:4D:16:34:70:F5:96:65:9D:30:96:2B:72:6B:66:B0:D6:D6:E6
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/pYNNFjRw9ZZlnTCWK3JrZrDW1uY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.2.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c1:91:ba:b2:f6:f9:cf:f3:c7:ab:2f:86:e3:78:60:c1:3f:
37:f1:2f:41:82:59:13:34:af:0e:c1:1b:00:7c:39:5c:67:af:
f8:c9:2c:e1:37:34:3c:7e:5b:4d:a8:01:e7:50:3b:61:6c:77:
f6:ab:78:13:89:ac:85:9b:28:65:91:44:07:7c:c9:c9:41:5c:
37:75:10:67:36:7c:89:a6:f3:95:cc:f5:c9:be:4a:ba:56:7b:
d9:6b:94:19:a1:cc:7c:5c:0e:64:26:21:bc:b8:03:7f:e0:e4:
9c:9e:94:f8:48:5c:c8:89:81:b5:a5:d7:85:78:65:37:63:42:
c2:6e:ea:5c:30:a6:fd:b3:44:1d:8f:1b:69:11:ea:69:93:64:
f0:27:92:b9:21:aa:30:1b:ea:74:60:7e:77:15:bd:c8:7d:2e:
a0:6f:ec:cb:f9:79:ad:14:04:ef:1d:fa:de:7e:54:3b:1c:80:
da:2a:37:05:87:5e:c8:40:8a:04:cb:dc:be:ea:a2:ad:f8:b2:
70:67:1a:13:b6:12:0d:b3:74:2d:c6:58:88:8a:2e:05:64:ae:
59:50:72:f2:90:49:a7:75:3a:98:25:ea:6b:f6:76:93:ed:15:
42:30:5f:ca:bd:f0:6a:4a:34:6e:0a:06:3a:d7:29:67:9e:f3:
23:dd:da:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 10:01:18 2024 by rpki-client on console-ams.rpki-client.org