Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/ZstKMAhJ_7wUyqW7mhiRPw9SJh4.roa
File: ZstKMAhJ_7wUyqW7mhiRPw9SJh4.roa (raw, json)
Hash identifier: IN/En+ZoeKXWsWELBolo4JZUqSVjLj/l2ieff3BBW2Q=
Subject key identifier: 66:CB:4A:30:08:49:FF:BC:14:CA:A5:BB:9A:18:91:3F:0F:52:26:1E
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 06ED
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/ZstKMAhJ_7wUyqW7mhiRPw9SJh4.roa
Signing time: Wed 15 Feb 2023 09:16:40 +0000
ROA not before: Wed 15 Feb 2023 09:16:40 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 146834
IP address blocks: 103.139.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Feb 15 09:16:40 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=66CB4A300849FFBC14CAA5BB9A18913F0F52261E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:c7:07:65:12:4a:f4:03:ef:0c:26:65:77:
37:c8:77:67:46:14:7f:48:7b:ac:7d:7e:33:6e:bb:
8c:21:fd:dc:f9:32:80:e5:44:9a:57:f8:40:24:a0:
66:d2:43:65:36:94:14:12:20:d1:c7:ce:d0:ca:30:
8d:73:f6:81:a1:ab:80:20:71:d8:fc:c1:54:f8:ff:
bf:f1:18:4b:57:37:63:dc:31:7a:f3:e7:58:fa:db:
91:37:3e:77:c9:48:09:06:c1:9e:6e:bf:7b:f2:dc:
63:22:09:c3:4c:ed:32:e4:0d:7e:57:20:d7:a9:49:
e1:00:68:d0:46:97:49:21:2f:97:9d:18:28:73:cc:
a2:bb:73:68:6d:56:89:ea:47:84:68:c4:3f:cd:33:
15:ae:52:4f:91:48:5d:12:d1:28:24:78:74:29:90:
8d:7b:b2:95:58:99:ff:c1:cb:d7:ec:55:7a:1f:e5:
85:69:87:6a:b4:12:68:89:bc:7a:e8:4c:54:d1:af:
91:70:e3:e8:64:a6:3b:2b:6e:06:62:55:7c:c6:4c:
e3:5f:49:05:9b:f4:ce:2b:2a:56:7c:36:1d:6f:a9:
17:00:95:2f:3c:5b:22:5d:8d:48:90:74:a4:54:3c:
82:ee:55:3b:4b:04:42:2f:62:d8:f2:e4:aa:1b:8f:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:4A:30:08:49:FF:BC:14:CA:A5:BB:9A:18:91:3F:0F:52:26:1E
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/ZstKMAhJ_7wUyqW7mhiRPw9SJh4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.136.0/23
Signature Algorithm: sha256WithRSAEncryption
87:73:33:05:31:70:3c:f1:69:46:64:b8:52:a3:4d:8d:af:a7:
60:cd:80:aa:56:33:f8:99:d7:3b:ab:99:bc:2c:25:ff:04:ee:
66:67:45:3d:17:a0:92:e7:ed:b5:a2:12:d0:c0:50:0c:76:29:
11:e9:cf:ac:d2:64:01:ec:a3:71:46:2f:b4:6a:a6:c3:7d:0d:
82:e0:78:a0:98:38:7d:64:6c:e6:3c:6a:7f:cf:34:3f:4b:73:
16:7a:bb:66:d7:8c:35:65:c6:3a:32:e9:de:17:47:68:6c:e2:
b7:56:12:dd:43:10:c7:82:9a:32:cd:b1:ca:56:bf:29:13:38:
37:c8:26:a3:bb:be:04:4c:c0:a8:1a:a0:b9:d3:c8:7d:96:cb:
42:5a:cd:23:a5:7b:05:25:96:86:22:aa:aa:32:78:a4:e4:73:
33:e5:32:53:a2:fe:2c:53:4d:a3:bf:56:90:43:54:41:90:83:
16:2e:da:ec:2c:af:b9:e3:46:02:8b:0b:fb:a2:bd:e0:ad:9b:
66:ec:e9:e2:dd:21:e8:62:fc:1a:1d:8a:39:5d:74:b2:eb:38:
08:4e:7e:81:81:28:5b:32:19:1a:44:6d:86:43:16:f2:a7:91:
35:6e:f0:d9:6e:d7:1f:19:8a:f7:7b:2e:2c:eb:68:f2:af:dd:
54:ec:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:01 2024 by rpki-client on console-ams.rpki-client.org