Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/xxiLHk4fgsAoAlVV3cJ7v6Sez0Y.roa
File: xxiLHk4fgsAoAlVV3cJ7v6Sez0Y.roa (raw, json)
Hash identifier: TtzPR9/a4LYa0agvcKZsZRkfHb/Lxg5soM6Fqch6hsc=
Subject key identifier: C7:18:8B:1E:4E:1F:82:C0:28:02:55:55:DD:C2:7B:BF:A4:9E:CF:46
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 0D1B
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/xxiLHk4fgsAoAlVV3cJ7v6Sez0Y.roa
Signing time: Tue 02 Jan 2024 06:20:06 +0000
ROA not before: Tue 02 Jan 2024 06:20:06 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 146834
IP address blocks: 103.139.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Jan 2 06:20:06 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=C7188B1E4E1F82C028025555DDC27BBFA49ECF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:9c:b6:70:b5:c9:e2:90:3a:dd:96:9f:29:
99:79:dd:53:f8:24:69:51:9d:46:f2:fb:37:c5:98:
f8:0d:02:a2:ca:4c:f8:6e:06:e4:0f:11:91:a6:45:
6c:85:02:36:89:5d:03:16:e6:2a:c0:c9:60:83:3f:
00:42:1b:3c:5f:b2:4b:ad:78:c9:d1:3f:a4:e3:8c:
9c:f7:f8:7b:51:c7:0f:ca:8d:27:3f:ee:3e:51:f1:
7b:fc:ed:14:1d:9d:ff:41:cb:a2:ea:ef:5b:8b:3a:
80:49:87:e0:f8:97:49:60:35:bb:e3:7c:6b:d0:53:
22:00:5f:35:30:0f:ac:5f:68:e6:00:fe:3a:3a:c4:
88:5a:09:9f:14:d5:cf:85:76:f9:27:ee:ea:83:e9:
5f:8c:aa:15:ae:7b:ca:dd:de:8b:c3:61:12:bb:b4:
ed:6f:ef:f9:04:60:01:fe:95:25:22:bc:4c:34:03:
9d:5d:0c:43:9a:57:1e:5f:d8:3a:c0:3c:1a:f6:54:
54:68:42:3a:29:65:9d:be:cb:42:eb:2e:1a:b5:78:
62:ed:b9:9b:75:40:bb:ba:25:75:14:f4:57:36:0c:
99:f8:32:ba:69:16:0d:0e:35:16:7f:88:5a:08:83:
51:bc:88:b5:90:7d:65:60:41:80:5d:45:b2:2e:fe:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:8B:1E:4E:1F:82:C0:28:02:55:55:DD:C2:7B:BF:A4:9E:CF:46
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/xxiLHk4fgsAoAlVV3cJ7v6Sez0Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:de:5b:30:76:00:4c:c8:52:53:07:26:45:bd:02:97:64:98:
92:04:b4:cf:e3:36:23:4e:26:86:fc:90:cd:44:82:88:4a:83:
a1:58:16:78:45:e3:a8:34:dd:96:c9:63:ba:b3:3e:27:b0:df:
e4:d9:4e:e9:5e:7a:63:7c:88:ad:51:8d:ef:67:b4:9d:b8:d0:
04:81:71:0d:cf:08:fc:81:30:b3:be:47:bf:85:c7:82:cd:44:
0e:e6:25:02:13:19:d1:f8:75:0e:ab:2e:c5:2e:9b:b4:37:3f:
1a:4a:e5:5d:c0:8e:b4:fb:40:a4:f4:0f:2a:bd:a4:1f:70:eb:
5b:48:f8:f0:c1:56:67:e6:ba:b7:23:db:29:03:ba:f1:66:e0:
b8:39:ee:03:f4:65:af:23:43:53:b6:91:eb:54:40:18:79:8d:
59:96:9c:9e:f7:fe:39:87:ba:ea:04:d0:d1:df:76:7f:0d:2d:
14:7a:26:04:eb:8b:f3:15:77:ea:70:7c:37:49:fd:a5:31:07:
cf:a7:34:e7:e9:a2:af:f2:98:b4:7d:d8:98:f2:ea:b5:94:dc:
f0:f2:95:9e:8a:3a:78:1a:b0:5b:34:18:69:ca:d4:14:cd:81:
93:41:c5:1b:cc:e7:08:ba:55:85:5f:f3:b0:70:db:1e:26:12:
b0:79:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org