Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/DAo0xVZpszG9Fm7--Wbznp5PoZc.roa
File: DAo0xVZpszG9Fm7--Wbznp5PoZc.roa (raw, json)
Hash identifier: RTXlrBHXpNOj/zKy1sxIJj1tzMhKg0McMN+QYcIi7Gs=
Subject key identifier: 0C:0A:34:C5:56:69:B3:31:BD:16:6E:FE:F9:66:F3:9E:9E:4F:A1:97
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 0CBA
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/DAo0xVZpszG9Fm7--Wbznp5PoZc.roa
Signing time: Tue 29 Nov 2022 05:41:51 +0000
ROA not before: Tue 29 Nov 2022 05:41:51 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 17621
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: Nov 29 05:41:51 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=0C0A34C55669B331BD166EFEF966F39E9E4FA197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:98:8f:75:53:d3:6b:ae:ed:82:e8:09:3f:
12:53:03:10:9d:6f:20:1d:59:b9:85:61:93:9d:59:
a2:26:82:ba:70:22:ce:9b:52:8e:6a:5b:ec:ab:da:
62:e4:df:16:6c:13:56:8f:63:ec:ae:3d:be:f6:26:
b0:37:35:f6:0a:dc:bc:34:a6:04:12:2d:72:70:e2:
a5:fc:20:97:9c:e4:f4:c3:80:44:04:db:dc:ac:d8:
5b:e1:aa:61:10:20:85:13:50:2f:81:a8:c1:1f:d9:
93:3f:2d:1f:bc:bd:05:77:3e:ec:81:b9:3a:bb:8c:
87:53:2e:26:7d:2b:fc:f6:ef:ef:50:a2:57:76:5b:
1b:12:13:d6:9e:d9:91:b2:69:20:ee:1a:37:2e:37:
e9:2a:5b:f3:bd:62:c6:82:46:d5:95:6b:aa:0a:8c:
dc:0d:09:b5:f8:81:fd:2f:d1:dd:55:45:c4:f9:87:
04:88:07:82:e6:00:b6:b8:c4:3d:c5:ea:76:91:71:
1a:d4:13:4d:42:51:92:b5:5c:b4:f6:5a:0c:85:da:
23:59:64:fa:f0:0a:57:f1:27:f2:be:38:f3:6e:2e:
a9:ae:0d:ec:92:94:0e:de:ca:fd:b2:fd:93:a7:22:
27:1b:63:e3:84:df:93:0a:63:66:e5:38:73:7d:49:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:34:C5:56:69:B3:31:BD:16:6E:FE:F9:66:F3:9E:9E:4F:A1:97
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/DAo0xVZpszG9Fm7--Wbznp5PoZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:ab:f5:ee:94:de:a8:3f:85:71:1c:a2:42:ac:95:42:91:e9:
02:68:7d:2f:37:e0:75:5c:28:c6:ea:50:72:7b:fc:b1:ff:9f:
79:5d:81:f9:94:d6:d5:e0:cf:e3:15:cb:42:6f:31:95:f8:8d:
ea:d5:ec:ad:47:ec:af:31:4f:ac:c4:4e:7c:69:10:f2:1b:7d:
40:cb:ed:76:35:66:f0:43:8c:bd:2b:00:1d:61:aa:07:c3:2a:
a3:b4:75:36:5a:6f:b1:9b:e6:70:8a:57:1d:d7:d6:46:c1:08:
0e:fa:42:32:96:91:6c:24:04:02:39:d5:82:a2:8b:ef:f2:5a:
9f:b4:2a:66:90:08:66:8d:14:2f:1b:fc:11:99:a8:dd:50:8f:
87:6c:d3:f2:af:af:75:b0:9c:29:b7:d2:45:f7:eb:2f:16:63:
0e:00:bc:af:48:cd:5b:e6:93:1b:b8:7d:77:12:c2:c3:29:fa:
cc:92:13:d4:0f:ee:6d:9c:fd:c9:49:2a:59:fa:83:c3:14:4d:
dc:1e:1e:71:96:89:3c:f5:e7:82:d0:65:81:58:34:08:17:85:
27:2a:b6:43:84:68:25:c0:af:d7:54:6e:68:f8:ad:56:9d:ed:
e0:20:d8:06:4b:a8:23:64:5e:5e:35:37:16:6b:1a:c9:7b:19:
2f:d3:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org