Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/SpLp5Dw4gZrbCTACNwOuykRPM4Y.roa
File: SpLp5Dw4gZrbCTACNwOuykRPM4Y.roa (raw, json)
Hash identifier: /YE1LQgznrub0pDzIKzfby9aHrl5hl4izNSxQvuHfKY=
Subject key identifier: 4A:92:E9:E4:3C:38:81:9A:DB:09:30:02:37:03:AE:CA:44:4F:33:86
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 100F
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/SpLp5Dw4gZrbCTACNwOuykRPM4Y.roa
Signing time: Fri 19 May 2023 05:53:22 +0000
ROA not before: Fri 19 May 2023 05:53:22 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139091
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4111 (0x100f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: May 19 05:53:22 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4A92E9E43C38819ADB0930023703AECA444F3386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:70:3c:44:f4:8b:d7:86:93:54:9c:00:b1:
a9:4a:86:2b:0f:42:dc:e7:6e:65:cc:f2:80:47:ed:
c9:da:07:be:dc:61:08:57:3f:21:e3:10:2f:f9:5d:
79:fa:48:f4:cc:86:69:be:4f:12:1f:c9:07:31:6e:
cc:8a:18:11:10:87:05:ab:df:67:0a:80:16:d4:d7:
e1:42:50:f4:b7:af:40:1e:27:33:a4:5d:f2:ca:6b:
f3:e7:a3:53:b3:a7:2f:eb:b1:c2:be:7c:d8:cb:ea:
01:54:4f:8d:8b:8b:2c:62:37:d3:30:2a:6d:4b:83:
fc:39:bb:bd:84:d9:20:c3:14:77:a7:cc:e1:68:7e:
f9:8f:cb:97:69:ed:69:7d:cb:b1:19:ba:64:35:9e:
04:6d:2c:04:53:5a:69:7a:9f:12:5b:42:3a:d4:e2:
7c:e4:c5:42:5a:d5:02:cb:84:20:3b:c4:e7:7e:b4:
08:50:22:95:7f:9b:aa:e8:da:9a:63:5b:f0:36:9e:
39:da:a3:54:af:9a:fe:9e:0e:e3:d9:59:0d:3a:eb:
d4:00:49:ed:62:ac:e8:12:65:72:6a:75:f0:80:69:
2e:ac:f1:0b:83:98:da:6a:0a:8f:8f:10:8c:3b:db:
8a:f8:ac:bb:b7:06:9b:1b:02:0d:68:ae:d7:2f:97:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:E9:E4:3C:38:81:9A:DB:09:30:02:37:03:AE:CA:44:4F:33:86
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/SpLp5Dw4gZrbCTACNwOuykRPM4Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9b:97:5e:6e:68:86:c0:23:c9:fe:05:99:e2:3b:9f:c2:57:
c9:23:11:02:4c:d6:d0:e1:e1:69:38:52:d1:7f:93:44:e3:94:
e5:dc:7a:4e:6d:b7:6a:99:4a:3e:99:74:f5:71:39:f0:a7:1a:
ac:49:8f:0a:f1:90:c2:77:0d:3d:41:30:99:c8:c1:58:70:69:
cc:d0:90:e4:a9:8d:85:68:64:6a:a2:9f:ed:e3:83:e5:78:eb:
20:91:31:80:b0:d0:0f:78:88:33:7d:ff:6c:53:8b:db:96:ea:
2c:ed:95:1d:e2:39:0b:bf:cb:f6:93:2d:4b:fd:ca:2c:b4:65:
d6:e1:52:25:33:d8:ce:d2:86:62:81:7d:b1:bf:02:9c:10:9a:
94:03:72:07:4f:e6:c0:43:a7:8d:4b:03:27:d2:74:50:a1:c4:
98:08:d9:98:35:39:56:ee:e7:82:fa:8d:4e:ed:b0:0a:cf:b2:
0f:39:e2:bd:1b:f3:cf:db:49:f2:05:21:e9:da:b4:60:05:f2:
8d:9a:c2:df:3b:1b:36:73:a0:99:2f:fb:bc:69:78:df:55:45:
87:9c:9b:77:e9:6a:c4:88:4d:e4:83:3d:d4:9b:0d:e5:6a:50:
04:9e:8c:72:e2:d0:0a:7e:28:84:ee:6d:80:7c:e3:f8:09:e2:
18:44:fa:f7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYz
OUQ2QzIzODg5MzQ1MUEwNkVCMzRDNTJENzdBQkMxODkwNkJFMDAeFw0yMzA1MTkw
NTUzMjJaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDRBOTJFOUU0M0MzODgx
OUFEQjA5MzAwMjM3MDNBRUNBNDQ0RjMzODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPbnA8RPSL14aTVJwAsalKhisPQtznbmXM8oBH7cnaB77cYQhX
PyHjEC/5XXn6SPTMhmm+TxIfyQcxbsyKGBEQhwWr32cKgBbU1+FCUPS3r0AeJzOk
XfLKa/Pno1Ozpy/rscK+fNjL6gFUT42LiyxiN9MwKm1Lg/w5u72E2SDDFHenzOFo
fvmPy5dp7Wl9y7EZumQ1ngRtLARTWml6nxJbQjrU4nzkxUJa1QLLhCA7xOd+tAhQ
IpV/m6ro2ppjW/A2njnao1Svmv6eDuPZWQ0669QASe1irOgSZXJqdfCAaS6s8QuD
mNpqCo+PEIw724r4rLu3BpsbAg1ortcvlweJAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUSpLp5Dw4gZrbCTACNwOuykRPM4YwHwYDVR0jBBgwFoAULznWwjiJNFGgbrNM
Utd6vBiQa+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
OC9Mem5Xd2ppSk5GR2dick5NVXRkNnZCaVFhLUEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0x6bld3amlKTkZHZ2JyTk1VdGQ2dkJpUWEtQS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTgvU3BMcDVEdzRnWnJi
Q1RBQ053T3V5a1JQTTRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeMDjANBgkqhkiG9w0BAQsFAAOCAQEAJ5uXXm5ohsAjyf4FmeI7n8JXySMR
AkzW0OHhaThS0X+TROOU5dx6Tm23aplKPpl09XE58KcarEmPCvGQwncNPUEwmcjB
WHBpzNCQ5KmNhWhkaqKf7eOD5XjrIJExgLDQD3iIM33/bFOL25bqLO2VHeI5C7/L
9pMtS/3KLLRl1uFSJTPYztKGYoF9sb8CnBCalANyB0/mwEOnjUsDJ9J0UKHEmAjZ
mDU5Vu7ngvqNTu2wCs+yDznivRvzz9tJ8gUh6dq0YAXyjZrC3zsbNnOgmS/7vGl4
31VFh5ybd+lqxIhN5IM91JsN5WpQBJ6McuLQCn4ohO5tgHzj+AniGET69w==
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org