Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/hZMwB1C8kR4xJAREZAq6akC8OLE.roa
File: hZMwB1C8kR4xJAREZAq6akC8OLE.roa (raw, json)
Hash identifier: KWIQNpCxCFKj24p2gXCh0TCsLCyIp3SYo1D9jrOW5ig=
Subject key identifier: 85:93:30:07:50:BC:91:1E:31:24:04:44:64:0A:BA:6A:40:BC:38:B1
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 11BE
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/hZMwB1C8kR4xJAREZAq6akC8OLE.roa
Signing time: Mon 14 Aug 2023 04:34:11 +0000
ROA not before: Mon 14 Aug 2023 04:34:11 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 17621
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, certificate revoked on Sat 27 Jul 2024 07:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4542 (0x11be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: Aug 14 04:34:11 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=8593300750BC911E31240444640ABA6A40BC38B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:91:49:56:df:0e:c7:ea:5b:10:09:fa:80:
05:53:f0:b7:6f:6f:4b:56:17:a7:50:f2:f8:e9:8d:
fc:cb:4d:cc:63:1d:25:69:19:fa:29:33:be:af:17:
a2:c0:6c:e0:6a:80:1f:8c:9f:be:29:d3:5c:83:01:
74:c7:e7:32:65:8d:fb:34:86:6e:d5:b4:95:06:f9:
b2:1f:88:74:49:35:21:9b:88:94:15:69:34:93:16:
fc:ef:c1:d0:7e:82:b6:16:1d:65:7e:00:25:10:86:
15:21:9c:8e:37:bb:15:37:63:e2:43:42:29:1b:be:
5e:8f:c1:d2:4f:91:db:7b:56:60:bc:1e:b9:88:53:
65:4e:43:33:08:76:0a:f2:48:6c:42:72:59:7c:b7:
b2:25:ba:cd:8f:ea:83:78:da:e6:02:b3:d5:70:19:
4e:40:ce:be:eb:a8:72:17:4e:b4:f7:c4:38:3b:0c:
36:c7:8d:81:76:6a:84:ef:bc:34:4e:0f:8f:e7:23:
4c:25:2f:74:9b:de:cb:88:02:bf:13:76:05:c7:fa:
63:1c:31:50:37:05:9f:b9:5b:09:7e:a8:71:3b:75:
20:d0:56:d6:9a:83:fa:d4:5a:24:65:8f:c1:64:73:
f3:6e:4c:a6:87:d4:9f:e9:41:e5:a4:3c:eb:b6:49:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:30:07:50:BC:91:1E:31:24:04:44:64:0A:BA:6A:40:BC:38:B1
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/hZMwB1C8kR4xJAREZAq6akC8OLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b0:ea:e7:55:4a:6f:25:1e:ba:ff:27:87:33:9e:b1:76:79:
b4:48:ff:22:84:13:8c:88:d5:cb:bd:38:c7:91:7e:b3:72:4a:
de:a8:24:16:35:eb:f6:fa:47:c7:24:c1:33:9b:d9:a3:44:fd:
c3:4e:7a:59:e0:d2:ba:29:bf:c4:7c:0b:a9:7b:7b:e4:ff:43:
b6:0a:4c:f1:02:e7:75:59:28:be:1f:5d:7e:2a:29:90:63:fc:
0a:9e:eb:ce:e6:98:f1:3f:e6:6c:f0:db:d6:cf:60:16:ea:74:
0a:ba:06:87:fe:a9:c6:eb:07:85:91:07:26:08:c1:b6:3f:5f:
6c:3f:11:7b:4c:79:dd:77:5f:85:49:9c:f5:c7:2f:b5:0e:13:
04:c2:83:b2:ad:f5:fd:f4:d9:46:a3:2a:ac:41:5d:43:96:62:
56:f0:36:13:3e:ce:c6:70:6a:2d:33:c2:24:f6:30:bb:49:df:
b9:c1:49:88:85:d0:37:dc:c6:d7:e1:8c:79:d7:bc:3f:f9:bd:
66:cc:06:bb:73:58:48:b1:ec:6e:1a:4d:c7:29:a8:7a:68:82:
61:e6:20:36:13:6a:03:9f:18:bd:e8:f7:31:9c:f6:37:9a:c3:
6f:a4:65:2b:39:f9:8c:a0:e7:d0:50:92:e7:12:4b:96:bf:88:
b8:da:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 10:01:18 2024 by rpki-client on console-ams.rpki-client.org