Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/8cEvI6UlsskMpWyjp09Y63NXOTc.roa
File: 8cEvI6UlsskMpWyjp09Y63NXOTc.roa (raw, json)
Hash identifier: 23KrlGw/Aqx8L5czn9uBI1XpzXW7ggnjF7ODaOw11XY=
Subject key identifier: F1:C1:2F:23:A5:25:B2:C9:0C:A5:6C:A3:A7:4F:58:EB:73:57:39:37
Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003
Certificate serial: 15A2
Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/8cEvI6UlsskMpWyjp09Y63NXOTc.roa
Signing time: Wed 13 Mar 2024 01:22:33 +0000
ROA not before: Wed 13 Mar 2024 01:22:33 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 131482
IP address blocks: 103.108.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5538 (0x15a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193519DD773C40D04F641CC44558D3461297B003
Validity
Not Before: Mar 13 01:22:33 2024 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F1C12F23A525B2C90CA56CA3A74F58EB73573937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:9c:a8:f3:5c:1c:af:48:e5:d6:16:20:ca:
20:69:57:b8:d2:4b:b3:d6:d8:07:10:16:e2:d8:3d:
e0:a1:1b:83:13:48:f6:30:16:8c:2e:06:b5:65:f6:
f5:4c:bc:62:69:90:82:66:6b:d1:de:49:e0:5e:71:
9d:83:9c:75:e5:a8:5d:e0:7b:22:d0:27:2f:ee:cd:
f5:5d:67:90:a9:2f:77:26:c3:9a:ca:9d:73:1e:20:
63:02:c2:8a:7f:e9:53:da:0c:52:46:c2:10:2e:68:
48:15:8e:9f:b9:0e:a5:d1:80:29:46:54:ae:b7:66:
cd:46:fd:5a:8f:1d:61:69:59:b6:dc:78:57:80:53:
64:47:62:82:22:7e:03:66:8b:83:51:f4:8a:57:3b:
27:ec:6b:cd:7a:86:e3:09:9e:b1:49:85:cf:29:f5:
06:17:c8:81:91:78:98:29:54:7c:70:cc:4c:4d:b6:
9c:8c:34:16:e8:c0:1f:69:ed:ea:f7:68:13:23:f8:
2e:c1:ac:d3:c3:d0:30:d0:38:9d:68:39:ce:a5:5f:
f1:c4:e9:eb:8e:a2:45:64:21:6b:67:9b:a1:d0:7c:
bb:eb:f3:f8:33:db:ec:06:a8:6e:df:8a:b1:fa:1e:
eb:ae:34:ce:f5:33:a0:00:26:44:52:2e:e8:40:89:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:2F:23:A5:25:B2:C9:0C:A5:6C:A3:A7:4F:58:EB:73:57:39:37
X509v3 Authority Key Identifier:
keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/8cEvI6UlsskMpWyjp09Y63NXOTc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
88:92:5d:bd:66:a7:e2:8d:8c:d6:6f:f0:8e:a4:d9:b5:b0:a4:
74:b3:95:c5:0b:44:83:3f:c9:70:06:c4:46:0c:fe:4e:c6:15:
6a:6f:b8:10:1a:96:e4:85:44:c3:1a:71:b4:65:b2:00:0a:bb:
00:37:e4:25:66:08:0b:67:3c:e8:65:59:81:75:d4:10:50:88:
30:08:80:65:bf:0b:ab:f1:94:fe:ff:32:1a:eb:d8:50:7c:75:
ea:26:fd:56:49:81:36:ef:05:05:03:f6:22:61:6b:9e:35:42:
65:5d:a3:e3:e0:65:cb:c5:0a:f8:1a:8a:0f:a0:bd:0f:6c:42:
5d:98:f8:64:1b:b5:22:9e:fd:70:d2:27:10:42:9c:95:54:ae:
69:87:bb:bc:8e:05:bd:7c:54:fe:df:4e:5f:08:ec:b3:e3:57:
6c:28:3b:be:51:66:0f:4e:eb:4b:da:ea:98:cf:cf:85:66:3a:
c9:4d:ee:b6:0a:cf:86:71:b7:dc:89:09:5b:3c:72:46:b2:1e:
a8:98:ae:64:7e:5e:37:c4:23:b7:59:1c:ff:6b:55:5a:d2:79:
bb:67:da:b1:7a:f7:3e:10:22:ed:79:82:c8:3c:0b:71:68:0b:
f3:b2:a6:03:1c:10:af:b2:a4:99:b9:37:8b:7a:ff:e7:52:42:
b6:21:f5:9e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz
NTE5REQ3NzNDNDBEMDRGNjQxQ0M0NDU1OEQzNDYxMjk3QjAwMzAeFw0yNDAzMTMw
MTIyMzNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEYxQzEyRjIzQTUyNUIy
QzkwQ0E1NkNBM0E3NEY1OEVCNzM1NzM5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUG5yo81wcr0jl1hYgyiBpV7jSS7PW2AcQFuLYPeChG4MTSPYw
FowuBrVl9vVMvGJpkIJma9HeSeBecZ2DnHXlqF3geyLQJy/uzfVdZ5CpL3cmw5rK
nXMeIGMCwop/6VPaDFJGwhAuaEgVjp+5DqXRgClGVK63Zs1G/VqPHWFpWbbceFeA
U2RHYoIifgNmi4NR9IpXOyfsa816huMJnrFJhc8p9QYXyIGReJgpVHxwzExNtpyM
NBbowB9p7er3aBMj+C7BrNPD0DDQOJ1oOc6lX/HE6euOokVkIWtnm6HQfLvr8/gz
2+wGqG7firH6HuuuNM71M6AAJkRSLuhAiaRPAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU8cEvI6UlsskMpWyjp09Y63NXOTcwHwYDVR0jBBgwFoAUGTUZ3Xc8QNBPZBzE
RVjTRhKXsAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw
My9HVFVaM1hjOFFOQlBaQnpFUlZqVFJoS1hzQU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0dUVVozWGM4UU5CUFpCekVSVmpUUmhLWHNBTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MDMvOGNFdkk2VWxzc2tN
cFd5anAwOVk2M05YT1RjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEAiJJdvWan4o2M1m/wjqTZtbCkdLOV
xQtEgz/JcAbERgz+TsYVam+4EBqW5IVEwxpxtGWyAAq7ADfkJWYIC2c86GVZgXXU
EFCIMAiAZb8Lq/GU/v8yGuvYUHx16ib9VkmBNu8FBQP2ImFrnjVCZV2j4+Bly8UK
+BqKD6C9D2xCXZj4ZBu1Ip79cNInEEKclVSuaYe7vI4FvXxU/t9OXwjss+NXbCg7
vlFmD07rS9rqmM/PhWY6yU3utgrPhnG33IkJWzxyRrIeqJiuZH5eN8Qjt1kc/2tV
WtJ5u2fasXr3PhAi7XmCyDwLcWgL87KmAxwQr7Kkmbk3i3r/51JCtiH1ng==
-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org