Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/bhf18zL-MYyVVIAENXgg7UdW6bM.roa
File: bhf18zL-MYyVVIAENXgg7UdW6bM.roa (raw, json)
Hash identifier: eFZfZx3XlRJv3ARN1ELZxOTj86qfxa1g1b6wno/QJ4E=
Subject key identifier: 6E:17:F5:F3:32:FE:31:8C:95:54:80:04:35:78:20:ED:47:56:E9:B3
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 06E1
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bhf18zL-MYyVVIAENXgg7UdW6bM.roa
Signing time: Thu 18 May 2023 07:24:40 +0000
ROA not before: Thu 18 May 2023 07:24:40 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 398704
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: May 18 07:24:40 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6E17F5F332FE318C95548004357820ED4756E9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:5e:a2:d4:de:0b:0a:8b:6f:7a:d3:6d:8b:
6c:9c:a3:87:66:9f:6e:a6:78:da:1f:a9:6b:f3:2e:
81:3c:03:54:2b:7b:97:48:67:7f:11:a2:2c:7a:df:
7d:a3:3e:93:2a:b7:c3:2a:94:9e:b8:4d:76:0d:d4:
30:1d:8d:50:7c:fc:f4:02:19:78:18:cb:77:fa:64:
14:73:44:6a:e2:a7:b2:88:4c:c7:c8:8c:f5:a6:4c:
3b:94:c4:87:5e:7a:1c:19:05:59:ac:50:a0:71:0d:
da:a7:61:75:49:6e:3b:ec:eb:94:25:c9:3e:06:f2:
a9:e1:7c:e9:ce:86:7d:0e:f3:4a:bf:7d:db:d6:54:
56:f5:09:14:4a:68:95:81:de:65:e9:df:03:8a:a8:
c3:0d:2a:54:5c:18:34:86:19:f9:70:73:b5:21:4e:
56:b5:14:59:c1:0e:ca:d8:7a:65:61:a1:3d:bd:c6:
a3:2b:ac:75:67:e4:98:5a:44:18:29:32:2b:a5:43:
05:38:ee:06:19:5c:71:6c:6d:cf:85:a1:3a:bc:b8:
03:6c:e2:62:89:f6:7f:0e:45:e9:e4:41:52:d9:d0:
9b:6f:6d:18:fc:44:2c:b5:6d:95:51:e7:ac:e2:ad:
3a:11:d6:2d:05:15:0f:3e:c5:67:66:cb:1f:59:ff:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:F5:F3:32:FE:31:8C:95:54:80:04:35:78:20:ED:47:56:E9:B3
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bhf18zL-MYyVVIAENXgg7UdW6bM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:06:31:47:27:4f:89:f2:15:c0:e1:49:ff:a9:fb:38:15:fd:
03:b2:7d:66:67:53:4f:83:bb:af:44:7c:98:73:b6:6a:74:5a:
67:f0:ef:3c:66:52:ae:50:10:33:de:94:f6:1b:5a:6a:e1:72:
be:6e:09:ca:90:3e:f1:02:be:ba:59:3b:11:df:75:06:08:4d:
7d:44:fc:55:db:c3:e5:ed:a7:ff:3f:63:9b:2f:7c:4a:49:64:
db:22:a4:0f:93:dc:ed:89:c9:fe:ac:9f:63:80:94:d8:4a:f9:
c6:cb:32:0f:31:7f:8c:cb:4b:b3:df:0f:1f:50:df:72:32:39:
b6:17:20:d6:11:3d:eb:bc:4a:f0:35:8c:00:af:d7:dc:f8:55:
39:5a:7a:01:a1:f8:bf:a9:43:8b:8c:47:99:72:a2:c8:c2:82:
70:eb:4e:91:c7:b9:f3:c3:95:1f:f6:4d:d6:9b:7a:4b:3f:c7:
91:1c:d5:af:24:82:db:2f:cb:22:0f:8e:89:32:89:ba:ac:3c:
5a:ac:1e:64:14:f9:92:ba:99:e2:c5:3d:3f:e8:e4:19:ca:7a:
97:6c:92:5c:c7:48:26:38:55:c1:79:60:3d:42:fe:2a:58:5d:
c1:a2:fa:8a:77:55:bd:d2:fe:61:01:80:92:f6:c9:5c:d9:36:
23:4f:8a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org