Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/s8vIWfz_10wDv-BLmkxUobvEuyo.roa
File: s8vIWfz_10wDv-BLmkxUobvEuyo.roa (raw, json)
Hash identifier: /IJ2DXv8gaeL97aRUkm3XDwqBh6+z8cVeDVHFumhApI=
Subject key identifier: B3:CB:C8:59:FC:FF:D7:4C:03:BF:E0:4B:9A:4C:54:A1:BB:C4:BB:2A
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 06E0
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/s8vIWfz_10wDv-BLmkxUobvEuyo.roa
Signing time: Thu 18 May 2023 07:24:39 +0000
ROA not before: Thu 18 May 2023 07:24:39 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131482
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: May 18 07:24:39 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B3CBC859FCFFD74C03BFE04B9A4C54A1BBC4BB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:f4:73:01:ce:c2:e6:c6:d8:bd:73:00:96:
3a:68:c1:1f:6d:ee:80:e2:8e:0d:2f:96:ea:fd:36:
33:c7:58:db:16:73:ef:82:92:9a:ef:c0:44:9e:6f:
1b:74:56:b4:48:ce:8c:61:ef:e2:5f:b5:d3:2c:ec:
72:53:3a:c5:31:ca:72:34:3d:50:e3:b2:3c:59:2c:
78:8f:18:63:93:f7:0c:70:b0:65:c4:12:44:fa:30:
6f:a3:8c:b8:50:75:60:75:00:4b:96:02:ea:e2:8c:
57:c8:81:c5:ba:28:c8:9c:32:42:c5:13:f3:99:6f:
35:b9:97:09:f2:7d:f2:b7:29:bc:04:36:d4:08:b8:
45:a2:53:5e:0c:8c:65:b7:d8:79:38:97:dc:fd:97:
63:50:f5:cf:0d:b9:c3:19:28:e2:f5:18:98:09:5f:
68:d4:e8:73:85:60:55:75:a3:64:20:50:da:9f:30:
79:c2:82:f7:d0:99:d5:86:d3:4a:b3:f3:49:65:b9:
e7:b6:dd:d0:c2:54:d3:03:3f:df:f0:2f:d5:4b:15:
b8:85:b0:d9:96:39:df:51:d5:bc:de:50:d5:75:df:
62:be:b1:a7:21:3b:a0:77:49:90:61:29:8f:ab:04:
34:8d:a8:f9:b0:b9:cd:46:85:6e:ed:c3:00:00:4a:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:C8:59:FC:FF:D7:4C:03:BF:E0:4B:9A:4C:54:A1:BB:C4:BB:2A
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/s8vIWfz_10wDv-BLmkxUobvEuyo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:5b:de:94:b9:7b:f1:37:b8:8e:fc:7f:f9:9f:80:69:ee:08:
62:6f:46:0d:7c:1e:3d:a9:ea:d3:73:35:6e:60:1f:e7:49:7e:
7a:35:89:44:1a:01:69:d2:e1:8d:bb:40:87:03:4e:a7:76:6e:
ed:aa:27:10:17:f8:8c:a3:0c:e7:19:10:95:4d:65:f1:c8:c3:
f6:d8:6e:91:73:ca:03:d5:28:e0:07:d4:91:1d:47:5d:ae:66:
9e:96:fd:57:f8:da:19:a6:48:01:71:72:b3:13:76:14:1b:ed:
82:66:5f:6d:7c:de:9e:04:30:1e:66:e1:e5:32:e1:ab:62:33:
01:ee:8e:79:89:26:3f:7b:96:10:27:82:16:8c:2f:91:59:17:
08:16:35:23:6f:68:75:7d:3b:a9:38:5e:16:5d:19:a4:8c:00:
18:fb:90:d7:17:a2:30:b1:34:2b:93:3f:06:37:69:25:cb:1b:
3e:10:3d:3e:94:5c:e8:e9:7b:e5:6d:1f:96:3c:41:49:2a:03:
76:7a:43:6a:79:6a:d7:a8:21:7b:ce:81:eb:f8:2c:10:59:7b:
77:e6:48:cc:ae:35:0f:dd:2c:6c:13:d3:da:b9:69:c2:da:1c:
66:bc:fb:e8:0e:b7:9e:15:39:c8:2a:64:07:34:47:8f:b3:e3:
75:c6:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org