Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/Q4esRIyLYsMxSI8Wj4PBoPAzZ1g.roa
File: Q4esRIyLYsMxSI8Wj4PBoPAzZ1g.roa (raw, json)
Hash identifier: +QbiHWT4s8nxNdNCU9nmTvlr+qnpOkJ7vUe2p4pXPDw=
Subject key identifier: 43:87:AC:44:8C:8B:62:C3:31:48:8F:16:8F:83:C1:A0:F0:33:67:58
Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial: 06EB
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/Q4esRIyLYsMxSI8Wj4PBoPAzZ1g.roa
Signing time: Thu 18 May 2023 07:23:08 +0000
ROA not before: Thu 18 May 2023 07:23:08 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139119
IP address blocks: 103.157.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Validity
Not Before: May 18 07:23:08 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4387AC448C8B62C331488F168F83C1A0F0336758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:96:6f:2d:ac:99:bd:a1:40:d5:6d:30:5f:
d5:05:91:a4:3a:78:ab:de:d6:2f:92:95:28:ea:9b:
4a:99:23:00:61:9e:ed:ab:24:18:c8:64:07:bd:e2:
03:c5:c1:d0:1d:95:fb:90:7b:3b:9c:8d:99:68:8b:
a0:2b:04:cf:8d:5f:06:93:5c:8f:a5:26:15:58:08:
2e:8d:8a:4d:2d:22:ce:db:f1:61:1b:5f:ed:5a:95:
29:7d:62:28:ff:3b:77:e3:c3:b3:ce:31:14:28:c1:
0f:00:c0:22:78:c1:2f:a4:00:07:57:32:7f:31:50:
9c:0c:59:78:73:11:8d:64:5d:77:05:c8:5d:68:dc:
b4:61:f2:03:21:8c:9a:f4:3e:5b:70:25:02:41:79:
51:45:5b:3d:6d:23:09:b4:a7:da:1e:7a:5f:cc:ed:
01:9a:a6:3c:2a:f8:04:90:8d:e3:5a:8d:e4:a5:e3:
12:2a:93:18:ed:8c:19:c5:35:0e:79:62:d7:a9:ca:
cd:89:a7:f4:28:2f:6b:de:ea:57:22:58:4b:44:a5:
a0:e5:fa:e3:13:98:ec:0d:c2:1f:16:49:f6:75:cc:
38:88:15:64:84:4a:f9:8f:8c:60:6c:6c:aa:64:65:
95:bb:97:d5:35:e7:0a:4b:8f:9e:d8:e6:90:16:a6:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:AC:44:8C:8B:62:C3:31:48:8F:16:8F:83:C1:A0:F0:33:67:58
X509v3 Authority Key Identifier:
keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/Q4esRIyLYsMxSI8Wj4PBoPAzZ1g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.234.0/24
Signature Algorithm: sha256WithRSAEncryption
94:05:cf:62:4a:2f:9b:b0:6b:7e:d4:23:50:0b:7a:3c:27:a1:
a8:30:38:6e:8c:8a:54:cc:d3:43:f4:96:3b:30:45:ac:df:94:
9d:f1:83:1c:f0:7b:75:1e:2a:07:4d:d2:98:11:de:68:46:3a:
71:6a:ba:4d:e3:84:6a:eb:10:de:db:24:f0:4d:a2:3d:30:db:
d5:3d:44:19:c6:6f:2c:d4:7e:0f:39:83:6e:e3:76:5c:c0:3a:
56:86:36:da:22:53:61:60:68:c8:80:31:24:4b:50:9a:b3:8e:
d6:aa:fb:51:7c:6b:ab:70:07:91:f0:47:ce:d3:cc:fd:a4:6d:
31:e2:16:13:78:91:fc:34:b0:b0:2f:53:d0:13:22:a7:53:29:
fa:32:13:04:44:b6:e6:00:2f:3f:2c:2b:a8:60:8a:d8:15:1a:
c1:f7:ac:9d:ac:31:aa:59:a0:8f:4c:2c:b5:18:ff:2d:e1:57:
bc:62:17:9e:02:c7:ff:10:04:a4:a5:ff:dd:be:d4:e0:52:30:
f0:16:e8:a7:23:92:27:14:82:c9:17:f3:4f:bc:0a:6c:d2:51:
35:2e:50:d3:ee:af:68:b0:e0:01:65:94:2e:ed:a3:19:d1:f3:
ec:fe:0b:eb:eb:68:0d:62:19:f8:7a:0e:5a:7d:18:c9:7f:12:
57:5a:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org