Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/rfYlgvJ9daNPUOkX-pdexncww3U.roa
File: rfYlgvJ9daNPUOkX-pdexncww3U.roa (raw, json)
Hash identifier: LcdhT13ZLgUZeRXH/Nwuh+v77QMU6gfyHZymbmB5Hpk=
Subject key identifier: AD:F6:25:82:F2:7D:75:A3:4F:50:E9:17:FA:97:5E:C6:77:30:C3:75
Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial: 0CBD
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/rfYlgvJ9daNPUOkX-pdexncww3U.roa
Signing time: Wed 13 Mar 2024 01:22:11 +0000
ROA not before: Wed 13 Mar 2024 01:22:11 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 139119
IP address blocks: 103.157.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 07:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Validity
Not Before: Mar 13 01:22:11 2024 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=ADF62582F27D75A34F50E917FA975EC67730C375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:de:c6:25:3d:90:17:9c:19:c2:8f:58:e4:
e9:0b:69:ab:b1:36:ec:aa:02:cf:cf:32:34:37:32:
2d:d7:62:a2:2f:8c:8b:09:3e:0a:b3:a4:83:fe:dd:
2e:26:7e:74:75:c9:1f:58:4f:40:60:7c:a1:82:c5:
19:b9:97:68:a3:46:00:a4:11:a1:0c:3a:f5:6c:99:
ab:07:21:4e:e3:9e:e5:5d:eb:16:b8:c3:6b:0c:e1:
8d:8b:28:a8:2d:36:8c:2c:e3:d3:e5:fe:46:04:2f:
5d:a2:ba:84:02:80:0b:d5:af:82:9d:74:6c:68:99:
6f:44:e4:58:5a:4e:5b:80:c6:30:99:5d:02:ca:65:
c5:55:16:c5:38:45:65:7f:a6:70:f8:cc:21:50:c4:
71:7d:96:15:79:81:3b:5b:02:98:7b:5f:5d:d4:1b:
2e:4d:f7:97:80:62:80:ae:ff:2b:f3:ff:6c:46:8f:
46:8f:6d:82:5b:e3:79:2e:5f:24:62:d4:9e:3a:4c:
6d:d5:74:56:84:17:89:09:f0:83:44:07:6f:48:c2:
fe:40:d3:99:d5:0b:1b:74:9c:3c:82:74:a4:08:7a:
c1:20:b5:3a:16:d7:24:98:65:76:d9:56:01:92:a5:
3a:7c:2f:2e:15:33:15:f8:27:17:56:7a:90:82:76:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:25:82:F2:7D:75:A3:4F:50:E9:17:FA:97:5E:C6:77:30:C3:75
X509v3 Authority Key Identifier:
keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/rfYlgvJ9daNPUOkX-pdexncww3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.234.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ae:78:16:62:00:ff:ad:b6:7a:51:50:e4:13:52:9c:a1:08:
8c:e9:0c:73:0c:6d:88:88:ac:a6:66:a9:e2:5e:30:2f:de:b3:
49:58:43:e9:9f:4e:de:d6:d0:4b:8e:f1:0e:07:3c:87:ca:05:
69:fb:cf:b1:1b:ae:ea:8c:f1:13:9e:74:c5:bd:b2:27:33:90:
2d:42:c0:7a:20:20:8a:04:22:7c:16:9b:29:82:1f:c9:5a:4a:
0c:32:a1:0e:ce:f7:44:7c:ce:87:7c:60:50:67:79:8a:43:6c:
c1:c7:2c:e7:9d:11:1d:cb:4b:f5:7c:12:b9:d3:a3:ea:70:84:
88:6d:f2:3d:aa:91:81:8a:96:48:01:56:de:28:d0:61:fe:87:
7d:4c:71:3a:ac:8b:3b:bf:14:dc:ac:b3:bb:aa:91:53:9a:18:
4f:3b:2a:6b:b7:52:c0:ce:0c:93:f9:6e:13:08:17:1a:09:c4:
f6:6c:8b:7b:37:f4:a1:e0:22:95:e6:66:c3:10:0f:28:41:0f:
aa:59:9d:81:09:2e:65:38:e7:96:2a:fb:c3:a6:00:97:7a:d9:
8b:a2:f3:b5:77:6b:2f:7f:0f:a3:20:75:00:9c:5d:d3:a5:7e:
5a:d1:bb:54:ae:93:22:7e:4b:a7:84:42:15:7d:c9:46:93:d3:
51:bf:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 09:48:36 2024 by rpki-client on console-fra.rpki-client.org