Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/iLhIOzUSNCml1PmDQKz21oPc8v8.roa
File: iLhIOzUSNCml1PmDQKz21oPc8v8.roa (raw, json)
Hash identifier: v2+9tJETBX3bF3W7JGiWVBgWfVZKa5uXRR4Bsw/Oe0U=
Subject key identifier: 88:B8:48:3B:35:12:34:29:A5:D4:F9:83:40:AC:F6:D6:83:DC:F2:FF
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 13B8
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/iLhIOzUSNCml1PmDQKz21oPc8v8.roa
Signing time: Fri 19 May 2023 05:55:08 +0000
ROA not before: Fri 19 May 2023 05:55:08 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 49544
IP address blocks: 103.159.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5048 (0x13b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: May 19 05:55:08 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=88B8483B35123429A5D4F98340ACF6D683DCF2FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:9e:e8:2d:f7:87:d5:06:9e:b2:31:ef:4f:
d2:44:69:6c:b5:3d:9a:3b:dc:19:0f:03:b0:39:1b:
b8:20:65:3e:62:68:25:ba:b8:1e:21:85:15:c0:35:
7a:85:39:78:29:bf:3d:a5:82:95:00:36:90:81:0a:
af:40:35:57:27:b2:93:ae:07:ef:10:06:a8:e2:99:
be:dd:b9:6b:c6:76:fc:4e:d7:85:51:9b:2b:76:56:
fd:98:f8:cc:a8:38:ac:2a:74:fb:9f:56:a8:fb:13:
a4:17:97:c9:c0:77:1c:81:6d:19:51:7d:35:3f:5e:
b7:18:6f:c7:67:df:51:3c:c3:f6:58:ed:14:04:54:
96:1d:fe:97:ab:d7:73:3e:83:ec:43:2d:70:99:2c:
07:81:09:24:ca:52:58:9c:60:22:ae:d5:37:aa:65:
65:6e:cc:ce:7e:9a:35:32:48:e4:47:fc:17:15:0c:
10:0f:ef:d0:65:6d:a1:32:77:b9:e3:0f:1f:d7:a5:
e5:71:cf:a1:95:26:9f:62:71:20:3c:b7:29:b9:6f:
f3:b4:e4:c0:18:e4:09:4e:1b:7e:50:d6:8f:43:0c:
4d:b0:47:b0:8f:1e:57:08:d4:c0:97:25:d5:f6:ce:
b6:06:e8:b2:64:eb:85:83:6e:e0:f2:e8:10:f3:05:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:48:3B:35:12:34:29:A5:D4:F9:83:40:AC:F6:D6:83:DC:F2:FF
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/iLhIOzUSNCml1PmDQKz21oPc8v8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.122.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:26:40:04:c9:2d:2c:56:6e:14:a0:72:cd:3e:bb:bb:53:44:
a5:a9:29:6c:c3:d4:64:16:79:e1:1f:ee:94:63:9e:5a:60:73:
c4:bf:c8:6c:08:1a:38:db:33:27:ea:85:22:aa:79:41:ed:5e:
71:53:d6:62:23:b4:04:2d:f0:f4:dc:38:ad:e6:73:02:ac:52:
67:82:8b:4f:cf:5d:6d:91:d4:bf:1d:fb:54:40:42:f4:91:f6:
62:fd:3e:eb:df:f2:70:30:d8:0f:bc:0f:22:34:89:8a:0f:3c:
04:6c:84:1f:d0:1b:c3:17:0f:a1:70:39:45:eb:bd:4b:66:b7:
f2:b8:8c:26:47:7f:71:a6:f7:30:a3:a8:d1:f3:36:d9:0f:3a:
88:d5:31:a3:85:7e:4c:3a:d1:59:73:7a:15:a5:e0:87:88:90:
ec:25:44:e6:9f:fd:5d:b7:15:13:9a:29:13:7c:25:4b:70:07:
4b:84:98:88:8d:de:5c:92:c0:e6:5d:1a:c4:a6:1f:53:14:9b:
36:05:87:8e:e9:d5:93:43:11:85:db:92:91:14:b1:9a:c0:4c:
8a:70:49:c6:5c:cc:40:f7:29:f0:9b:b5:a1:ec:60:95:0f:ee:
c7:c0:85:24:02:ce:4b:f0:fd:86:68:66:08:9f:38:ee:e3:37:
3a:2e:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org