Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/351lIVMVFVfHTvbCnh_6IiMITGE.roa
File: 351lIVMVFVfHTvbCnh_6IiMITGE.roa (raw, json)
Hash identifier: /QnxA0UzZ6MggHekBbkMAZ8frgTgSruVPVWERmdOdgc=
Subject key identifier: DF:9D:65:21:53:15:15:57:C7:4E:F6:C2:9E:1F:FA:22:23:08:4C:61
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1475
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/351lIVMVFVfHTvbCnh_6IiMITGE.roa
Signing time: Tue 14 Nov 2023 18:01:38 +0000
ROA not before: Tue 14 Nov 2023 18:01:38 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 137718
IP address blocks: 14.103.0.0/16 maxlen: 24
103.159.142.0/23 maxlen: 24
118.145.128.0/17 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.24.0/21 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5237 (0x1475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 14 18:01:38 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=DF9D652153151557C74EF6C29E1FFA2223084C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:60:06:f7:ad:30:60:10:fe:e0:4e:c6:30:
37:ed:b1:75:26:51:f3:22:9f:ba:27:f9:9f:79:2d:
f2:95:5a:5a:6d:49:47:13:66:1b:9e:a8:19:c3:79:
3e:b6:59:37:d6:1b:5c:76:6c:ff:95:3d:9a:60:88:
af:ce:f5:ad:d9:9e:6a:23:20:c7:16:6c:4e:b3:68:
ed:04:b7:3b:f3:02:de:c5:2e:66:08:9e:23:36:b7:
82:54:7f:d5:26:7f:ae:ee:85:88:03:a1:e9:42:38:
85:a9:bc:0c:fa:a4:fa:e1:50:58:00:7f:d2:2e:53:
69:83:da:95:a3:80:71:c3:fc:ba:a2:75:0b:c2:64:
a1:e0:e7:dc:28:90:68:a0:b6:ad:46:ca:29:6d:ff:
b4:2e:f9:f5:f9:c6:76:b0:84:25:bd:0e:96:50:f3:
16:15:fe:0f:3b:4b:78:a2:50:ea:dd:f0:02:65:eb:
8e:fc:3a:e9:3c:19:10:79:40:5d:f9:78:1c:ba:08:
72:7b:3f:07:96:ac:84:44:17:70:c8:84:f9:8d:e5:
7c:10:e9:4d:72:da:08:b8:40:3a:e3:6f:8e:b5:fb:
1d:b7:1f:e8:b8:82:f0:df:21:88:52:a9:99:f4:1f:
09:41:28:84:59:b9:a2:ec:5a:cd:fd:67:65:68:a4:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:65:21:53:15:15:57:C7:4E:F6:C2:9E:1F:FA:22:23:08:4C:61
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/351lIVMVFVfHTvbCnh_6IiMITGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
103.159.142.0/23
118.145.128.0/17
180.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:5d:00:27:f7:18:c3:1d:0a:35:e5:3e:ee:e1:b4:dd:90:a9:
06:38:f9:3c:73:c0:a1:9a:36:b7:fd:f8:6e:51:e8:c7:4a:06:
ee:15:a8:d4:34:80:37:ae:19:78:f0:0b:a8:9d:56:35:df:1c:
9e:60:f6:23:2e:fa:75:95:ce:ae:98:69:1f:37:9f:a3:f9:40:
fa:e3:d3:5a:78:d9:4e:43:67:c1:ca:ce:e3:e0:42:19:80:ef:
c2:19:f6:37:16:d7:c8:e0:6c:5e:29:2f:62:a4:24:8a:52:d8:
92:ea:94:3a:7f:15:ce:c4:20:78:ed:4e:d8:b8:53:e1:62:00:
d6:5d:6a:77:82:de:65:5e:36:41:3f:c9:f4:d3:5c:8b:b6:d5:
52:e8:66:6f:54:53:aa:9e:2d:39:b8:cf:03:4c:b7:e0:dc:f7:
15:94:e6:33:25:f7:fc:b5:c3:69:fd:7e:68:a9:0e:29:0d:58:
19:b1:5b:41:28:50:43:63:ab:7e:30:5f:87:6b:73:ed:cf:7d:
39:f9:0e:61:d7:22:61:58:55:db:2c:52:cd:3d:20:f0:53:c1:
38:8c:d4:16:84:c5:27:25:59:82:25:e9:62:e5:2f:9c:71:00:
d1:3e:2a:a2:ca:d7:e0:84:5e:bb:bd:fa:fb:d9:79:01:10:88:
d7:7a:f4:2f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICFHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yMzExMTQx
ODAxMzhaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKERGOUQ2NTIxNTMxNTE1
NTdDNzRFRjZDMjlFMUZGQTIyMjMwODRDNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJBmAG960wYBD+4E7GMDftsXUmUfMin7on+Z95LfKVWlptSUcT
ZhueqBnDeT62WTfWG1x2bP+VPZpgiK/O9a3ZnmojIMcWbE6zaO0EtzvzAt7FLmYI
niM2t4JUf9Umf67uhYgDoelCOIWpvAz6pPrhUFgAf9IuU2mD2pWjgHHD/LqidQvC
ZKHg59wokGigtq1Gyilt/7Qu+fX5xnawhCW9DpZQ8xYV/g87S3iiUOrd8AJl6478
Ouk8GRB5QF35eBy6CHJ7PweWrIREF3DIhPmN5XwQ6U1y2gi4QDrjb461+x23H+i4
gvDfIYhSqZn0HwlBKIRZuaLsWs39Z2VopAFTAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQU351lIVMVFVfHTvbCnh/6IiMITGEwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvMzUxbElWTVZGVmZI
VHZiQ25oXzZJaU1JVEdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAvBggrBgEFBQcBBwEB/wQgMB4wHAQCAAEw
FgMDAA5nAwQBZ5+OAwQHdpGAAwMAtLgwDQYJKoZIhvcNAQELBQADggEBAABdACf3
GMMdCjXlPu7htN2QqQY4+TxzwKGaNrf9+G5R6MdKBu4VqNQ0gDeuGXjwC6idVjXf
HJ5g9iMu+nWVzq6YaR83n6P5QPrj01p42U5DZ8HKzuPgQhmA78IZ9jcW18jgbF4p
L2KkJIpS2JLqlDp/Fc7EIHjtTti4U+FiANZdaneC3mVeNkE/yfTTXIu21VLoZm9U
U6qeLTm4zwNMt+Dc9xWU5jMl9/y1w2n9fmipDikNWBmxW0EoUENjq34wX4drc+3P
fTn5DmHXImFYVdssUs09IPBTwTiM1BaExSclWYIl6WLlL5xxANE+KqLK1+CEXru9
+vvZeQEQiNd69C8=
-----END CERTIFICATE-----
Generated at Thu Nov 16 19:49:06 2023 by rpki-client on console-fra.rpki-client.org