Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/BLQP1vdw6-w4txHiLp7-dZHKUP8.roa
File: BLQP1vdw6-w4txHiLp7-dZHKUP8.roa (raw, json)
Hash identifier: AnZuqSOYj4wrMAqzX4Y9woYCyniJQOorknVF5ogUEB0=
Subject key identifier: 04:B4:0F:D6:F7:70:EB:EC:38:B7:11:E2:2E:9E:FE:75:91:CA:50:FF
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1471
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/BLQP1vdw6-w4txHiLp7-dZHKUP8.roa
Signing time: Tue 14 Nov 2023 14:10:49 +0000
ROA not before: Tue 14 Nov 2023 14:10:49 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 137718
IP address blocks: 14.103.0.0/16 maxlen: 24
103.159.142.0/23 maxlen: 24
118.145.128.0/17 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.24.0/21 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5233 (0x1471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 14 14:10:49 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=04B40FD6F770EBEC38B711E22E9EFE7591CA50FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:89:76:c1:21:45:5e:2e:52:cf:65:a1:97:
59:04:3f:98:d9:4e:43:17:7d:6f:41:f4:93:da:b7:
89:87:5d:44:78:2e:b7:b7:43:1c:e1:17:ed:e4:c6:
9d:2b:ae:19:4c:f0:2e:2d:d3:25:39:74:73:a6:1c:
55:2c:ed:9b:52:25:01:d0:d1:81:6b:ec:6b:7e:26:
e5:c7:e6:63:75:37:78:66:a2:09:2c:5e:15:aa:97:
7c:28:53:9f:7b:17:59:a9:4b:96:35:f8:47:f6:a4:
38:7c:cc:d9:ca:4e:dc:c1:d9:68:d2:f1:bc:d5:68:
f3:3f:11:1b:3c:2e:89:2f:9e:3c:6e:5e:75:00:da:
80:fd:08:e8:be:35:66:b1:9c:eb:7d:73:01:e6:6c:
3d:03:e8:f5:2f:23:36:e3:93:94:b2:04:93:98:e2:
69:ad:af:3a:9c:7d:ba:9a:16:88:e0:9f:38:47:82:
31:16:18:86:41:52:a3:cc:2c:3f:30:12:44:1a:a1:
8f:fa:09:36:5b:6f:75:f9:f6:e0:d6:11:6a:0e:f8:
be:37:3e:37:83:72:60:fe:76:d6:7b:97:6e:f4:04:
06:21:0b:64:fd:e5:c5:76:81:ce:f4:46:f5:20:4e:
07:e1:13:b6:88:8a:2b:df:5e:0d:5b:e2:26:f6:80:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:0F:D6:F7:70:EB:EC:38:B7:11:E2:2E:9E:FE:75:91:CA:50:FF
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/BLQP1vdw6-w4txHiLp7-dZHKUP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
103.159.142.0/23
118.145.128.0/17
180.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:f8:b2:60:cb:2c:3a:0a:91:a7:e2:80:53:57:1f:e4:72:4f:
c1:0f:64:6a:e8:ee:ba:13:a2:35:e2:63:4e:85:f1:af:43:e7:
8c:9e:3c:b5:3a:68:fe:4d:45:fd:90:c7:8e:7a:9c:8a:91:f6:
56:79:1c:f3:9b:f0:97:41:92:3c:a7:52:ff:8c:fb:8f:c6:db:
e8:f7:cd:ab:6e:bf:3a:5a:d8:36:ff:fc:13:75:41:4f:d4:eb:
72:24:a8:d1:ee:1c:3e:0f:20:3e:dd:27:5e:ed:9b:0a:f0:e2:
89:3f:a3:d1:43:6a:f1:94:52:36:55:3f:9b:7b:35:fb:75:d2:
7b:e4:34:dd:36:2d:ff:95:3c:73:a3:43:3b:40:82:50:5d:7f:
e8:1e:50:42:92:3d:5e:c3:7c:51:99:24:a3:fc:a9:15:1b:5d:
18:29:85:73:67:d8:38:9d:a2:5b:87:18:64:ae:c4:f1:a6:44:
c0:2c:4f:13:8f:25:22:f9:f0:e2:c2:c8:36:1f:c5:34:3d:ec:
1a:90:0b:1e:2f:91:1f:89:1a:3e:2d:1f:ca:dd:52:c5:18:93:
e3:94:68:ce:3b:75:06:11:ca:35:ff:23:8d:d5:8f:0d:15:4b:
a4:56:2c:80:1e:bb:eb:77:6f:9d:1e:c2:1b:b5:8c:a8:c4:22:
9f:40:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 17:46:04 2023 by rpki-client on console-fra.rpki-client.org