Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/_aEJ33BO3_7oynPmSKmZtZrD18k.roa
File: _aEJ33BO3_7oynPmSKmZtZrD18k.roa (raw, json)
Hash identifier: BVvX6GbVCjY/IQ7eZ/SLGGei8hgLYgSnkQtwHP20V4M=
Subject key identifier: FD:A1:09:DF:70:4E:DF:FE:E8:CA:73:E6:48:A9:99:B5:9A:C3:D7:C9
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 190C
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_aEJ33BO3_7oynPmSKmZtZrD18k.roa
Signing time: Thu 04 Jul 2024 02:50:57 +0000
ROA not before: Thu 04 Jul 2024 02:50:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4811
IP address blocks: 14.103.0.0/21 maxlen: 24
14.103.8.0/21 maxlen: 24
14.103.16.0/21 maxlen: 24
14.103.24.0/21 maxlen: 24
14.103.32.0/21 maxlen: 24
14.103.40.0/21 maxlen: 24
14.103.48.0/21 maxlen: 24
14.103.56.0/21 maxlen: 24
14.103.72.0/23 maxlen: 24
118.145.32.0/19 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.168.0/21 maxlen: 24
180.184.176.0/21 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 08:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6412 (0x190c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jul 4 02:50:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FDA109DF704EDFFEE8CA73E648A999B59AC3D7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:4f:5f:5e:03:59:a4:90:df:7d:66:5b:58:
31:b3:1b:0e:94:32:65:05:ad:0f:66:b4:86:b7:7c:
be:60:ca:4e:b3:cc:5c:ee:09:c4:fd:1c:14:e3:04:
5b:05:45:a3:07:56:e4:cf:d4:1d:58:c4:73:e6:ea:
46:ed:8a:63:a4:dc:61:d0:52:3f:d5:4f:19:62:b5:
3e:38:35:d7:6e:d9:70:89:54:16:14:53:f1:f4:10:
d5:9f:bf:80:ae:c4:47:ab:48:30:1f:d3:17:72:b9:
40:6c:d2:48:58:18:44:7b:01:b2:63:ce:e6:3b:12:
98:ed:39:6e:05:72:ea:cd:a0:76:48:89:4a:5d:f2:
04:3d:36:b7:5b:cb:4e:ee:eb:d9:4a:12:ad:82:7d:
a2:c9:6e:09:30:a1:0d:45:30:20:d7:54:ef:29:75:
11:ca:c1:40:7f:21:1b:08:8d:cb:14:be:9c:0c:51:
69:a0:53:a0:ab:8a:9f:4b:5b:fb:2f:32:57:0a:5c:
ff:c6:50:7a:cd:ee:e4:f9:7d:4b:44:76:1b:d5:26:
6f:78:4d:f6:ee:a2:ae:eb:35:df:92:a7:ed:a3:30:
00:57:9c:f4:a7:0b:94:d6:9b:73:9e:2c:11:a7:12:
06:41:9a:a4:e1:c5:06:f1:67:92:ec:78:b2:bd:ff:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:09:DF:70:4E:DF:FE:E8:CA:73:E6:48:A9:99:B5:9A:C3:D7:C9
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/_aEJ33BO3_7oynPmSKmZtZrD18k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/18
14.103.72.0/23
118.145.32.0/19
180.184.144.0-180.184.155.255
180.184.168.0-180.184.187.255
Signature Algorithm: sha256WithRSAEncryption
ae:cf:13:e7:d1:c7:56:26:71:a8:04:8a:ae:8b:b0:b6:8d:b9:
c0:41:f9:b9:b1:57:86:f1:ab:3b:2a:fa:40:2b:c9:ac:7f:00:
3d:94:78:a2:67:89:b9:4c:98:d4:a7:32:5d:ba:2e:cf:de:a3:
eb:c9:ba:e6:63:07:2c:1b:c1:7c:3d:9f:07:5f:f3:7a:4d:f8:
84:8c:53:5e:b8:0b:cd:80:c3:67:bf:48:dd:8b:38:54:1a:5c:
b3:47:88:a6:74:dc:37:df:35:f2:ed:e4:b2:2a:5a:1e:77:bb:
84:b0:ba:d2:a1:d5:0f:32:cc:9e:7d:bc:82:6b:4d:04:16:70:
6e:8e:ba:e9:0d:f1:eb:23:e1:a7:87:22:0e:99:70:8e:a5:6d:
bc:bc:4c:4f:5f:88:27:5d:2b:63:59:20:42:46:2f:eb:cf:f2:
1c:3d:2f:36:04:a9:c1:66:ff:e3:da:7d:cf:3d:64:62:78:37:
f1:b4:3e:3d:f5:96:5f:8c:8d:d2:6c:23:8f:61:72:35:2c:8b:
cb:d3:40:3d:93:cc:c3:a2:96:9d:c9:4a:fa:b3:de:9a:ae:ab:
8a:77:0b:ec:93:3c:93:d0:b3:1c:bf:c4:07:f3:23:e4:bd:08:
64:3f:eb:de:c6:1e:d2:9c:23:f1:e5:ec:e0:b4:ed:c4:76:b1:
90:8e:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 09:46:53 2024 by rpki-client on console-fra.rpki-client.org