Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/sO7ph-cZn5jYbq2UyuN4VNNI2ZM.roa
File: sO7ph-cZn5jYbq2UyuN4VNNI2ZM.roa (raw, json)
Hash identifier: Y/P+K2ufGIrtB5wJ1WyNafZf54kpNGkDgy7NXEgJuxg=
Subject key identifier: B0:EE:E9:87:E7:19:9F:98:D8:6E:AD:94:CA:E3:78:54:D3:48:D9:93
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1912
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sO7ph-cZn5jYbq2UyuN4VNNI2ZM.roa
Signing time: Thu 04 Jul 2024 16:49:45 +0000
ROA not before: Thu 04 Jul 2024 16:49:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4811
IP address blocks: 14.103.0.0/21 maxlen: 24
14.103.8.0/21 maxlen: 24
14.103.16.0/21 maxlen: 24
14.103.24.0/21 maxlen: 24
14.103.32.0/21 maxlen: 24
14.103.40.0/21 maxlen: 24
14.103.48.0/21 maxlen: 24
14.103.56.0/21 maxlen: 24
14.103.64.0/21 maxlen: 24
14.103.72.0/21 maxlen: 24
14.103.72.0/23 maxlen: 24
14.103.80.0/21 maxlen: 24
14.103.88.0/21 maxlen: 24
14.103.96.0/21 maxlen: 24
14.103.104.0/21 maxlen: 24
118.145.32.0/19 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.168.0/21 maxlen: 24
180.184.176.0/21 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 17:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6418 (0x1912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jul 4 16:49:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B0EEE987E7199F98D86EAD94CAE37854D348D993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:49:8a:da:21:de:bd:44:0c:0c:8a:c8:cc:
91:81:92:c3:fd:71:8c:f3:40:59:41:1b:2c:a7:b8:
b7:95:ce:9a:3f:ed:e1:5a:f4:2a:d4:5d:b9:bb:a1:
87:b9:27:27:be:3a:65:7b:ca:5d:87:1e:a1:9c:72:
6d:92:66:3c:9e:c8:37:df:d7:e3:db:2e:da:c0:70:
77:c0:16:08:5b:1a:b4:0b:3b:e1:bf:74:27:b8:66:
2e:ee:b9:e6:54:bd:5f:10:17:41:d4:ec:27:ae:16:
5e:09:f7:8a:0f:90:28:b4:fe:67:53:62:2b:90:ca:
3d:05:25:34:d9:34:2b:0d:b6:42:7c:70:ca:ca:4a:
e8:e3:56:a1:ca:20:f2:b5:37:2a:ea:c3:91:75:c3:
21:fa:a7:4d:5b:b5:e8:c5:d2:04:64:81:13:35:e0:
bb:ef:77:5c:68:b5:87:01:aa:5b:1c:45:c9:b7:1f:
6f:b9:13:04:75:b3:e3:00:84:3b:9e:e9:2e:ff:bd:
eb:bc:c8:62:08:e4:31:41:85:14:52:80:1c:b6:33:
40:dd:14:c9:80:0a:03:a4:16:52:bb:0a:fd:a2:55:
d8:5f:9f:e2:b0:9c:64:54:cd:44:15:8f:1e:9b:51:
ca:ac:f0:c9:c2:ea:52:1f:88:f5:79:c1:2f:b7:db:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EE:E9:87:E7:19:9F:98:D8:6E:AD:94:CA:E3:78:54:D3:48:D9:93
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sO7ph-cZn5jYbq2UyuN4VNNI2ZM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0-14.103.111.255
118.145.32.0/19
180.184.144.0-180.184.155.255
180.184.168.0-180.184.187.255
Signature Algorithm: sha256WithRSAEncryption
36:89:81:b5:5b:4a:2c:3f:2b:96:37:85:ac:92:c4:36:b8:14:
bc:ba:a1:bc:a7:06:c6:5b:b1:a7:3f:fe:f6:1e:06:18:48:88:
36:e0:1e:a9:a4:28:bd:d5:9b:cb:a2:c3:9e:8e:e9:14:66:1d:
77:26:29:d4:bd:17:db:3b:ad:c6:f6:8e:7b:58:a0:b3:4c:7c:
91:84:3e:f7:67:42:a5:1d:0f:38:53:7c:5b:63:2b:22:b4:18:
88:83:42:a7:76:ed:9d:d5:fa:49:a3:90:63:de:a0:45:07:b1:
77:25:e3:23:66:d3:54:53:0e:db:07:de:e8:91:40:82:cc:2c:
48:96:76:c4:38:a9:6c:c9:c6:c8:fe:44:ae:78:39:41:36:94:
e7:23:5b:25:5f:7d:e7:c5:43:f8:21:9d:3f:be:a1:d1:3c:ef:
22:62:1b:b0:4e:3d:28:e1:91:5d:e4:33:07:cf:6b:f2:3f:84:
e9:d6:80:fa:95:f5:4e:4f:73:ed:2f:79:ec:da:9e:55:69:a1:
f6:7b:a8:bf:ff:e4:9a:8d:8b:0c:ad:84:fe:6b:8b:76:30:a9:
14:01:cc:22:18:71:36:da:24:29:f0:5c:65:d3:c7:9f:96:b6:
86:cf:66:c8:8a:18:56:0a:b4:25:f6:f4:91:93:5c:5b:85:b6:
38:e2:92:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgICGRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNDA3MDQx
NjQ5NDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIwRUVFOTg3RTcxOTlG
OThEODZFQUQ5NENBRTM3ODU0RDM0OEQ5OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSe0mK2iHevUQMDIrIzJGBksP9cYzzQFlBGyynuLeVzpo/7eFa
9CrUXbm7oYe5Jye+OmV7yl2HHqGccm2SZjyeyDff1+PbLtrAcHfAFghbGrQLO+G/
dCe4Zi7uueZUvV8QF0HU7CeuFl4J94oPkCi0/mdTYiuQyj0FJTTZNCsNtkJ8cMrK
SujjVqHKIPK1Nyrqw5F1wyH6p01btejF0gRkgRM14Lvvd1xotYcBqlscRcm3H2+5
EwR1s+MAhDue6S7/veu8yGII5DFBhRRSgBy2M0DdFMmACgOkFlK7Cv2iVdhfn+Kw
nGRUzUQVjx6bUcqs8MnC6lIfiPV5wS+324W7AgMBAAGjggIcMIICGDAdBgNVHQ4E
FgQUsO7ph+cZn5jYbq2UyuN4VNNI2ZMwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc083cGgtY1puNWpZ
YnEyVXl1TjRWTk5JMlpNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBIBggrBgEFBQcBBwEB/wQ5MDcwNQQCAAEw
LzALAwMADmcDBAQOZ2ADBAV2kSAwDAMEBLS4kAMEArS4mDAMAwQDtLioAwQCtLi4
MA0GCSqGSIb3DQEBCwUAA4IBAQA2iYG1W0osPyuWN4WsksQ2uBS8uqG8pwbGW7Gn
P/72HgYYSIg24B6ppCi91ZvLosOejukUZh13JinUvRfbO63G9o57WKCzTHyRhD73
Z0KlHQ84U3xbYysitBiIg0Kndu2d1fpJo5Bj3qBFB7F3JeMjZtNUUw7bB97okUCC
zCxIlnbEOKlsycbI/kSueDlBNpTnI1slX33nxUP4IZ0/vqHRPO8iYhuwTj0o4ZFd
5DMHz2vyP4Tp1oD6lfVOT3PtL3ns2p5VaaH2e6i//+SajYsMrYT+a4t2MKkUAcwi
GHE22iQp8Fxl08eflraGz2bIihhWCrQl9vSRk1xbhbY44pLV
-----END CERTIFICATE-----
Generated at Tue Jul 30 19:32:45 2024 by rpki-client on console-fra.rpki-client.org