Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/tpIZoA3o9SiRcsN91P0BWZt1VQo.roa
File: tpIZoA3o9SiRcsN91P0BWZt1VQo.roa (raw, json)
Hash identifier: oVP4Dr6sPpQ6QeYonAntgE5E5rs+4HhDukqfckeak/c=
Subject key identifier: B6:92:19:A0:0D:E8:F5:28:91:72:C3:7D:D4:FD:01:59:9B:75:55:0A
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1483
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/tpIZoA3o9SiRcsN91P0BWZt1VQo.roa
Signing time: Thu 16 Nov 2023 19:13:57 +0000
ROA not before: Thu 16 Nov 2023 19:13:57 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 137718
IP address blocks: 14.103.0.0/16 maxlen: 24
103.159.142.0/23 maxlen: 24
118.145.32.0/19 maxlen: 24
118.145.128.0/17 maxlen: 24
180.184.0.0/16 maxlen: 24
180.184.24.0/21 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5251 (0x1483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 16 19:13:57 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=B69219A00DE8F5289172C37DD4FD01599B75550A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:24:71:e7:e1:fd:6c:7f:b1:8c:c3:3b:89:
00:87:d6:e2:3e:ce:ed:b4:8e:68:73:ed:15:6c:17:
fc:cb:99:82:b3:fb:7a:11:a1:89:da:d3:ea:fd:5f:
2e:7c:42:f2:9e:60:13:c4:e8:e6:14:12:a7:dd:6c:
b6:b0:59:9a:67:d6:50:b9:55:75:de:28:9e:7b:16:
94:f0:91:0e:b1:cb:a5:f3:4e:28:5e:6f:0f:a8:03:
42:0a:de:0c:53:54:c9:d6:c5:df:81:7a:a7:43:ef:
9c:b9:a9:99:47:50:29:a5:6e:26:0a:73:0e:54:41:
c8:9d:37:97:3b:40:4e:38:86:9e:ae:fb:23:a3:04:
f3:a6:41:a5:eb:86:e8:d2:e1:02:84:25:26:f4:b1:
6f:c8:fc:bd:35:12:7a:ac:f2:5c:f5:bf:18:ff:e1:
45:65:89:93:b2:68:45:c7:aa:86:91:f5:05:4a:2a:
e9:26:df:c5:e2:7f:91:38:3b:ce:3e:df:2e:f3:1d:
1b:cf:d5:eb:c9:0c:32:ee:a2:f0:67:e4:51:65:61:
34:4a:3f:85:51:fa:41:2e:5d:d3:24:e6:d1:28:37:
0d:93:5b:45:c9:6f:a1:22:bf:26:c0:e9:69:f7:fb:
5e:00:df:c4:e9:96:17:93:67:ff:bf:2a:48:9f:0c:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:19:A0:0D:E8:F5:28:91:72:C3:7D:D4:FD:01:59:9B:75:55:0A
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/tpIZoA3o9SiRcsN91P0BWZt1VQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
103.159.142.0/23
118.145.32.0/19
118.145.128.0/17
180.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:4d:68:44:a3:d9:97:f9:49:6f:1c:f8:41:f2:39:b6:c6:31:
c9:95:99:b9:91:03:d6:d1:87:99:f5:c4:3b:05:6a:dc:6d:1e:
07:78:11:a6:a5:4c:5e:a4:2c:5e:02:0a:f2:0f:e7:64:7b:ec:
b8:97:a8:f2:5e:f9:b8:b5:27:47:53:53:bf:00:9e:4e:bd:40:
f1:43:39:a0:b2:ac:b7:06:7f:ce:00:87:f2:bf:b4:64:05:b9:
19:71:c9:5b:48:ab:c4:56:b9:b1:24:e1:d9:94:03:62:b3:56:
24:5b:89:f9:af:88:2d:7b:68:09:ea:89:ce:71:43:04:21:3b:
64:de:72:19:cb:fa:b7:7c:fc:8c:c8:94:ae:ae:9b:b2:c2:eb:
d9:13:0f:20:91:28:41:21:bd:31:29:d1:86:0b:56:e5:38:41:
ec:ed:0c:2a:aa:1a:33:3b:b1:8c:4a:59:69:d0:d6:bc:c1:a9:
98:3f:78:77:4b:c1:50:fc:a8:9d:bf:0f:13:ff:91:3c:d6:b5:
bf:12:0c:63:a8:4c:74:ae:9c:ca:b5:36:95:ed:ab:4c:3b:37:
b0:22:e8:4c:f5:dc:ac:e9:aa:9e:c1:de:c7:22:58:b0:a3:75:
fe:7f:31:17:fb:27:89:70:84:d9:98:57:0d:79:02:35:6f:92:
bb:dc:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 10:44:00 2023 by rpki-client on console-ams.rpki-client.org