Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/X6VqDkkDxZyF1bEZujbl1Z9R8x8.roa
File: X6VqDkkDxZyF1bEZujbl1Z9R8x8.roa (raw, json)
Hash identifier: FVpBkj2Qd0c1dIqTu5kT/bbbEM96BwARf5G3DV26fn0=
Subject key identifier: 5F:A5:6A:0E:49:03:C5:9C:85:D5:B1:19:BA:36:E5:D5:9F:51:F3:1F
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0233
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/X6VqDkkDxZyF1bEZujbl1Z9R8x8.roa
Signing time: Tue 16 Jan 2024 02:35:42 +0000
ROA not before: Tue 16 Jan 2024 02:35:42 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 37968
IP address blocks: 103.2.164.0/22 maxlen: 24
103.168.98.0/23 maxlen: 24
202.46.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jan 16 02:35:42 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=5FA56A0E4903C59C85D5B119BA36E5D59F51F31F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:8a:84:1a:1f:f5:05:e8:7e:15:4d:a7:dd:
45:d5:21:8f:e7:ab:90:a9:83:12:c5:b2:57:4f:5e:
4b:83:40:cb:79:c0:c0:e5:7e:8c:6e:cb:ba:58:26:
e8:25:2a:32:56:ea:57:db:26:31:d8:d5:b9:77:ee:
fe:59:01:d1:81:06:40:f5:c0:28:20:99:77:81:1f:
30:bc:c1:57:a9:8a:ec:ee:6f:b6:7d:e4:89:bd:f9:
a6:94:29:18:9d:2d:3f:42:f7:c1:c9:69:02:fe:17:
eb:33:04:32:5c:84:e6:d8:4a:37:00:d8:d8:69:9d:
5f:cd:8b:a9:1c:b4:c0:99:e1:c6:3a:50:54:1a:39:
7c:99:fa:b8:96:16:72:01:9f:94:60:b3:17:05:05:
0c:fc:cf:5e:e3:be:7b:e4:95:dd:bb:51:34:c4:d8:
7b:21:42:15:c1:a5:13:58:1d:1a:a4:3b:c9:8d:2f:
a8:db:85:bb:27:53:60:2d:4b:b6:ad:1c:00:7f:b0:
60:47:26:39:0c:07:7b:e8:c5:19:c6:da:44:5c:21:
bb:58:f2:d8:9f:5c:49:09:22:bb:fc:7c:b0:27:9b:
5d:b0:e5:62:53:db:d6:02:91:ab:da:ca:bd:ad:97:
0a:4c:5d:b9:fd:a1:76:4c:62:4d:6a:b5:e8:c0:d5:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:6A:0E:49:03:C5:9C:85:D5:B1:19:BA:36:E5:D5:9F:51:F3:1F
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/X6VqDkkDxZyF1bEZujbl1Z9R8x8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.164.0/22
103.168.98.0/23
202.46.224.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c4:0e:a4:73:72:01:81:5d:d9:a8:56:4b:92:ae:27:75:c3:
6e:eb:74:97:c0:25:6c:89:14:f8:c4:fe:0c:f7:2a:00:76:4f:
28:c4:0a:7e:81:fa:7f:4b:26:10:10:cd:51:8f:d6:db:70:6f:
1b:ac:7c:52:c2:7a:8e:09:02:99:e9:64:16:84:97:00:d7:cb:
40:62:ec:15:29:70:45:e0:22:2b:88:a1:6c:0b:a2:bd:6e:a1:
1d:87:13:d1:3e:84:0c:d0:95:53:2d:83:b0:9d:e0:2c:71:85:
40:93:97:d4:88:c9:5b:a4:c3:c9:10:ee:7c:29:24:da:60:cb:
20:87:39:2b:0b:76:86:bf:5d:d6:c0:9a:1d:7d:db:87:1e:b9:
09:d3:f7:8f:67:05:26:bf:88:85:44:8a:1c:86:7f:fc:28:0e:
ad:df:6d:69:82:b8:ab:7b:7a:56:00:01:c0:e6:c3:f8:c1:30:
d9:0f:d9:93:53:3e:64:72:f6:b1:2c:75:f6:16:60:2b:bc:ee:
6f:a6:26:c0:97:43:9e:1e:a9:9c:c3:bb:58:1e:60:9a:6a:8e:
40:de:79:44:79:bb:0f:d6:a9:95:0b:0f:e3:07:ee:52:53:e4:
46:55:e4:5f:48:0d:55:4e:83:0c:fa:10:48:2b:db:fd:d1:01:
bb:b4:11:7b
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNDAxMTYw
MjM1NDJaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDVGQTU2QTBFNDkwM0M1
OUM4NUQ1QjExOUJBMzZFNUQ1OUY1MUYzMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQhYqEGh/1Beh+FU2n3UXVIY/nq5CpgxLFsldPXkuDQMt5wMDl
foxuy7pYJuglKjJW6lfbJjHY1bl37v5ZAdGBBkD1wCggmXeBHzC8wVepiuzub7Z9
5Im9+aaUKRidLT9C98HJaQL+F+szBDJchObYSjcA2NhpnV/Ni6kctMCZ4cY6UFQa
OXyZ+riWFnIBn5RgsxcFBQz8z17jvnvkld27UTTE2HshQhXBpRNYHRqkO8mNL6jb
hbsnU2AtS7atHAB/sGBHJjkMB3voxRnG2kRcIbtY8tifXEkJIrv8fLAnm12w5WJT
29YCkavayr2tlwpMXbn9oXZMYk1qtejA1VgZAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQUX6VqDkkDxZyF1bEZujbl1Z9R8x8wHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUvWDZWcURra0R4WnlG
MWJFWnVqYmwxWjlSOHg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEAmcCpAMEAWeoYgMEAsou4DANBgkqhkiG9w0BAQsFAAOCAQEAZcQOpHNyAYFd
2ahWS5KuJ3XDbut0l8AlbIkU+MT+DPcqAHZPKMQKfoH6f0smEBDNUY/W23BvG6x8
UsJ6jgkCmelkFoSXANfLQGLsFSlwReAiK4ihbAuivW6hHYcT0T6EDNCVUy2DsJ3g
LHGFQJOX1IjJW6TDyRDufCkk2mDLIIc5Kwt2hr9d1sCaHX3bhx65CdP3j2cFJr+I
hUSKHIZ//CgOrd9taYK4q3t6VgABwObD+MEw2Q/Zk1M+ZHL2sSx19hZgK7zub6Ym
wJdDnh6pnMO7WB5gmmqOQN55RHm7D9aplQsP4wfuUlPkRlXkX0gNVU6DDPoQSCvb
/dEBu7QRew==
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org