Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/UaqUSrZJ2fxANmdj5HvuDgNuBzE.roa
File: UaqUSrZJ2fxANmdj5HvuDgNuBzE.roa (raw, json)
Hash identifier: B2JGfOVPJ0MBnsnmd80SbmpcFgHYTU39SFwJ677s6rE=
Subject key identifier: 51:AA:94:4A:B6:49:D9:FC:40:36:67:63:E4:7B:EE:0E:03:6E:07:31
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 0FE8
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UaqUSrZJ2fxANmdj5HvuDgNuBzE.roa
Signing time: Tue 19 Sep 2023 19:35:15 +0000
ROA not before: Tue 19 Sep 2023 19:35:15 +0000
ROA not after: Tue 17 Sep 2024 08:06:57 +0000
asID: 146845
IP address blocks: 103.169.50.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Sep 19 19:35:15 2023 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=51AA944AB649D9FC40366763E47BEE0E036E0731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:de:1a:90:3b:d2:a3:b6:9d:e0:23:28:d5:
93:18:1a:1f:e5:cf:43:99:91:d1:f2:21:dc:4d:60:
a4:77:16:5c:13:c6:37:49:f6:a5:0e:4a:7f:b1:6c:
95:d9:16:d2:7c:7c:e5:11:ef:50:08:6b:05:ec:81:
b1:21:0e:38:23:c0:0a:7a:97:7e:e4:05:98:e2:92:
9f:dd:61:98:21:79:02:21:00:30:42:62:08:7f:3e:
d6:84:af:51:a3:e0:c7:08:64:00:d6:8c:78:9c:ec:
24:9e:4f:56:53:00:77:77:5c:46:e7:e8:c4:58:39:
4d:55:71:d2:30:bf:ad:9e:4c:6e:79:b3:01:f9:3a:
d2:df:bd:d5:37:92:2e:ee:2f:6e:9e:c9:88:65:06:
14:52:7c:d1:92:a2:e4:87:c9:e8:11:66:63:9e:a5:
2e:4e:5c:ff:ec:29:90:87:6c:06:74:2c:58:7c:95:
69:c0:f8:dc:c0:95:14:a3:bd:8b:e0:c6:68:e4:b8:
d4:85:16:28:d0:7a:75:c7:bf:92:80:01:74:37:28:
8f:49:88:57:71:40:d4:86:b3:94:a4:cb:3f:dc:de:
04:53:24:3b:4d:9a:7d:1d:db:80:aa:d2:fc:dd:0c:
1d:b6:74:34:ba:93:b1:ad:cb:63:b8:fe:84:91:2b:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:94:4A:B6:49:D9:FC:40:36:67:63:E4:7B:EE:0E:03:6E:07:31
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UaqUSrZJ2fxANmdj5HvuDgNuBzE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.50.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:dc:06:3f:a7:a7:63:39:99:0d:4d:44:70:ca:44:a2:e2:d0:
f1:e1:48:c5:39:f9:51:07:af:c9:08:24:be:e7:2b:bf:f3:22:
ce:1e:db:bf:ab:38:77:6b:f8:e9:1f:fc:32:7d:51:cd:de:c9:
af:9e:8a:65:2b:64:fd:d0:b0:3e:4f:43:57:d2:3f:16:4c:8c:
c9:06:08:5e:7f:e5:9c:8f:a1:7e:5b:c5:85:71:ef:d8:96:6a:
47:ec:6d:e9:c2:a4:22:5a:a0:4a:85:a5:4d:67:8b:5d:51:b6:
74:1c:90:b1:5e:0a:eb:5c:f3:74:9c:3e:6e:79:99:d3:e6:c1:
0e:a9:34:89:d2:c8:b7:a5:7e:b9:c0:f4:47:5e:c7:b3:cf:3c:
b6:0c:83:0c:20:b7:27:f2:ea:98:90:73:81:a8:18:06:0f:e8:
38:20:d8:f4:20:ec:79:43:0c:06:05:0d:65:91:c2:b4:25:f3:
a6:7b:65:cf:79:6f:79:c3:a8:20:d6:54:17:d9:54:a6:97:67:
98:7c:76:57:3b:65:ea:7b:10:eb:2f:69:be:04:6a:31:26:30:
8c:fc:77:95:a9:74:0e:7f:b6:4a:14:04:2f:b4:5d:88:c9:9f:
50:bd:c8:1e:a3:95:f4:84:cc:91:49:c5:87:e8:20:e7:11:9c:
f0:bb:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 07:16:58 2023 by rpki-client on console-ams.rpki-client.org