Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/cTa7wnchSwMmT_j9Vk41dOY4vXo.roa
File: cTa7wnchSwMmT_j9Vk41dOY4vXo.roa (raw, json)
Hash identifier: /r+4owTI04NfYiq2T7Bi18Zx6SUTWxc3Qdb1ajLCwxY=
Subject key identifier: 71:36:BB:C2:77:21:4B:03:26:4F:F8:FD:56:4E:35:74:E6:38:BD:7A
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 0C
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/cTa7wnchSwMmT_j9Vk41dOY4vXo.roa
Signing time: Mon 24 Jun 2024 07:33:55 +0000
ROA not before: Mon 24 Jun 2024 07:33:55 +0000
ROA not after: Tue 24 Jun 2025 01:23:54 +0000
asID: 146761
IP address blocks: 103.2.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Jul 2024 04:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jun 24 07:33:55 2024 GMT
Not After : Jun 24 01:23:54 2025 GMT
Subject: CN=7136BBC277214B03264FF8FD564E3574E638BD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:45:2a:af:70:ec:0c:81:fa:4f:da:6c:97:
71:a6:a9:30:51:40:35:9c:f3:c5:b2:18:38:db:a2:
bd:6a:00:22:3d:2f:41:14:51:4a:69:a3:3a:b5:a4:
31:d2:a6:97:be:03:47:78:d1:9d:94:0a:d3:49:f8:
60:c8:17:32:d6:93:0a:88:8b:81:60:42:13:62:de:
0f:9c:02:0c:87:04:33:60:c8:3e:85:36:f4:da:08:
0b:5f:cb:3c:c2:45:a4:2c:8a:92:56:67:b4:3d:ed:
2b:32:06:84:bd:8b:20:51:d4:90:b8:7d:a2:5b:52:
31:70:1b:62:e2:e5:91:12:6c:14:16:13:ad:e6:96:
ca:4b:1b:11:0b:6d:27:7e:cc:ed:cf:8c:fa:b6:9c:
34:61:45:31:bf:a0:2c:96:20:24:b6:89:1d:a0:1b:
22:c9:ec:ce:91:43:5f:31:01:bd:41:76:73:03:6a:
e4:78:c1:d9:2a:64:03:b2:a4:25:c1:b8:ec:d3:b2:
a3:30:6a:2c:18:2f:9b:2b:13:eb:aa:c6:4b:05:8e:
b4:5a:46:79:56:2e:92:7a:be:eb:0a:f8:d7:12:32:
bf:84:30:99:07:2a:86:cc:b9:98:b9:ee:c9:98:47:
ad:64:9a:10:aa:be:84:ff:91:49:d3:67:43:57:8b:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:BB:C2:77:21:4B:03:26:4F:F8:FD:56:4E:35:74:E6:38:BD:7A
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/cTa7wnchSwMmT_j9Vk41dOY4vXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.156.0/22
Signature Algorithm: sha256WithRSAEncryption
16:22:4a:8a:6d:03:90:d2:e5:6a:a9:79:a6:db:ae:45:e3:ee:
b8:3f:43:20:17:58:bc:c1:a0:64:6c:7c:64:a2:f5:31:d8:54:
55:ce:86:0f:db:88:77:fe:22:08:39:70:b5:a3:c8:82:6a:eb:
c9:08:b7:49:7d:83:c2:c3:3b:6b:dd:40:6a:7f:6f:d9:bf:93:
6b:69:df:71:c5:ae:f0:6d:a0:cd:7d:94:64:e3:df:40:18:d0:
09:37:1f:30:a3:65:48:c4:1e:59:4d:e6:13:4f:53:61:76:50:
50:7b:e8:15:b6:49:d7:85:ef:cb:40:d4:24:f9:08:7c:6b:26:
db:b1:bd:26:6d:d9:4a:a0:aa:23:af:ce:e8:b0:60:4f:de:63:
d2:0e:24:c4:4f:ac:3f:73:97:fb:ed:2b:47:5d:83:bf:a1:10:
89:b9:7c:92:31:ec:17:1e:a2:2f:23:be:f1:fd:36:2e:87:53:
f3:e7:e6:71:88:5d:df:a1:bc:73:92:ff:55:64:5e:20:30:4d:
3f:5d:2f:75:92:0d:9b:31:ea:3a:44:e4:96:7d:2c:d7:bd:10:
d9:cc:09:33:95:c8:a4:08:79:40:d9:de:de:4f:5e:2d:3d:1e:
ee:d6:36:4a:77:1e:d7:a1:ca:78:d2:b5:4c:68:9c:85:60:46:
ce:48:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 06:19:09 2024 by rpki-client on console-fra.rpki-client.org