Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/lFC45Jy9TZOQR8PXb_-Po5lGVzg.roa
File: lFC45Jy9TZOQR8PXb_-Po5lGVzg.roa (raw, json)
Hash identifier: njFghXz/35Jzu9jOC2HYPQjlMUMf3tkdbtkoIooYfM8=
Subject key identifier: 94:50:B8:E4:9C:BD:4D:93:90:47:C3:D7:6F:FF:8F:A3:99:46:57:38
Certificate issuer: /CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Certificate serial: 088C
Authority key identifier: 5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/lFC45Jy9TZOQR8PXb_-Po5lGVzg.roa
Signing time: Wed 05 Jul 2023 07:20:04 +0000
ROA not before: Wed 05 Jul 2023 07:20:04 +0000
ROA not after: Sat 06 Jan 2024 08:35:17 +0000
asID: 151492
IP address blocks: 103.186.136.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Validity
Not Before: Jul 5 07:20:04 2023 GMT
Not After : Jan 6 08:35:17 2024 GMT
Subject: CN=9450B8E49CBD4D939047C3D76FFF8FA399465738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:4d:47:f9:f1:fe:88:35:a8:79:cc:28:f3:
a2:76:92:71:d5:79:c7:4f:7d:15:8a:66:2d:3a:0e:
14:8d:b0:50:d5:f3:4f:3e:cb:09:8a:1f:13:42:a5:
b7:57:95:8c:52:55:37:9b:2d:f0:a1:89:16:40:65:
20:b6:43:59:fc:86:0d:32:f0:43:e0:83:51:fd:be:
1c:0a:02:47:c2:bf:91:45:07:e0:6a:60:68:be:4f:
e4:59:b4:20:3d:d6:ee:1a:67:d2:6b:bc:b5:16:9f:
df:f4:6e:e2:0f:97:47:78:26:60:78:a7:9e:33:01:
f5:79:0e:cd:21:62:4e:60:e9:0b:f9:5c:d2:13:35:
5b:07:33:ee:85:ed:8d:13:b9:db:98:62:87:f3:de:
0e:ca:7c:35:cb:37:74:39:5c:9b:a5:38:07:5c:88:
22:01:94:76:12:a5:f9:1f:70:24:36:4d:da:ba:2e:
00:bf:2f:22:45:3d:9a:e5:a9:66:54:ab:eb:00:9b:
db:d6:a8:e5:5d:d6:68:34:7e:2e:f1:79:f9:02:7d:
00:e0:6c:11:2d:fa:95:05:c2:d6:f9:29:ea:6f:77:
a4:46:c6:36:e3:61:45:4c:bb:73:9d:00:4d:4d:2e:
aa:ed:55:04:dd:ec:20:b7:13:72:06:67:1b:5f:e5:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:B8:E4:9C:BD:4D:93:90:47:C3:D7:6F:FF:8F:A3:99:46:57:38
X509v3 Authority Key Identifier:
keyid:5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/lFC45Jy9TZOQR8PXb_-Po5lGVzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.136.0/23
Signature Algorithm: sha256WithRSAEncryption
54:af:dc:33:23:09:cb:e4:bc:cc:06:0f:00:7c:1e:a4:16:7e:
23:28:b1:8c:c4:e4:c0:60:43:0a:63:b8:dd:10:ff:64:b4:fe:
38:9b:d1:7f:39:36:29:8b:d4:41:a3:1c:39:b7:09:d9:d4:f2:
81:0e:a7:3a:bd:33:60:fe:8d:4b:06:57:c3:a8:2d:a5:01:16:
e6:04:92:9b:ab:32:42:b9:02:2c:5e:fb:1c:d7:8c:8a:19:19:
6b:5b:79:ef:bc:b7:51:e3:c5:11:7f:9f:ef:75:35:0f:f5:b1:
da:5c:fd:fd:54:45:3b:c0:cf:58:db:d1:d4:a0:f5:a6:d6:30:
fc:97:a8:cc:5c:f5:d5:5d:ae:c3:4d:5a:57:16:8f:d6:e6:56:
27:da:db:98:1e:18:e3:77:0e:ab:33:07:7a:30:c5:b7:3d:84:
c4:ba:c5:30:80:14:ad:74:05:92:d7:35:12:1a:cd:b3:6a:1a:
f2:73:58:83:9d:d7:6e:b5:b6:2f:0b:5e:ab:73:6c:55:5e:61:
92:fb:42:3d:fb:92:31:b1:66:74:3d:f6:b4:30:18:3c:c5:26:
55:46:91:5f:4a:ed:ee:f2:dd:4b:9c:00:28:4e:e6:7a:92:54:
de:6a:80:4d:4f:df:98:aa:27:ff:73:b8:10:3b:a6:41:37:9a:
90:45:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 07:04:34 2023 by rpki-client on console-fra.rpki-client.org