Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/GOWvUaiRaqkc8-ehowKtiWxqMm0.roa
File: GOWvUaiRaqkc8-ehowKtiWxqMm0.roa (raw, json)
Hash identifier: wMlk2JBGv9TrGVMHIcIcDyj5TuC5DVtgAV6nOkNLZ5c=
Subject key identifier: 18:E5:AF:51:A8:91:6A:A9:1C:F3:E7:A1:A3:02:AD:89:6C:6A:32:6D
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 0EE8
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/GOWvUaiRaqkc8-ehowKtiWxqMm0.roa
Signing time: Tue 24 Sep 2024 00:18:31 +0000
ROA not before: Tue 24 Sep 2024 00:18:31 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 55933
IP address blocks: 103.139.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Sep 24 00:18:31 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=18E5AF51A8916AA91CF3E7A1A302AD896C6A326D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:eb:90:67:3e:be:64:83:5a:f1:9d:bc:2d:
16:fe:b4:e9:19:48:bf:2d:11:c7:2d:d4:6a:2b:c3:
5b:4b:c5:a8:1c:76:18:fb:0c:f9:61:34:7a:59:d6:
62:15:97:1b:80:a7:d6:6e:43:04:59:70:7b:58:fc:
bb:13:89:b5:7b:9d:02:4f:60:f7:ba:fa:f4:51:de:
97:fa:ad:07:17:ee:b9:93:a2:b8:09:2d:c3:b9:7d:
cb:26:0f:bd:34:1b:e5:c2:62:49:67:63:2d:70:dd:
ff:8d:01:1b:47:70:7a:19:1a:55:e2:57:9e:73:a4:
47:07:59:c7:47:c4:5a:db:f4:e1:27:e9:8f:70:4c:
bb:88:d4:ec:ce:d3:38:8e:1e:a6:93:78:f9:67:1e:
7b:48:54:4f:8a:cb:05:c1:58:b3:8f:c6:96:f1:be:
de:53:54:82:67:1e:09:63:a2:1e:8f:cd:27:f0:9f:
c5:c4:5a:7e:20:9f:00:26:1b:78:07:09:e8:2d:a8:
aa:7b:12:94:09:30:cb:01:de:9f:4c:fd:37:41:be:
76:9e:0f:1e:9e:93:d2:54:c6:d0:0d:94:7e:7d:ad:
d7:ef:ce:16:2d:8a:76:67:a7:f4:7b:c4:d1:b5:d5:
55:52:11:5a:5a:9b:16:43:f8:14:26:d5:5b:f5:c4:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:AF:51:A8:91:6A:A9:1C:F3:E7:A1:A3:02:AD:89:6C:6A:32:6D
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/GOWvUaiRaqkc8-ehowKtiWxqMm0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5b:30:5c:61:48:0a:24:e2:3e:ec:36:b8:ee:55:cc:b0:44:
e4:89:d4:f7:70:a5:8c:7b:cd:c0:79:9d:22:11:43:de:df:ac:
5b:fa:01:44:3e:cd:4e:05:fd:be:00:3a:99:7f:b8:dd:22:df:
d8:bc:3a:51:4a:c2:9b:74:49:08:0b:1d:96:90:3d:ea:5e:6d:
1c:f1:2a:15:b8:28:77:cf:7b:f8:73:f9:2c:41:4d:7d:c7:d6:
eb:e9:f4:48:23:63:15:fa:bb:0b:8f:7a:f7:a6:af:a0:f4:ae:
4b:89:86:ce:50:09:47:8b:b1:d2:91:32:7c:b9:72:f1:d4:9b:
fb:7d:84:64:fd:8d:4e:14:1a:fc:de:47:cd:91:4a:c6:ec:1f:
ff:77:e6:08:95:5f:27:94:26:eb:c1:bb:7e:bf:c3:b8:60:61:
a4:ce:ac:f4:ff:25:a9:0b:72:b0:72:df:8e:43:13:64:cc:99:
ca:fc:41:bf:37:c3:7c:2a:7d:a3:e4:f4:f5:d4:dc:51:25:5b:
b2:0b:68:44:cb:0b:ec:c7:cd:8e:fb:93:5d:56:a7:a2:ae:6a:
fa:07:73:e7:80:68:f6:26:20:09:4e:35:12:bc:a6:3f:08:db:
7c:eb:99:0b:a2:d0:e9:d0:b8:32:b6:7a:47:23:80:e5:95:49:
9a:85:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org