Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa
File: Ps93tpLhIYba_M9Rp7ZWlHngspk.roa (raw, json)
Hash identifier: l6d3TI6Ri4KBmHox+239MQ7979NmuFUtDcDiFA3lkis=
Subject key identifier: 3E:CF:77:B6:92:E1:21:86:DA:FC:CF:51:A7:B6:56:94:79:E0:B2:99
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 0AEF
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa
Signing time: Fri 01 Mar 2024 05:34:38 +0000
ROA not before: Fri 01 Mar 2024 05:34:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 137443
IP address blocks: 103.139.92.0/24 maxlen: 24
103.139.93.0/24 maxlen: 24
103.197.180.0/24 maxlen: 24
103.197.181.0/24 maxlen: 24
103.197.182.0/24 maxlen: 24
103.197.183.0/24 maxlen: 24
103.218.92.0/24 maxlen: 24
103.218.93.0/24 maxlen: 24
103.218.94.0/24 maxlen: 24
103.218.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Mar 1 05:34:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3ECF77B692E12186DAFCCF51A7B6569479E0B299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:ec:25:95:d1:29:5c:17:ee:89:bc:61:9b:
64:26:a1:73:76:e3:ee:29:8d:10:a3:f1:ff:a6:ef:
55:b3:a4:ef:7a:b1:70:51:c4:4f:52:8b:43:77:ee:
9b:de:a6:0d:63:f0:0b:0d:b0:92:71:fb:eb:e8:a7:
14:d9:0e:32:3e:69:e2:64:79:3e:b2:92:39:3e:ca:
8b:d7:f5:18:f3:d2:d1:58:53:3e:f1:b0:9d:d2:47:
e5:01:8a:8a:09:53:c9:a0:87:b8:a0:8e:e7:eb:14:
8f:94:b5:02:d6:76:3e:02:09:2e:e8:ae:bc:e4:b6:
9a:25:6a:2a:88:e3:4a:79:99:01:be:91:ac:fd:2a:
fb:28:a7:46:ec:e1:b4:dd:26:42:27:42:15:2d:d0:
db:d2:d9:b4:7c:b7:50:0b:70:5f:92:a5:27:3a:4f:
01:05:85:d7:13:f6:cf:aa:0e:c9:f3:5b:a4:67:7a:
f1:5d:1f:0e:6e:dc:86:57:9f:53:49:90:cf:0b:93:
5d:a5:8b:69:13:37:31:fa:38:0a:a7:e1:2a:c6:47:
3f:83:8c:59:98:bf:a6:1d:4c:00:88:87:2a:db:9b:
b3:4c:5c:92:8e:9e:3a:4c:e2:54:e7:67:88:4b:65:
04:50:9b:2e:d5:c7:7c:27:08:56:0c:67:5b:9b:3c:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:77:B6:92:E1:21:86:DA:FC:CF:51:A7:B6:56:94:79:E0:B2:99
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ps93tpLhIYba_M9Rp7ZWlHngspk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
103.197.180.0/22
103.218.92.0/22
Signature Algorithm: sha256WithRSAEncryption
73:84:c1:b7:a2:43:3e:f5:32:d0:36:86:f9:f7:a3:db:d1:b9:
29:19:4d:28:8b:57:b6:a2:dd:91:10:d3:66:86:f7:bb:9a:0e:
ee:28:08:5d:28:64:a0:1b:f7:b9:a4:ed:96:bd:69:8c:0c:c9:
0c:b2:b3:4c:bd:a3:66:ad:f8:84:14:c4:1b:41:0b:92:1c:eb:
e4:b3:bc:92:88:0f:70:e8:13:e1:74:48:f8:87:e3:ab:19:ca:
f4:7e:5c:e9:f2:7c:0f:f3:7b:f1:ee:51:1f:75:1d:87:ac:18:
28:c8:49:d1:f5:48:d1:96:00:a9:0b:d1:0b:ac:c4:62:07:96:
93:20:13:85:82:87:56:69:11:3b:08:ac:b5:b2:0c:e8:7f:88:
d4:bc:66:88:d9:17:55:d4:1c:75:38:1b:94:17:4f:db:bb:fd:
aa:32:bf:e9:af:7c:b4:5e:22:fa:4c:be:2b:89:36:84:52:cd:
52:a7:cf:49:03:f5:80:61:13:09:6d:54:03:d3:e6:84:4b:d5:
14:39:a5:fd:6b:87:43:7c:f3:0b:4c:b7:86:bf:ee:aa:be:86:
4f:d1:3a:18:03:58:ad:dc:13:a6:24:2b:7d:02:d9:66:f9:f7:
1f:ca:bc:4c:39:aa:fc:e8:0c:24:df:46:65:17:fa:43:e6:24:
c8:c6:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org