Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/SOw2j5Zk-VFvzTBmYAVJlFx_PwY.roa
File: SOw2j5Zk-VFvzTBmYAVJlFx_PwY.roa (raw, json)
Hash identifier: YmRuE6HEYgR3mYnQPLkUX11hS0TShdJHSNX99QCY/k8=
Subject key identifier: 48:EC:36:8F:96:64:F9:51:6F:CD:30:66:60:05:49:94:5C:7F:3F:06
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 0EEA
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/SOw2j5Zk-VFvzTBmYAVJlFx_PwY.roa
Signing time: Tue 24 Sep 2024 00:18:32 +0000
ROA not before: Tue 24 Sep 2024 00:18:32 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 55933
IP address blocks: 103.139.92.0/24 maxlen: 24
103.139.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3818 (0xeea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Sep 24 00:18:32 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=48EC368F9664F9516FCD3066600549945C7F3F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:8c:84:2f:0f:0a:42:2e:6f:4a:f6:ae:e1:
ed:07:ce:d4:f9:ae:52:91:12:b8:5a:e5:86:90:ea:
90:8b:f0:f0:91:0a:a4:e5:c4:70:66:3f:da:d5:c6:
1d:98:5a:06:7c:ba:c9:f1:2c:3a:a5:5f:e7:91:ae:
c9:06:51:5d:46:b4:8d:73:5f:02:a8:2d:b0:73:e2:
52:73:61:8b:8b:7c:9f:c1:6f:9e:a2:44:45:2d:39:
c6:29:f1:be:6c:0c:74:d2:0b:55:6b:84:fc:a6:9a:
4b:bc:24:47:f1:01:11:ff:d1:cf:6b:10:b7:73:8f:
a2:fc:23:8c:37:38:12:fa:48:37:20:55:eb:6d:89:
a8:21:d6:bc:56:87:88:ef:ec:ed:59:07:b7:70:f9:
e0:88:65:6c:0b:70:43:b9:57:f9:e7:5d:6e:10:49:
3f:fc:39:51:00:7d:b1:4e:35:3e:a1:6f:df:a1:2e:
c0:cc:92:b9:9a:17:be:cf:0e:05:d2:46:79:d5:66:
f7:2f:95:59:8f:73:40:00:fb:ef:f3:50:a9:ee:4d:
33:ae:d2:48:73:39:3c:a4:7b:34:44:3f:c0:99:9b:
da:32:a8:6a:8a:e5:13:36:1f:be:8b:9a:c5:a8:15:
ca:1e:6a:01:3f:16:dc:85:cd:c6:68:26:e4:cf:2d:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:36:8F:96:64:F9:51:6F:CD:30:66:60:05:49:94:5C:7F:3F:06
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/SOw2j5Zk-VFvzTBmYAVJlFx_PwY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:1f:3f:17:9c:cc:9a:6d:58:85:2b:7b:0e:5f:61:f2:86:91:
38:0c:eb:1b:00:6f:57:34:bf:cf:f9:18:d3:4b:5e:1b:6d:ad:
84:97:1e:7a:52:46:d9:7d:c1:66:c3:c8:1c:47:1c:2b:06:d5:
12:a3:a8:f8:bb:17:fe:ae:4d:27:c3:90:5c:f4:b7:ad:69:90:
83:10:f8:b0:e2:7a:f8:84:eb:eb:1d:d8:d8:8a:79:53:5e:35:
a9:d2:12:f0:ee:47:db:f7:31:25:42:52:0a:da:fb:88:da:a6:
25:9c:a3:0c:7f:00:2f:0f:3d:8a:4d:cd:a1:01:74:8c:23:ab:
1b:69:21:ec:9a:88:e0:ad:89:63:22:df:ae:d1:2c:78:05:7d:
30:2d:e0:9d:3a:83:41:d3:bc:df:ee:7d:83:7e:99:e8:69:e8:
ec:49:10:6e:68:d0:b2:7d:d7:8b:d0:8a:61:1c:29:37:64:10:
7d:92:a8:87:3e:35:7f:e0:6d:72:36:a7:04:54:bb:2e:fd:96:
42:54:b5:11:b3:ca:7b:17:a8:6d:59:0a:dc:0a:5d:ad:c5:77:
cd:26:99:36:e2:6e:99:8f:c6:d9:a5:47:c8:24:eb:4e:3a:dc:
4a:fa:4a:35:96:ed:7d:b3:be:e1:b1:fc:a5:5b:8e:03:83:b8:
be:98:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org