Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa
File: k7bsOwTp69S8mMzeYa7fGR8pYd4.roa (raw, json)
Hash identifier: YgGu+kPs8m4CcDMc9xQ6ApDvZYLRAg1QxCfbi/x+Nw0=
Subject key identifier: 93:B6:EC:3B:04:E9:EB:D4:BC:98:CC:DE:61:AE:DF:19:1F:29:61:DE
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 090D
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa
Signing time: Sat 25 Nov 2023 08:37:49 +0000
ROA not before: Sat 25 Nov 2023 08:37:49 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 137443
IP address blocks: 103.139.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Nov 25 08:37:49 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=93B6EC3B04E9EBD4BC98CCDE61AEDF191F2961DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:9e:ee:dc:6e:a6:94:f0:38:39:57:24:fc:
d1:ca:76:99:82:10:71:77:10:83:94:d8:0a:06:fb:
4a:23:51:98:f9:7f:0d:6e:b5:37:48:72:19:0c:25:
4e:bb:33:3d:9d:8c:2f:16:04:b4:8f:c6:b0:0d:db:
79:45:17:8b:cf:8c:d6:09:63:67:76:d8:9a:39:5c:
7b:53:c7:d4:16:26:5a:84:0a:6c:84:a6:dd:e3:e2:
0b:de:ab:76:f1:a4:9c:4e:46:09:58:95:8a:99:60:
c4:2c:cb:47:81:97:91:49:ea:eb:5b:d2:05:5d:6f:
0f:11:95:ed:20:76:64:b3:ec:f0:69:c5:0b:f7:fb:
38:22:13:06:d5:4e:32:e0:1b:6f:ca:85:79:22:81:
d3:d1:22:3c:0b:2c:78:b5:64:e2:ca:ae:a1:5e:3a:
36:d0:24:93:b0:29:75:50:2d:cc:e2:40:36:ee:4a:
ab:65:f7:1c:6e:33:ba:79:73:26:13:26:e6:d8:64:
34:e9:0f:48:53:a7:63:8c:49:41:4c:51:58:19:95:
97:7a:fc:b8:4e:19:29:77:bf:6e:17:94:fc:0f:90:
7b:be:71:23:6e:16:6d:2a:cb:71:39:19:96:93:9c:
f9:c9:3a:62:a3:9f:0c:99:b1:46:06:c7:ca:20:a6:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:EC:3B:04:E9:EB:D4:BC:98:CC:DE:61:AE:DF:19:1F:29:61:DE
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/k7bsOwTp69S8mMzeYa7fGR8pYd4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d3:bb:91:d9:af:a2:40:2c:e9:df:98:6d:1d:6d:88:7c:8a:
38:e5:d3:d4:f7:63:12:51:40:57:5d:ff:88:8a:31:52:7b:7e:
c7:36:ef:5e:a3:de:0f:d5:21:5e:88:f7:09:29:37:d5:e5:aa:
de:84:3f:d9:81:e9:25:9d:dd:cf:08:72:d1:b2:43:7f:c7:60:
f4:2b:28:c5:d9:3a:83:78:86:2e:56:8d:aa:b1:df:7e:04:1d:
17:da:06:9b:51:33:b9:16:c7:d6:25:2f:41:a7:46:06:e6:17:
d8:72:95:16:72:d6:4d:9c:3b:7a:c7:74:1b:ad:91:ae:ea:ea:
86:c4:fd:8d:4a:aa:c2:4c:44:a4:25:8b:a1:3c:b7:8c:b2:f7:
76:bc:f9:23:a0:9e:eb:47:48:92:60:cd:3b:05:0f:2d:fe:bc:
d5:aa:4e:09:a8:7f:c6:3a:4c:28:4f:d7:66:0c:a4:b2:a9:f7:
e2:c7:d2:da:7a:38:3e:54:2a:21:54:41:02:50:49:34:50:b6:
e2:10:58:02:ab:a5:63:ae:d9:3b:2d:b3:b5:b0:e2:e9:ca:2a:
a0:d0:09:15:dd:ae:87:de:04:a6:8e:c5:a5:41:1e:46:a8:10:
ee:50:47:45:85:85:52:ea:06:48:a3:26:24:0a:83:1e:32:5b:
56:40:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org