Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/ykxbjZpYLSJx0pOvDsaU0tO-uYg.roa
File: ykxbjZpYLSJx0pOvDsaU0tO-uYg.roa (raw, json)
Hash identifier: dSNwMI2SOBmChNFvHMQMMhB9hSavV/DGOUjp2jNFejQ=
Subject key identifier: CA:4C:5B:8D:9A:58:2D:22:71:D2:93:AF:0E:C6:94:D2:D3:BE:B9:88
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 071B
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ykxbjZpYLSJx0pOvDsaU0tO-uYg.roa
Signing time: Thu 17 Aug 2023 11:09:04 +0000
ROA not before: Thu 17 Aug 2023 11:09:04 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 136778
IP address blocks: 103.139.92.0/24 maxlen: 24
103.139.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Aug 17 11:09:04 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=CA4C5B8D9A582D2271D293AF0EC694D2D3BEB988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:d3:b7:cb:2f:53:c4:eb:2e:ff:2c:a5:a8:
b6:b6:50:b0:84:84:3b:c8:df:09:42:08:ad:6e:df:
59:4c:20:d8:42:05:a0:ef:a2:05:28:ab:ca:16:31:
44:a3:ce:7e:88:8e:02:0b:25:66:80:c3:d8:2c:6e:
35:06:b0:46:f5:67:8d:35:33:73:2f:29:5b:10:d7:
11:84:55:82:17:65:bb:af:7b:79:08:5a:36:64:d2:
5a:0a:df:45:a4:aa:21:2f:0c:e1:25:23:e5:1b:68:
39:db:49:f8:13:48:ff:1f:ba:02:2e:c6:d4:3a:a7:
0b:69:37:1e:18:f0:4a:a6:6c:94:02:16:60:d0:df:
57:e1:cd:b6:af:5e:2a:f6:b0:68:b8:5e:9b:3f:05:
1f:65:61:4a:39:92:fc:ce:18:7d:56:46:b4:4e:73:
21:fe:98:51:e7:df:0f:bc:55:22:83:03:63:5d:eb:
01:d1:7e:ee:48:30:e1:97:83:06:64:da:9d:43:ef:
46:d3:95:18:5e:d0:8b:5e:0f:1a:c0:a1:f3:20:c5:
c5:f1:6e:10:4a:36:9a:56:7e:58:8a:dd:c3:e1:99:
1c:78:c7:87:13:d6:e0:98:8f:5b:3f:08:d4:96:f6:
26:e5:38:a4:4f:e4:86:d6:a1:d4:f6:de:d2:13:bb:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:5B:8D:9A:58:2D:22:71:D2:93:AF:0E:C6:94:D2:D3:BE:B9:88
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ykxbjZpYLSJx0pOvDsaU0tO-uYg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:6d:8a:1b:48:b4:cd:b5:6d:c1:6a:96:70:9b:91:1a:de:da:
c0:a0:bc:c3:db:02:a6:b6:d4:15:bb:ed:98:79:d8:af:20:b1:
94:6a:94:2b:ff:74:74:55:e9:b4:e4:ad:0e:ef:05:f1:62:a4:
b6:fd:69:ee:5e:68:68:3a:9a:5c:f7:64:d0:44:de:cb:ef:ad:
d8:3b:0b:fd:65:44:48:59:dd:6c:f2:c3:85:97:11:3e:f9:a5:
4d:92:5c:e1:b2:6b:58:92:25:d7:5f:e0:48:b9:72:66:24:e9:
f6:7a:b5:7d:ff:00:84:ae:5b:2d:33:a3:e7:db:76:3d:c6:07:
fb:68:bf:99:ce:e4:36:0b:78:50:13:22:e1:18:ca:d5:a7:86:
ba:82:3d:20:43:e8:d6:b4:47:36:b8:f8:37:3a:57:76:0c:4c:
b7:e0:15:fd:0b:99:d6:90:86:e8:b1:65:b2:3a:81:eb:f0:58:
b7:0f:c1:6f:48:55:fb:a3:c0:77:cb:98:dc:4f:36:0d:62:ee:
19:e4:d4:a7:4f:77:cb:21:87:ee:5b:4c:80:c9:3f:ef:55:b9:
bb:1e:d7:3d:20:af:05:93:11:63:e2:a1:92:a7:98:fe:4f:22:
5d:d7:c2:45:72:4e:2c:a5:68:ba:15:38:ea:4a:d0:5e:ee:d3:
e6:2a:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 09:27:23 2023 by rpki-client on console-fra.rpki-client.org