Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa
File: WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa (raw, json)
Hash identifier: aJW/hSzLpmjXLjPmAn79jkg04V9fT7OXUVSdWOw8/yc=
Subject key identifier: 58:08:72:BF:FB:BD:4F:88:F1:2A:66:70:84:A0:4C:20:4A:AF:99:59
Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB
Certificate serial: 04
Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa
Signing time: Mon 10 Jul 2023 09:44:54 +0000
ROA not before: Mon 10 Jul 2023 09:44:54 +0000
ROA not after: Tue 09 Jul 2024 09:42:15 +0000
asID: 17621
IP address blocks: 103.96.224.0/23 maxlen: 24
103.96.224.0/24 maxlen: 24
103.96.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 09:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB
Validity
Not Before: Jul 10 09:44:54 2023 GMT
Not After : Jul 9 09:42:15 2024 GMT
Subject: CN=580872BFFBBD4F88F12A667084A04C204AAF9959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:b2:3b:53:b3:f7:93:68:ee:d4:4e:98:65:
dc:9a:dd:a7:69:39:8a:93:73:13:52:12:b0:2f:88:
cc:a6:e1:11:70:29:ac:ff:3c:70:d1:6c:ac:02:a7:
83:0c:f0:c4:a4:89:7d:8a:0a:65:ea:f9:a0:df:84:
d8:65:b0:d9:e0:d4:8c:75:59:ff:0b:b8:85:38:d5:
af:28:32:85:72:c5:d2:dc:f2:b0:24:ad:ff:84:dd:
6e:85:74:94:e7:a3:4f:4b:82:ca:69:f6:0c:fc:79:
df:91:c6:e3:de:57:be:0b:f9:f7:0c:02:b9:58:26:
f2:54:ce:a6:8e:05:b2:3b:8f:2b:52:f9:23:bc:e2:
a7:c5:a7:2b:06:94:62:69:e1:85:7e:3f:2e:7d:d7:
ef:5f:c3:8e:5a:b4:de:90:fc:f3:b8:28:93:c6:d1:
16:bc:88:8b:bb:ab:79:17:95:09:6c:15:a9:8d:76:
0b:f4:fe:33:ce:60:e0:c3:41:c8:6e:56:96:a7:e9:
b7:74:94:43:0d:2f:1e:df:d2:58:8f:26:34:05:31:
9f:aa:de:cc:7a:55:11:a4:fb:23:e1:09:33:27:7d:
f3:0f:76:4c:2e:fd:ed:24:ac:5b:4a:18:c9:10:b4:
2b:28:98:89:09:9b:50:de:7c:55:51:1e:94:0a:31:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:72:BF:FB:BD:4F:88:F1:2A:66:70:84:A0:4C:20:4A:AF:99:59
X509v3 Authority Key Identifier:
keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WAhyv_u9T4jxKmZwhKBMIEqvmVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:be:41:5d:4a:36:b4:93:eb:ea:1e:7a:64:a0:66:6a:c8:02:
c1:49:6b:6f:f6:36:35:eb:90:3b:25:e4:fb:de:cb:a2:57:ee:
fc:71:20:5a:61:9b:83:b9:0b:a0:48:35:40:bd:53:7f:f4:db:
cf:d4:6f:bf:cd:fc:b2:c1:76:d5:e6:7b:7c:2a:ff:ce:72:6d:
8f:de:62:5b:73:95:f7:5f:ad:72:32:7f:4c:d7:64:a8:40:57:
9b:d7:0d:50:68:b9:9e:76:36:21:91:fa:dd:6d:4b:46:39:c7:
b3:06:a5:29:f8:6c:72:7e:e0:b2:08:26:d2:80:5b:4c:eb:37:
db:a9:7e:7e:f7:c7:3f:fb:7f:c6:a0:2b:1f:bb:f6:d1:8e:69:
47:b3:c4:36:28:5f:11:eb:58:e0:57:a4:c1:6c:72:eb:96:91:
18:62:ac:80:4d:e2:97:23:51:85:54:ab:61:ee:67:b1:c5:69:
08:34:27:70:28:a3:0f:77:96:18:23:11:ea:ac:29:1d:51:ea:
63:b5:f9:91:2f:77:37:c9:43:d3:1c:48:ab:e2:91:b5:2f:bd:
ad:ae:b0:6c:6e:31:06:7c:54:8a:a0:d3:6d:c1:42:a9:bc:dc:
aa:4d:04:47:71:c0:2b:af:5f:a8:85:ea:85:31:d9:ea:29:a2:
62:d2:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:11:13 2024 by rpki-client on console-fra.rpki-client.org