Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/lCp-wFUsHWT8gj9I6nP6nOQIb9M.roa
File: lCp-wFUsHWT8gj9I6nP6nOQIb9M.roa (raw, json)
Hash identifier: IkxwL9wemYBZOn33EYXhZNJ0D/sqESshKfqHDKOB8Vg=
Subject key identifier: 94:2A:7E:C0:55:2C:1D:64:FC:82:3F:48:EA:73:FA:9C:E4:08:6F:D3
Certificate issuer: /CN=8646EA74356E704AEDD163ECA94E5A442308DF78
Certificate serial: 13F3
Authority key identifier: 86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/lCp-wFUsHWT8gj9I6nP6nOQIb9M.roa
Signing time: Fri 19 May 2023 05:55:24 +0000
ROA not before: Fri 19 May 2023 05:55:24 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 24424
IP address blocks: 203.208.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5107 (0x13f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8646EA74356E704AEDD163ECA94E5A442308DF78
Validity
Not Before: May 19 05:55:24 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=942A7EC0552C1D64FC823F48EA73FA9CE4086FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:0a:14:78:db:f9:4e:a3:97:b6:87:35:66:
97:28:1b:eb:e5:1f:c1:0a:cd:83:7d:3f:29:82:ec:
72:34:fc:fc:a8:0b:ec:4f:cf:f1:a1:1f:4e:ca:37:
e9:1a:50:d9:0a:b8:29:03:e2:a8:2d:a6:d7:32:17:
c9:0c:ac:a5:04:8c:f0:41:ce:91:6d:4c:b7:2d:e8:
b7:10:01:db:05:7c:c3:d4:73:ad:84:14:fb:93:88:
93:02:66:e6:6d:4d:d7:1f:11:67:2a:c0:2b:19:b8:
e4:21:fa:c6:f9:97:1f:f0:52:ce:19:36:f8:da:ac:
90:a8:a0:4c:6d:4b:3e:c1:bc:ef:88:71:60:f8:6d:
55:3d:2d:a3:30:bc:5d:56:69:63:cc:e9:b5:d7:ea:
7d:ce:cf:ff:1c:1c:07:d5:ab:6d:3c:92:a7:ad:e3:
50:3d:c3:7a:a2:c3:95:be:45:1f:41:50:31:a6:41:
9b:45:0f:bb:92:2f:47:23:78:09:80:75:c9:6e:37:
98:5f:95:a3:7e:0d:fb:61:d2:93:a0:ca:d5:63:19:
8f:53:a8:df:fb:26:b5:5d:72:6f:07:97:57:0e:b3:
e6:8a:fa:6b:88:0b:5b:b4:e2:79:8a:47:56:9c:40:
b3:f3:f6:ad:be:65:20:11:a6:b3:5f:a1:3c:ec:c1:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:7E:C0:55:2C:1D:64:FC:82:3F:48:EA:73:FA:9C:E4:08:6F:D3
X509v3 Authority Key Identifier:
keyid:86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/lCp-wFUsHWT8gj9I6nP6nOQIb9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:95:b0:f6:82:e3:7b:14:8a:ba:01:30:0b:96:60:5b:6a:48:
e4:b8:a3:35:fb:3e:07:ce:c8:08:70:5f:a2:5d:78:ef:9c:2b:
16:6a:d4:eb:a9:c2:13:95:16:bf:1a:2b:2e:18:87:ae:1e:53:
11:8b:d5:af:36:ae:bd:b1:92:45:6e:48:c3:52:41:02:be:ee:
3d:f4:82:dc:45:75:f3:91:30:09:8f:3e:81:f8:09:ec:78:66:
5d:fa:14:c5:1f:3c:bd:e1:16:d9:2e:4c:29:2f:00:0d:94:c8:
e2:a4:39:79:ee:8f:4a:45:c3:97:9e:d7:58:95:17:e2:31:f1:
f5:39:0a:c2:53:02:a1:f6:3e:02:20:7d:e1:8b:a1:8f:32:6e:
16:ac:89:31:93:7b:66:94:cc:30:2a:c4:bb:60:09:19:98:cd:
b7:ba:f1:fa:e0:bf:e9:47:2f:c0:32:e4:07:86:2f:a2:3b:d4:
b7:f9:ad:94:93:ae:f6:89:4c:f7:4e:97:25:25:e1:be:a0:c8:
b8:03:31:6d:35:52:4d:b0:21:b7:cf:25:cb:86:d1:3e:18:d4:
80:80:6d:dd:2c:5e:52:43:ea:9f:30:20:75:32:64:7a:51:52:
1f:c1:5d:5c:e7:b2:17:2b:1c:ce:0a:17:7c:05:e1:72:12:85:
9e:1d:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org