Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/5nIcqNUfO5x3nAnIxEzI6RC0daA.roa
File: 5nIcqNUfO5x3nAnIxEzI6RC0daA.roa (raw, json)
Hash identifier: L5bA2ux2H1icKDZo0xXDcdbb8u8HybpNBkwEjeqRLmI=
Subject key identifier: E6:72:1C:A8:D5:1F:3B:9C:77:9C:09:C8:C4:4C:C8:E9:10:B4:75:A0
Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial: 06EF
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/5nIcqNUfO5x3nAnIxEzI6RC0daA.roa
Signing time: Fri 10 Feb 2023 03:15:25 +0000
ROA not before: Fri 10 Feb 2023 03:15:25 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 37963
IP address blocks: 110.75.0.0/18 maxlen: 24
110.75.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Validity
Not Before: Feb 10 03:15:25 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=E6721CA8D51F3B9C779C09C8C44CC8E910B475A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:1f:cf:fb:fd:96:d6:92:fd:38:f7:5b:d0:
38:91:95:f7:03:7c:a1:6a:fd:fb:25:89:c2:77:02:
c4:97:ed:da:4f:4c:05:b7:83:85:f2:ff:ce:47:1b:
91:81:f9:70:70:0e:c7:4f:0f:e5:a7:6e:cd:82:b1:
e3:59:13:cf:93:90:a0:b2:fb:97:d2:e6:1d:c3:01:
c0:6b:a9:94:d7:df:dd:32:74:9e:88:49:8f:ec:d8:
63:d3:81:e2:57:8d:e3:06:d9:c1:57:9f:cf:61:7a:
cb:7f:23:0f:2c:38:71:cf:bc:41:77:43:16:2a:5f:
24:7e:4e:aa:85:ba:59:02:e1:85:a8:04:bf:83:92:
b9:0d:0c:c4:10:a2:e9:e1:0b:27:34:b4:86:ff:7f:
e4:f7:5a:fc:d9:0d:3a:96:cb:ae:88:b9:71:24:3b:
ab:19:81:68:ac:78:af:d1:d3:ea:09:00:99:5e:51:
44:5d:7f:70:21:c6:73:74:a6:bb:f3:0b:04:54:04:
d7:c3:45:c6:c0:52:80:6b:80:f1:67:1a:87:b1:c9:
86:b0:aa:05:3a:5d:a1:f0:8e:47:f8:9b:5d:f2:6f:
1d:18:01:81:fa:26:58:c0:ce:36:93:86:8e:d3:aa:
e1:cd:ef:09:c4:fc:fe:d1:a4:fd:f6:38:c6:83:09:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:1C:A8:D5:1F:3B:9C:77:9C:09:C8:C4:4C:C8:E9:10:B4:75:A0
X509v3 Authority Key Identifier:
keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/5nIcqNUfO5x3nAnIxEzI6RC0daA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.75.0.0/17
Signature Algorithm: sha256WithRSAEncryption
33:c7:40:71:f4:99:55:84:b2:e2:47:a8:be:7c:c3:51:19:5a:
3a:c9:44:fc:0e:fc:62:06:36:bc:8f:15:9e:18:75:c0:5d:01:
1e:57:76:c2:34:3f:fd:f2:06:b8:9f:c9:54:b7:2d:03:aa:dd:
13:30:d9:75:6b:b6:2c:6f:28:f4:be:9e:62:70:c0:03:c1:c3:
dd:cd:48:65:56:90:0e:4a:35:59:2f:d2:9c:49:61:b2:5a:1d:
97:5c:c6:3a:0c:ec:2e:69:db:3c:e0:ac:c9:a6:d5:35:ff:f1:
20:72:a9:71:06:6b:17:cc:f5:1e:88:26:81:37:e9:83:31:e4:
86:97:8f:1a:56:47:f9:59:e6:4f:43:39:61:35:8d:70:43:96:
97:4a:e4:fc:de:46:7f:b6:ff:e4:fb:1c:5a:62:f1:dd:1e:91:
70:e3:35:58:fc:16:d6:1d:f2:2a:55:a9:07:6e:55:6d:f9:86:
e3:1c:7b:93:de:70:14:70:26:6b:2c:c6:8c:03:ca:d6:31:c6:
4a:fd:52:93:96:dd:a0:69:58:7a:96:09:f7:00:3e:18:b6:9e:
94:6e:9a:d6:03:06:91:3d:ef:01:02:55:d4:ad:84:ae:1a:5d:
6d:6f:36:31:61:2e:bd:5f:30:c5:0c:9e:a9:59:56:55:f3:b6:
de:5b:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:44 2024 by rpki-client on console-fra.rpki-client.org