Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/wI46dF5UtlVU1i-xa2U7-CAJ7Gw.roa
File: wI46dF5UtlVU1i-xa2U7-CAJ7Gw.roa (raw, json)
Hash identifier: v7K5UxFBQQXg+qvZaKoCLFuh9lIii2wrrd5RT9XxWC8=
Subject key identifier: C0:8E:3A:74:5E:54:B6:55:54:D6:2F:B1:6B:65:3B:F8:20:09:EC:6C
Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial: 06F0
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/wI46dF5UtlVU1i-xa2U7-CAJ7Gw.roa
Signing time: Fri 10 Feb 2023 03:15:25 +0000
ROA not before: Fri 10 Feb 2023 03:15:25 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 37963
IP address blocks: 110.75.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Validity
Not Before: Feb 10 03:15:25 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=C08E3A745E54B65554D62FB16B653BF82009EC6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:63:31:af:2c:0b:12:0f:d3:1d:db:92:f6:
3f:32:a4:07:3e:f1:88:23:4e:25:21:e6:b1:28:61:
62:0a:0a:42:ab:d4:cc:56:47:80:2e:fd:ff:39:0d:
5c:15:e1:e8:6e:8d:7b:fc:ca:f8:2c:cd:9d:7e:3d:
9f:61:a0:b7:1a:24:b0:6d:b9:11:b0:b7:ce:c6:40:
a7:36:db:25:44:79:98:76:32:d9:0d:fd:96:14:e8:
d4:b5:63:60:7c:1a:e9:77:e9:90:27:30:60:89:28:
98:e2:ae:9d:08:9d:35:c4:48:4c:f1:53:ca:58:5e:
77:50:4c:2c:0c:de:df:0a:44:70:23:0d:dd:4a:1f:
63:7f:9b:01:16:4f:9e:a5:7e:65:22:e5:da:99:29:
3d:f7:fd:a0:75:79:2b:cd:b4:80:7b:80:df:2b:9f:
a5:d8:ad:e9:2a:99:0b:51:94:b0:b3:6b:be:e9:af:
f0:3c:7f:36:38:7b:48:de:d8:fd:b3:ca:3b:82:1d:
81:5e:63:bf:0c:09:b6:e5:14:ed:41:19:73:87:cb:
e1:4a:03:89:ee:9c:13:86:58:9c:59:be:06:87:f9:
22:14:b4:d5:a0:ed:b8:48:9e:a2:08:35:67:2b:f7:
1f:8e:42:29:41:a4:a0:2c:a0:b8:d1:a0:e2:7c:60:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:3A:74:5E:54:B6:55:54:D6:2F:B1:6B:65:3B:F8:20:09:EC:6C
X509v3 Authority Key Identifier:
keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/wI46dF5UtlVU1i-xa2U7-CAJ7Gw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.75.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:3f:eb:74:4d:74:f6:68:bf:fa:22:91:14:f1:36:ad:31:b6:
29:e5:b8:0c:96:56:19:bd:10:3b:37:e2:8f:8f:74:86:b4:ab:
81:4d:0d:1d:46:1b:8b:8d:29:83:d7:bc:33:cb:67:72:b6:ae:
fc:4a:99:1a:45:20:d7:38:fd:eb:63:19:1d:a5:c2:15:ef:d7:
73:40:3a:41:df:9e:28:59:85:b1:cb:ae:82:07:d7:de:7b:25:
de:fc:f3:35:40:72:ea:0d:6b:60:92:c6:64:d8:6d:e6:3b:d7:
c5:64:55:56:81:7f:c1:fd:ae:50:ed:80:8a:8f:f2:4e:59:41:
cf:f3:9c:1d:22:c3:a3:c5:a3:69:08:26:07:b9:14:7d:bf:5a:
ca:29:2e:73:a8:b9:d2:c6:7e:6f:78:5b:e0:1f:f9:2a:66:9f:
0b:63:ba:ca:c1:89:af:bf:75:20:be:31:e2:93:86:f4:05:c6:
b4:93:5b:65:83:d3:49:38:36:f9:22:47:1d:41:6a:51:d1:37:
1b:e8:33:43:64:e0:f9:35:b3:82:ae:d0:6c:34:2b:76:ce:da:
6c:ae:47:2c:7b:e7:a7:c9:38:6e:41:ab:8f:cb:9d:85:e7:61:
3c:3d:cc:0b:63:6c:e7:8e:14:7c:38:69:f2:b0:66:4a:40:9d:
80:a0:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:01 2024 by rpki-client on console-ams.rpki-client.org