Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/609MmPRsz4i2w7gX4d-vxHfCCLY.roa
File: 609MmPRsz4i2w7gX4d-vxHfCCLY.roa (raw, json)
Hash identifier: 4bH99kOWJJwsKPZIo4VE23OuoJGs5XPRCbG7863XS60=
Subject key identifier: EB:4F:4C:98:F4:6C:CF:88:B6:C3:B8:17:E1:DF:AF:C4:77:C2:08:B6
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 12F3
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/609MmPRsz4i2w7gX4d-vxHfCCLY.roa
Signing time: Mon 15 Apr 2024 09:15:30 +0000
ROA not before: Mon 15 Apr 2024 09:15:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 17429
IP address blocks: 103.238.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 07:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4851 (0x12f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: Apr 15 09:15:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB4F4C98F46CCF88B6C3B817E1DFAFC477C208B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:2f:f0:7a:24:de:86:b2:7d:0b:37:83:22:
11:c6:37:79:0d:6a:d0:e4:85:74:35:6f:3e:87:47:
34:06:34:8e:22:18:90:84:c9:24:86:f3:27:48:7e:
94:90:48:3d:11:56:26:49:35:d5:4f:db:5e:3e:db:
b1:bb:7c:6e:67:48:bb:88:ea:f1:d3:90:4e:6e:07:
81:2b:b5:30:e9:d5:2e:29:e2:b1:f9:38:d2:53:bb:
a7:3a:77:20:fc:f2:3e:89:ff:6d:a9:1c:41:99:44:
69:86:e1:17:36:5a:49:98:28:28:83:3d:05:10:f7:
00:b0:e1:a0:44:59:7e:fb:2f:dd:7b:4f:a8:c2:76:
b5:be:88:7f:11:fe:0b:f6:df:54:25:a6:ee:77:e5:
28:5f:13:3d:f8:42:75:99:5e:24:cc:4d:b2:c2:38:
66:f6:81:9d:2b:52:0f:db:82:68:a2:87:c4:35:2f:
e6:81:0b:dc:7a:71:84:c3:72:7a:8e:ab:fd:0e:fb:
61:d3:88:27:99:06:3f:92:f7:31:4e:83:b4:cc:08:
03:7b:ff:ec:71:21:32:4f:3a:51:a7:01:55:10:13:
59:84:3d:64:a4:1a:9a:d7:54:04:b9:be:90:7e:b4:
8c:47:ef:a0:0b:e6:67:dc:c8:2f:1e:7e:ce:6b:d9:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:4C:98:F4:6C:CF:88:B6:C3:B8:17:E1:DF:AF:C4:77:C2:08:B6
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/609MmPRsz4i2w7gX4d-vxHfCCLY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:39:45:2c:64:57:f8:fd:84:a9:c5:4c:7d:c1:a1:77:4b:ae:
b6:14:c6:22:92:02:36:10:12:f2:5a:c5:af:00:6b:04:8d:47:
1f:7a:6a:55:0f:dd:8f:36:61:44:1b:da:c4:9a:61:f4:7a:09:
45:c1:62:f1:58:dc:ed:3d:d2:4f:29:86:e2:43:f4:33:b8:00:
89:f8:a0:7a:a9:df:e7:09:63:c2:8c:a6:e1:16:7c:2b:c0:63:
a7:1a:df:34:87:9b:bf:3a:6a:7f:0d:0f:1e:5e:8e:c6:a6:6e:
21:47:8d:a0:92:55:61:df:9d:59:e3:21:bb:14:15:c4:85:c2:
ce:90:c8:07:0a:89:9c:92:35:e7:01:1b:bc:20:13:bf:4d:10:
a7:1f:ec:e8:9b:22:e8:ad:4e:9c:4c:ee:ad:d0:d0:b7:c6:bf:
bf:ff:43:ca:55:18:07:f1:52:77:05:e7:cc:ee:d0:56:ef:61:
fa:26:a1:9c:77:c6:fd:1f:69:a7:eb:c6:5d:de:db:1f:cd:29:
1d:a2:d0:c9:e6:d0:cd:d4:e1:d7:11:7a:c4:f0:7a:9d:3b:20:
c6:47:94:f1:8b:51:7d:e0:c4:95:1a:0d:28:8e:74:4d:6b:e5:
a9:4d:1d:6a:8f:ad:9e:6e:18:02:d2:10:f1:92:34:11:5b:59:
a1:49:a6:7d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD
Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNDA0MTUw
OTE1MzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCNEY0Qzk4RjQ2Q0NG
ODhCNkMzQjgxN0UxREZBRkM0NzdDMjA4QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFQS/weiTehrJ9CzeDIhHGN3kNatDkhXQ1bz6HRzQGNI4iGJCE
ySSG8ydIfpSQSD0RViZJNdVP214+27G7fG5nSLuI6vHTkE5uB4ErtTDp1S4p4rH5
ONJTu6c6dyD88j6J/22pHEGZRGmG4Rc2WkmYKCiDPQUQ9wCw4aBEWX77L917T6jC
drW+iH8R/gv231Qlpu535ShfEz34QnWZXiTMTbLCOGb2gZ0rUg/bgmiih8Q1L+aB
C9x6cYTDcnqOq/0O+2HTiCeZBj+S9zFOg7TMCAN7/+xxITJPOlGnAVUQE1mEPWSk
GprXVAS5vpB+tIxH76AL5mfcyC8efs5r2TrdAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU609MmPRsz4i2w7gX4d+vxHfCCLYwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5
iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv
cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC82MDlNbVBSc3o0aTJ3N2dY
NGQtdnhIZkNDTFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Z+4wMA0GCSqGSIb3DQEBCwUAA4IBAQALOUUsZFf4/YSpxUx9waF3S662FMYikgI2
EBLyWsWvAGsEjUcfempVD92PNmFEG9rEmmH0eglFwWLxWNztPdJPKYbiQ/QzuACJ
+KB6qd/nCWPCjKbhFnwrwGOnGt80h5u/Omp/DQ8eXo7Gpm4hR42gklVh351Z4yG7
FBXEhcLOkMgHComckjXnARu8IBO/TRCnH+zomyLorU6cTO6t0NC3xr+//0PKVRgH
8VJ3BefM7tBW72H6JqGcd8b9H2mn68Zd3tsfzSkdotDJ5tDN1OHXEXrE8HqdOyDG
R5Txi1F94MSVGg0ojnRNa+WpTR1qj62ebhgC0hDxkjQRW1mhSaZ9
-----END CERTIFICATE-----
Generated at Sat May 11 09:15:17 2024 by rpki-client on console-ams.rpki-client.org