Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3U5bsy96lrE82IdbRzyPu926m08.roa
File: 3U5bsy96lrE82IdbRzyPu926m08.roa (raw, json)
Hash identifier: q16MDz7hZmHebRL7NFXVoLClk9XkW9FjWLVZeSJMEek=
Subject key identifier: DD:4E:5B:B3:2F:7A:96:B1:3C:D8:87:5B:47:3C:8F:BB:DD:BA:9B:4F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0366
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3U5bsy96lrE82IdbRzyPu926m08.roa
Signing time: Tue 15 Nov 2022 08:45:13 +0000
ROA not before: Tue 15 Nov 2022 08:45:13 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 21859
IP address blocks: 45.252.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Nov 15 08:45:13 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=DD4E5BB32F7A96B13CD8875B473C8FBBDDBA9B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:af:76:c9:2b:a2:b1:a4:f2:c9:ab:5d:e4:
5b:01:7a:e7:0d:d2:53:a4:10:ba:46:01:59:73:57:
72:23:32:6a:cc:94:aa:79:be:52:7e:2b:44:eb:85:
03:3c:f1:56:ec:08:36:59:bd:1b:a1:2b:8c:45:f1:
71:ba:de:9c:c8:7b:37:87:93:2d:11:cf:d1:ef:bb:
60:80:6c:fb:87:4d:bd:5d:84:ac:9c:91:71:90:9d:
f5:bd:97:99:5c:05:5a:a8:77:72:d8:70:52:b3:56:
47:30:4b:f7:4e:c1:11:60:0b:08:bc:54:e2:62:64:
a0:85:9c:78:e0:b1:d5:81:5f:2b:3e:30:dc:22:08:
6f:16:06:c4:3f:86:d2:8e:36:f8:14:ce:88:8d:95:
3f:80:ca:4b:78:ca:87:33:30:82:a6:cc:87:4a:10:
29:58:46:da:24:4e:eb:16:0d:da:c5:06:03:e6:e1:
d5:79:ed:98:a1:84:52:c5:d8:4f:12:72:2f:32:a5:
4d:45:46:db:08:fb:e9:1e:aa:f0:2f:8e:78:f7:03:
11:eb:e2:3b:99:1f:c0:97:6d:71:be:bb:68:70:7d:
31:cb:2d:84:66:7d:35:ae:68:ac:16:f1:54:52:ee:
88:9f:95:f3:cc:2f:f0:b2:86:77:64:ab:66:c1:9e:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:5B:B3:2F:7A:96:B1:3C:D8:87:5B:47:3C:8F:BB:DD:BA:9B:4F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3U5bsy96lrE82IdbRzyPu926m08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:15:b4:42:3b:33:63:65:ff:ef:26:a9:b4:4f:6b:15:87:c3:
4b:07:53:04:ef:ec:cf:6b:b2:f5:be:7b:21:b1:4c:a9:6d:bf:
10:03:26:c8:22:91:19:9b:2b:83:c9:74:d8:c7:cf:01:68:7e:
8e:17:72:0e:35:3c:01:b3:80:b5:d8:35:1b:77:b8:aa:59:5d:
30:6a:31:68:b8:85:7d:43:b6:81:e1:b0:f9:aa:09:b5:b4:36:
d6:09:e1:c3:e4:b6:b3:89:c3:ef:b3:f0:ab:fc:56:98:84:42:
81:d9:d1:e0:4c:2b:6f:ef:b6:b3:f0:9b:90:0f:f1:4f:69:89:
47:5b:65:15:59:e8:33:4e:a5:40:88:db:a7:de:dc:db:96:08:
28:64:b0:4e:c7:fa:7c:c9:ea:fc:9b:92:cc:7e:eb:7d:fa:78:
e4:65:d6:2a:78:a9:94:75:e4:7c:a5:80:e8:1a:15:38:6c:7f:
a7:d3:f1:4b:85:32:6f:86:2b:82:9e:dc:43:c2:7e:83:10:ec:
4a:a2:72:7c:9f:54:b5:ee:d7:99:2a:ca:71:71:40:ab:4d:d0:
1b:c1:eb:8d:82:39:3b:e8:19:aa:eb:d8:7b:e7:fa:bd:c4:92:
72:2e:f6:fc:c9:59:c5:8f:b2:44:13:27:0b:88:fb:90:fe:1f:
4c:22:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org