Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/M0hI_xyWLJXwV7Oi11f0Oule9K8.roa
File: M0hI_xyWLJXwV7Oi11f0Oule9K8.roa (raw, json)
Hash identifier: zh1FmCQy25mUeJUInA94SZuQYqR36FDFizRX8JaPGoo=
Subject key identifier: 33:48:48:FF:1C:96:2C:95:F0:57:B3:A2:D7:57:F4:3A:E9:5E:F4:AF
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 070A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M0hI_xyWLJXwV7Oi11f0Oule9K8.roa
Signing time: Thu 18 May 2023 07:24:17 +0000
ROA not before: Thu 18 May 2023 07:24:17 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139076
IP address blocks: 103.221.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:17 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=334848FF1C962C95F057B3A2D757F43AE95EF4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:32:d4:6d:3a:e0:89:21:aa:bf:00:9b:85:
e2:19:35:d8:2d:b7:ab:ac:76:a6:07:7e:27:f3:f5:
ae:01:7b:8c:e1:06:24:79:c9:57:a1:12:bb:9f:9e:
a5:ca:1f:5f:3c:fa:b4:6d:c8:d0:53:09:06:1a:7e:
88:3e:04:57:d5:0c:32:01:04:ac:b2:ef:97:ce:98:
d5:14:40:0c:2b:da:ea:fc:64:e0:bf:e7:c3:55:c0:
e8:f8:16:61:7d:f3:77:63:04:e7:17:60:aa:e5:0a:
0e:bb:6c:c8:3d:df:f3:53:ec:0a:43:49:56:bd:4d:
25:e4:93:0b:9c:78:f4:ad:b5:9d:b0:58:da:34:1d:
0b:04:6b:f4:9a:03:42:90:4f:fb:7f:c6:eb:c0:c6:
13:1a:e6:95:98:f2:01:11:04:b3:93:ed:7b:a1:ea:
7d:9d:82:cf:f9:af:13:dd:c9:eb:2e:8d:d2:80:6b:
97:95:5c:80:b0:70:3a:12:be:04:4f:a5:e6:a1:81:
49:7b:13:8e:f3:70:a1:e7:bd:23:11:68:43:e7:27:
27:fe:00:73:a2:3d:3f:3a:96:3c:c2:74:31:55:13:
04:40:49:43:ee:0e:b5:31:a9:06:48:34:dc:ed:61:
aa:22:93:29:28:31:71:94:37:a4:06:7c:4f:45:7d:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:48:FF:1C:96:2C:95:F0:57:B3:A2:D7:57:F4:3A:E9:5E:F4:AF
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M0hI_xyWLJXwV7Oi11f0Oule9K8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
92:57:c8:f4:0c:7d:95:b3:db:d5:d1:73:b1:46:e9:40:58:9f:
d7:55:76:d6:9e:55:b8:aa:f2:92:5f:5b:ce:ea:71:d2:c3:62:
89:bd:64:ad:38:5d:7a:a5:c3:eb:b1:6f:e9:e7:a3:e9:0f:03:
b7:ad:e0:b8:3a:9e:29:24:4c:9f:28:41:ae:43:64:42:35:f3:
fe:4e:ad:63:c4:1b:6c:1e:84:0c:3d:46:78:59:92:41:36:5f:
53:16:10:1b:0c:6f:06:74:39:dd:b0:f4:81:47:d8:29:1e:d9:
f2:b4:48:ef:01:bb:e8:81:0e:d9:da:8c:8a:32:1a:f3:87:38:
a0:76:76:24:ed:e4:aa:0b:e1:19:69:80:34:cf:5a:89:1f:0b:
ae:ea:f4:6f:7c:9b:29:ff:08:f2:9e:78:0a:32:a1:fa:fd:e7:
f3:9a:92:b0:da:4f:9e:dc:18:51:b3:08:98:2f:be:11:93:56:
bd:42:38:58:2b:8a:9f:9f:6e:9e:36:c3:0f:4d:03:e8:18:9f:
89:60:6d:96:f2:c9:7d:98:2d:7f:09:d5:49:9b:cc:ec:f3:e8:
a7:48:40:04:42:2a:3c:88:48:ab:66:7f:85:dc:98:b4:de:00:
30:57:50:1b:7f:4a:fa:0d:0e:a3:bf:7a:07:f9:f7:c0:76:a1:
2d:73:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org