Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WGuDUNrAbNtFV6z7Zz_5yiuUnPE.roa
File: WGuDUNrAbNtFV6z7Zz_5yiuUnPE.roa (raw, json)
Hash identifier: cyBW2zrLWQoQapiFW0SBdsUqEUzYIoEReRMsb1Yy8JI=
Subject key identifier: 58:6B:83:50:DA:C0:6C:DB:45:57:AC:FB:67:3F:F9:CA:2B:94:9C:F1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0324
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WGuDUNrAbNtFV6z7Zz_5yiuUnPE.roa
Signing time: Wed 02 Nov 2022 04:04:39 +0000
ROA not before: Wed 02 Nov 2022 04:04:39 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 138527
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.198.224.0/22 maxlen: 24
103.198.232.0/22 maxlen: 24
103.198.236.0/22 maxlen: 24
103.198.240.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Nov 2 04:04:39 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=586B8350DAC06CDB4557ACFB673FF9CA2B949CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:5b:b8:f9:fc:fd:99:55:45:38:a0:8e:ea:
18:b2:b8:0c:71:f8:6e:92:9a:13:c8:25:78:bb:aa:
d3:b5:26:ab:5c:7e:6c:f7:d2:95:be:17:e9:09:fc:
03:a4:57:76:f0:44:19:32:15:ca:af:41:83:3a:8e:
c8:ff:b0:fd:12:59:dd:34:e9:bf:ed:e7:a2:2a:f1:
62:b7:9c:8f:3e:b6:9a:ca:51:21:c2:d3:11:e9:53:
f8:6c:82:8b:96:8d:4c:65:08:2c:bd:e6:cd:4c:37:
e8:c3:0b:6a:80:93:32:b2:6b:c8:e4:ad:4a:a1:60:
5f:ba:bf:f8:37:18:df:f0:2d:de:4a:d6:a4:2e:ff:
6f:05:59:c3:24:f4:b8:9d:05:99:18:59:81:5b:46:
a6:ce:96:8a:3a:24:5a:77:7c:84:54:fd:dc:ff:6e:
bc:a1:51:95:26:fb:4c:ce:e2:1f:2c:89:8f:d8:4c:
c4:6b:d9:4d:bd:1a:f4:95:a4:4f:96:ae:44:5e:a7:
fc:11:ad:69:e0:5d:1f:06:4d:70:a2:c5:a9:b6:a5:
87:e8:33:6b:67:da:f1:39:6a:05:fa:d6:69:61:ef:
d9:83:77:3b:c0:38:53:e0:a3:05:60:ce:96:ca:33:
e6:b2:c8:7f:5b:d9:d7:5d:a9:35:74:95:d7:cb:49:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:83:50:DA:C0:6C:DB:45:57:AC:FB:67:3F:F9:CA:2B:94:9C:F1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WGuDUNrAbNtFV6z7Zz_5yiuUnPE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.198.224.0/22
103.198.232.0-103.198.243.255
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:bd:20:d5:96:76:25:ff:41:4c:7e:1c:8b:1d:65:1e:e6:bc:
36:55:b4:02:82:4f:f6:1c:5a:58:fd:dd:7f:a8:aa:ee:2f:19:
fb:32:1c:2f:93:c9:a4:d4:e5:79:ac:7b:74:1c:e4:07:18:58:
fa:c5:b9:00:4e:d2:4d:2d:86:e8:fa:05:1b:1c:5d:e2:54:02:
c4:f2:2d:3b:c8:dc:88:68:64:d1:86:58:24:4a:c4:9c:ed:81:
87:ae:01:49:79:9c:64:34:ae:3b:33:91:5d:f6:34:95:3d:51:
b0:05:58:80:a8:97:38:1e:77:db:7b:ec:c9:10:1d:1a:06:c9:
15:4e:4c:b4:41:e0:19:6b:49:73:7c:94:26:35:8d:c5:a5:c0:
55:a1:e1:94:3f:05:aa:78:74:64:cb:78:f3:3f:66:ab:71:30:
3f:b5:2a:a2:62:ae:e0:11:36:69:34:c9:0b:3c:5c:80:e5:bf:
e8:3a:d9:2e:f6:43:94:08:ab:7d:fc:52:07:a2:8c:09:01:45:
6b:a5:37:e9:13:c8:3f:1f:85:da:22:5b:6c:c0:b8:39:43:b5:
8d:84:03:2b:22:aa:7d:62:f0:b0:14:a2:4a:7d:6c:b3:95:50:
65:0a:d1:a2:10:ad:d1:45:a5:5f:49:ac:e9:e1:bb:ad:cb:c2:
19:f7:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org