Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WbydwVSz8z8YTJRy1VISkN3pSsI.roa
File: WbydwVSz8z8YTJRy1VISkN3pSsI.roa (raw, json)
Hash identifier: Tffga3zmzqFAb1b7QqnfDdY/OHxX3UkGj62gQVWxikA=
Subject key identifier: 59:BC:9D:C1:54:B3:F3:3F:18:4C:94:72:D5:52:12:90:DD:E9:4A:C2
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0705
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WbydwVSz8z8YTJRy1VISkN3pSsI.roa
Signing time: Thu 18 May 2023 07:24:16 +0000
ROA not before: Thu 18 May 2023 07:24:16 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 13444
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:16 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=59BC9DC154B3F33F184C9472D5521290DDE94AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:9c:b5:07:3f:c9:fa:30:d8:d9:17:44:a0:
70:82:e3:8e:07:3a:d5:ea:7b:cb:7d:1b:80:f7:f9:
6b:3f:41:6a:bf:07:d0:ac:0f:19:3e:fe:a5:ee:5c:
21:e7:1a:a6:42:19:9c:db:fc:51:4f:03:ef:5c:2c:
24:4f:4a:c7:2d:db:06:a2:b3:e2:7d:da:99:10:3a:
55:3e:a6:5c:e5:1c:e3:37:44:ae:4e:24:78:8b:6e:
8a:3a:49:58:0f:fd:b1:e2:6b:c8:6c:d7:7c:f1:3e:
0f:54:8d:30:27:38:e2:f7:cd:d6:b1:3c:a6:34:71:
6f:ef:04:72:12:da:ea:c4:e8:ca:e6:52:c4:dc:c9:
71:a3:31:5a:8a:2e:be:d6:00:31:3d:8f:00:e9:ec:
be:1c:50:e0:fc:a4:dd:c2:81:93:4a:b8:81:3d:44:
69:d1:e7:f9:68:3e:b4:80:67:69:13:55:68:77:56:
78:8c:c1:93:07:c8:ea:ad:3c:0f:57:30:3a:49:0c:
7a:1d:e3:c8:91:db:f4:46:73:be:bc:ef:7f:90:3f:
df:6b:69:42:99:7e:02:b0:3b:84:7c:5b:8c:4c:a4:
ea:b0:b7:0b:9e:48:a8:29:51:ea:7b:40:56:01:d7:
ce:ac:6e:2e:44:7c:db:8d:3f:b7:77:44:d4:a7:9d:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:9D:C1:54:B3:F3:3F:18:4C:94:72:D5:52:12:90:DD:E9:4A:C2
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WbydwVSz8z8YTJRy1VISkN3pSsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:f6:15:e4:01:13:85:7f:23:64:f6:07:e5:ae:42:93:f7:e5:
13:62:c3:75:9a:dc:07:05:e2:d7:06:50:c0:7e:7d:e4:f5:b8:
23:a9:0e:90:24:4c:de:0e:d5:fc:86:52:ef:dc:c1:ff:72:43:
98:d5:eb:b4:99:9a:df:e6:1b:c9:a7:e6:4a:66:62:cb:de:0a:
c7:58:1b:50:1f:67:68:c1:ca:cc:a3:c5:e1:5f:95:7f:f1:6e:
1c:b1:fb:e5:9e:f0:be:d3:b4:a8:0e:e4:fb:c5:43:b0:38:18:
de:7d:2b:4d:12:2f:15:01:3f:47:e3:4f:f9:a7:25:24:15:5a:
c5:18:5d:98:32:d0:0b:bc:8c:8a:6f:89:40:5d:f6:3a:fe:a9:
7b:61:15:ee:95:8c:f5:7a:bd:18:51:77:95:08:f1:63:af:6a:
32:3d:e2:3f:2c:db:03:43:f9:02:ab:59:64:47:e0:0a:e2:a7:
95:75:bf:27:0c:be:5e:4b:98:bd:c9:61:0a:82:ca:78:46:84:
30:3f:fc:c3:7d:28:0d:73:b1:63:00:54:3f:71:50:20:1c:a6:
f1:0f:7d:87:97:df:86:15:3d:9d:02:78:ae:bb:cb:d1:45:15:
40:06:3d:a9:e2:16:94:62:a9:7f:53:8b:cc:1e:4c:a5:47:66:
76:0b:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org