Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Wg5_-TuemMRM00u4glIAqJOFJPU.roa
File: Wg5_-TuemMRM00u4glIAqJOFJPU.roa (raw, json)
Hash identifier: W09OsDIh3mpREmJSIwsyMIzLGT4MplFO+tEFEsYcVDo=
Subject key identifier: 5A:0E:7F:F9:3B:9E:98:C4:4C:D3:4B:B8:82:52:00:A8:93:85:24:F5
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 12EB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Wg5_-TuemMRM00u4glIAqJOFJPU.roa
Signing time: Sat 29 Jun 2024 19:44:16 +0000
ROA not before: Sat 29 Jun 2024 19:44:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.6.108.0/24 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 02:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4843 (0x12eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jun 29 19:44:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5A0E7FF93B9E98C44CD34BB8825200A8938524F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:bb:e9:7e:32:c9:32:28:74:d6:6f:45:6d:
c3:2d:70:a9:a3:52:fd:09:df:6d:73:4a:58:6d:be:
81:dc:7d:3e:8d:87:9d:8b:48:41:2a:cb:58:d4:b2:
19:77:12:a6:22:7a:47:82:12:48:25:dd:35:51:4a:
86:f7:95:d9:e6:3e:7b:09:f9:1e:b4:a1:fe:83:c2:
20:38:54:6c:fd:74:0b:5b:fa:4e:4d:b8:f3:71:3e:
19:1d:c4:e1:1d:1d:7f:78:2e:ec:ac:3c:5b:70:92:
00:51:5c:38:a2:52:be:0c:12:7f:9d:e5:4d:1c:6a:
34:77:11:74:13:c7:cb:af:82:18:0e:65:b2:44:aa:
e3:92:14:5a:84:d7:1e:81:55:73:f1:c4:96:28:c9:
26:21:57:33:29:07:ce:0f:9e:a8:c2:f2:69:e3:23:
04:3b:bb:56:65:0b:ec:95:43:4f:7d:59:38:ca:5a:
39:99:e8:84:78:01:a4:d6:5a:b1:77:25:b5:0e:50:
b2:07:74:0d:b5:63:53:6c:3c:cd:a0:3e:a8:b4:bf:
83:0c:27:9f:49:d5:9d:73:31:1e:52:85:b4:15:af:
fe:bd:fe:af:1f:41:0c:75:ef:be:55:fc:73:60:50:
2f:19:24:08:94:59:0c:6c:12:e0:1d:03:ff:af:a0:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:7F:F9:3B:9E:98:C4:4C:D3:4B:B8:82:52:00:A8:93:85:24:F5
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Wg5_-TuemMRM00u4glIAqJOFJPU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.6.108.0/24
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:bb:de:a0:34:d2:24:d9:ec:2e:df:d3:d9:c0:19:fe:ef:e3:
c3:19:9b:90:6b:44:17:59:c8:42:d1:f2:dc:ec:eb:4f:6f:70:
e7:99:96:7d:a0:3d:72:0b:7d:07:42:18:05:2b:37:4d:02:08:
2e:de:a3:26:02:12:9d:06:5a:17:cc:58:1f:d2:a3:4a:b6:69:
b5:25:95:e5:7b:a5:3b:f6:64:bb:f0:33:26:84:56:7c:c1:62:
d2:5a:0d:f6:7c:b9:cf:f9:22:91:55:32:27:8e:b0:ea:41:ae:
58:9b:de:a8:48:57:5e:8a:91:ff:c5:b5:ad:63:9b:6a:e5:94:
9a:31:a3:c0:d3:e9:e7:1d:d4:53:6d:2b:c8:20:a0:ae:d7:de:
fd:d8:52:a1:91:17:4e:55:d0:9d:d6:29:72:87:4e:f9:fd:85:
16:fd:7f:28:97:0d:02:a3:dd:10:fe:3e:12:bf:dc:01:b5:c1:
60:91:69:02:47:61:02:e6:98:20:14:e3:b5:b3:0e:9e:b1:18:
6f:35:11:da:fd:b1:ce:22:5e:32:ca:b1:cc:6c:e2:06:ab:5e:
98:15:6c:1f:94:af:c7:a6:2f:09:db:e5:a2:65:b8:a4:4a:9f:
31:cc:a3:b9:43:4c:ae:e4:17:6a:f8:ef:2a:e8:3b:5f:c5:ee:
02:09:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 03:47:53 2024 by rpki-client on console-fra.rpki-client.org