Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/d_YAAIRsTzZ31TrIwfj60jVxEMc.roa
File: d_YAAIRsTzZ31TrIwfj60jVxEMc.roa (raw, json)
Hash identifier: mf9GYBvx4YMuryeqEUD8aNtJtYwb3HeTDMpNapRGkgk=
Subject key identifier: 77:F6:00:00:84:6C:4F:36:77:D5:3A:C8:C1:F8:FA:D2:35:71:10:C7
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 070C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/d_YAAIRsTzZ31TrIwfj60jVxEMc.roa
Signing time: Thu 18 May 2023 07:24:18 +0000
ROA not before: Thu 18 May 2023 07:24:18 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 24373
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:18 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=77F60000846C4F3677D53AC8C1F8FAD2357110C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:71:9a:e7:28:aa:63:27:b2:c8:2d:ba:54:
fa:21:08:f4:af:14:4b:d6:10:56:08:cf:7b:a4:8a:
55:cd:ad:4c:28:2b:66:4a:b2:8e:14:f7:8b:fb:7a:
75:a7:78:48:3c:dd:34:3c:ac:10:f4:2c:bf:db:0c:
40:25:86:52:2f:cb:57:45:15:b3:ed:4f:d2:e2:8e:
1d:01:d1:9b:39:a5:56:67:d6:c4:9b:3f:1e:63:1c:
3f:a4:a6:18:24:f0:83:3e:e5:47:7e:47:5e:66:11:
6b:b9:7d:2c:22:cf:e1:d1:9e:8c:8e:dd:1c:a0:f2:
3b:c9:20:bc:a6:bf:8a:c7:c2:f8:c6:36:f0:9e:b3:
be:03:96:3f:5e:c0:e1:e2:81:7e:22:25:f7:dd:f5:
93:4f:af:31:17:d6:7d:0c:4f:98:47:7a:8f:3b:a4:
cb:b1:16:43:b0:94:5b:16:b4:5a:29:0f:65:a4:23:
a0:00:c4:98:03:a1:c2:eb:a1:b4:13:43:c6:9b:a6:
3b:08:01:62:fb:58:20:aa:14:66:85:1b:b1:67:39:
5f:cf:69:ed:c2:54:53:b6:50:0b:2d:fb:e5:1f:17:
bf:8f:17:13:eb:27:f2:14:ce:c4:01:2a:03:72:5e:
11:bf:2d:b6:b0:46:57:dd:ab:22:8b:ff:82:ed:2b:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F6:00:00:84:6C:4F:36:77:D5:3A:C8:C1:F8:FA:D2:35:71:10:C7
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/d_YAAIRsTzZ31TrIwfj60jVxEMc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:5e:41:7f:4d:17:af:9a:a2:0e:3a:e8:a7:dc:28:d4:c7:2d:
7b:b4:d9:34:dd:8c:b0:41:c9:5e:e7:40:0e:b5:f8:e0:b3:19:
41:82:e3:66:39:36:f7:40:5c:7f:10:03:28:20:1a:8f:44:59:
3b:3e:8c:85:3f:38:d4:04:c3:dd:22:cd:23:44:31:ec:7e:31:
b1:04:c1:55:8c:05:4b:37:46:83:27:5e:fd:ab:0b:bc:54:86:
aa:1d:e8:a5:3d:1e:9a:76:77:4e:03:ab:6f:91:50:cb:69:00:
ba:f4:b6:4f:e7:ce:42:e6:9c:e8:1c:af:e2:8d:3b:93:bb:aa:
01:54:63:bb:4e:de:03:cb:52:4d:e6:5e:6b:71:9a:8a:e3:61:
96:85:ee:aa:86:b3:f5:a9:c9:20:fa:c3:f9:13:db:7b:d8:cf:
64:9c:f3:ae:ea:ce:c9:9c:2d:e2:38:1b:58:13:0a:1a:b9:6c:
89:a2:15:6e:e7:a2:76:db:3e:f4:c0:27:77:38:f5:d0:d9:76:
cb:2a:dd:01:c6:8c:3d:e7:1b:1f:a6:c6:fb:9d:6c:7f:03:2c:
c4:93:e0:0e:50:6b:67:19:d7:2a:a4:c2:3f:52:22:02:20:a3:
03:4f:7b:86:37:fe:d1:c1:49:6f:aa:f7:d1:08:07:28:68:64:
51:2d:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org