Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/vgM4DS84QxcKKMLxvU35HK8IOf0.roa
File: vgM4DS84QxcKKMLxvU35HK8IOf0.roa (raw, json)
Hash identifier: EXhALjRtRu9PQEw8LwRyHGXW3BfUL6Wz6rL/PK6M0h8=
Subject key identifier: BE:03:38:0D:2F:38:43:17:0A:28:C2:F1:BD:4D:F9:1C:AF:08:39:FD
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 06DF
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/vgM4DS84QxcKKMLxvU35HK8IOf0.roa
Signing time: Thu 18 May 2023 07:26:00 +0000
ROA not before: Thu 18 May 2023 07:26:00 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63199
IP address blocks: 106.3.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: May 18 07:26:00 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=BE03380D2F3843170A28C2F1BD4DF91CAF0839FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:77:67:ff:a7:4c:17:4c:ab:2a:94:f4:ef:
a0:44:83:40:c0:c6:d9:b4:99:7c:b1:a2:80:c5:91:
58:89:c8:66:fe:dd:0f:3d:5d:37:ef:ad:3a:0a:63:
86:c1:14:a2:7f:51:6b:a4:b1:7a:ff:89:07:32:ac:
5b:bf:46:c3:ee:cc:4c:63:8b:ba:92:35:ea:99:32:
1a:7f:b3:78:14:7f:ab:0c:4e:88:2a:e0:cd:28:f0:
5f:90:10:26:a4:05:80:54:22:ba:6c:2d:ed:42:e1:
68:49:7d:f0:7e:b6:19:79:fe:6c:bc:3d:01:06:3c:
46:b9:bd:53:79:37:b4:8f:9c:48:88:a5:7c:6f:b2:
bf:a5:49:29:4d:42:a8:fb:3b:6d:0e:4d:96:92:94:
7e:a6:1b:06:a3:6b:d0:4c:9e:20:b8:67:8d:71:f2:
4e:04:a7:3e:a8:79:1a:01:3c:0f:e8:a7:aa:8e:33:
2c:15:25:ee:60:35:ab:cf:94:98:09:89:39:f1:f8:
7f:73:68:91:a5:c7:47:63:4f:f0:98:21:3a:29:7c:
fd:63:ee:78:73:c7:df:cf:60:dd:32:d9:b2:30:f0:
2a:00:92:01:8e:fd:e7:f4:c5:8d:fe:a1:e9:bd:e6:
32:31:17:02:11:49:41:f2:87:da:64:d8:77:09:99:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:38:0D:2F:38:43:17:0A:28:C2:F1:BD:4D:F9:1C:AF:08:39:FD
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/vgM4DS84QxcKKMLxvU35HK8IOf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.3.139.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3a:49:a8:91:ba:64:a9:02:96:a9:82:ea:0d:ad:8e:8f:e0:
76:4c:36:0f:69:0c:df:3a:4c:d6:4e:8f:49:5f:e5:3d:bf:83:
f5:f6:6f:6c:8c:08:14:fb:e7:68:68:47:6f:5e:5c:e1:95:03:
37:4c:72:69:5c:b4:5f:46:00:93:93:52:c6:02:c1:c5:a1:5a:
ba:5f:69:b3:37:2d:ee:7a:06:70:ec:3f:38:17:b8:be:0b:82:
8c:fb:5e:89:c3:75:f9:b9:77:ad:f2:cd:7b:67:04:04:01:09:
03:b8:2b:7a:f9:02:08:05:a0:18:d2:e7:10:15:e5:b5:ad:f2:
bf:b0:19:74:23:57:6f:bb:42:12:bc:ee:51:47:43:d5:e9:44:
66:5b:61:a6:88:f1:fb:75:9e:a2:14:1a:08:de:8c:e7:49:86:
4d:fd:34:5c:2c:29:c4:84:41:81:9e:7e:1f:76:cb:2e:2e:19:
db:0f:e9:d0:f4:07:f0:99:9f:aa:f0:4c:f5:b8:ec:23:a1:81:
6a:90:73:77:e6:af:e9:fd:fc:fe:fe:5f:39:40:38:e9:34:8f:
87:2e:2e:b4:e7:7e:17:30:e3:aa:2f:fc:c5:1e:59:3f:f7:61:
e9:53:99:56:5b:c5:98:40:6a:aa:48:d2:cc:c9:95:9b:a6:8a:
b0:63:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org