Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/4E3LUzJY3kvIYSibicfo_bVQk78.roa
File: 4E3LUzJY3kvIYSibicfo_bVQk78.roa (raw, json)
Hash identifier: X49eUZHjEUHdjOvsT3f6p33Y5UUgLPielELb129HDMg=
Subject key identifier: E0:4D:CB:53:32:58:DE:4B:C8:61:28:9B:89:C7:E8:FD:B5:50:93:BF
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 06DF
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/4E3LUzJY3kvIYSibicfo_bVQk78.roa
Signing time: Wed 17 May 2023 12:54:47 +0000
ROA not before: Wed 17 May 2023 12:54:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63889
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: May 17 12:54:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=E04DCB533258DE4BC861289B89C7E8FDB55093BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:03:df:e5:97:a6:74:d9:29:bc:c2:66:13:
e7:98:3b:9c:d4:51:12:c3:e1:ab:72:47:c7:85:de:
91:67:0d:e4:51:21:f7:49:f6:92:d7:51:c2:07:42:
f9:cc:ae:a5:31:53:a0:df:9b:2c:1a:23:87:ba:77:
d2:8a:96:6c:b5:91:3b:eb:ae:c4:ff:cc:92:6d:96:
55:20:a2:8a:31:e4:a4:2c:64:f4:66:a6:ca:f6:c9:
27:63:a8:05:84:47:0e:cd:c0:b6:cf:d6:0c:36:67:
8a:4a:ee:f6:d7:0f:b7:76:72:fa:67:3f:f2:38:2a:
02:5f:4f:9e:45:50:24:ca:83:1b:c2:6a:a7:46:29:
9c:b2:64:53:1f:95:9f:60:68:8c:2a:a1:3b:72:e3:
ef:c0:85:7f:80:cb:3d:ff:57:b3:e7:d8:45:19:86:
00:c9:80:6d:9c:cd:0a:bd:3d:f0:fe:36:6f:7c:de:
f3:05:ba:af:51:e2:9a:a5:02:49:7d:7c:53:4b:c9:
d6:10:8f:d5:b5:e1:f8:95:f4:82:d2:f5:e4:b3:57:
ca:a0:d5:88:2a:62:4c:94:0a:db:9b:12:95:f1:5d:
e7:51:31:01:af:d7:99:53:eb:5d:6b:49:7b:cb:fc:
a7:90:7c:35:91:83:88:4f:a8:6d:d0:e4:67:a5:e9:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4D:CB:53:32:58:DE:4B:C8:61:28:9B:89:C7:E8:FD:B5:50:93:BF
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/4E3LUzJY3kvIYSibicfo_bVQk78.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
39:d7:f2:f8:d9:81:06:8e:51:b6:0f:43:c8:5f:1c:c3:46:01:
90:60:35:55:39:2d:b2:55:d6:d7:db:73:6f:b7:92:98:3c:e1:
3a:38:9c:b9:df:9b:ef:d4:48:3c:60:64:b8:02:8c:2f:f1:e4:
c6:b0:f1:0b:86:4e:11:81:a0:69:3b:48:12:1e:19:32:6a:65:
d1:2e:0c:58:37:ee:d3:55:4e:2f:9e:22:f9:a3:35:ef:91:60:
cf:43:77:56:a8:f3:69:a1:dd:b2:b9:c3:06:4c:3d:bd:11:14:
28:36:b4:d0:13:7b:92:40:cb:98:9f:b4:59:04:e4:68:58:98:
14:4d:c7:d6:01:1a:2b:d3:95:ed:6d:6b:18:b7:1c:dc:f5:0d:
93:d5:ed:d2:d8:f2:1a:53:fc:83:7b:10:46:77:69:9c:b2:10:
f4:dd:24:2c:9e:bb:1e:64:55:73:43:18:95:9c:d2:b4:df:0d:
7e:4e:4f:7e:6c:2a:09:dd:08:dd:8d:74:74:95:ce:7f:39:35:
fd:62:5c:87:71:3c:1e:94:99:bd:e8:d6:64:61:cc:e9:a1:d1:
32:f4:b2:f6:15:8d:35:f8:27:40:d9:e9:28:e2:0e:63:c3:67:
e2:73:5a:9a:aa:59:da:cf:62:8e:98:91:0d:90:a3:a2:8f:92:
1b:5f:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org