Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/AMvPF4yLPledjBXkMh3sQxhy08A.roa
File: AMvPF4yLPledjBXkMh3sQxhy08A.roa (raw, json)
Hash identifier: uvZGUZ9fC4amKIcntwdRcPWyMf1aE72T1gZMLDkAaNc=
Subject key identifier: 00:CB:CF:17:8C:8B:3E:57:9D:8C:15:E4:32:1D:EC:43:18:72:D3:C0
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 06E0
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/AMvPF4yLPledjBXkMh3sQxhy08A.roa
Signing time: Wed 17 May 2023 12:54:48 +0000
ROA not before: Wed 17 May 2023 12:54:48 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 140212
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: May 17 12:54:48 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=00CBCF178C8B3E579D8C15E4321DEC431872D3C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:69:c3:6c:57:7a:f0:31:3c:ec:3b:93:13:
55:49:1e:6f:99:08:5f:b3:3e:a7:64:bd:9a:fc:c3:
8e:60:e5:76:a4:64:86:e9:69:70:9e:18:62:cc:49:
6c:7a:18:c7:d3:43:35:a5:ec:b9:31:f9:89:02:46:
ff:c3:f1:2e:db:13:60:c4:01:19:83:73:24:99:c5:
cb:5c:15:2e:70:8b:98:99:89:bf:56:65:ca:3a:a2:
b7:3d:ce:00:c8:a6:6b:de:0a:19:2e:40:79:bc:f4:
2f:42:29:e0:4f:cb:48:53:e4:3f:b9:cb:f6:e5:e1:
a8:c9:49:a4:71:f4:60:7c:9f:75:c1:09:4f:0a:91:
88:21:cf:7b:fd:ff:85:3e:a1:9f:35:59:d1:9c:d2:
b6:c5:36:8a:76:2f:80:fd:86:39:94:87:45:e9:09:
66:84:cd:44:69:22:9e:0c:dc:22:9d:49:a8:fd:03:
df:3b:d4:8d:64:d3:78:c1:f1:5d:4b:bd:9c:ef:52:
98:af:e2:4f:50:0d:18:20:df:b7:11:f3:c6:bf:e7:
05:c0:26:b5:40:0b:62:5e:f2:ee:e5:8a:db:71:b7:
40:f0:ae:04:4a:b2:ce:a6:ba:fc:d8:90:48:c5:af:
67:f2:29:db:59:b6:d3:a4:19:36:bc:83:4b:48:f5:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:CF:17:8C:8B:3E:57:9D:8C:15:E4:32:1D:EC:43:18:72:D3:C0
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/AMvPF4yLPledjBXkMh3sQxhy08A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
11:f5:90:59:77:01:50:45:71:64:94:40:af:a4:7f:00:e6:ed:
bc:db:52:d1:c6:15:37:60:7b:6d:94:a8:c5:95:6a:d4:5c:6f:
de:0e:93:f9:de:7f:dc:88:67:52:0c:67:bd:fb:17:2f:60:1d:
6a:e6:1f:9a:a8:ad:f5:2b:41:02:bf:9e:a5:c1:01:98:c0:3b:
01:02:37:9f:ee:1c:82:54:93:27:40:45:48:4b:6e:8b:08:40:
11:fc:a4:50:9b:f8:cb:e3:c1:9f:b9:29:d7:78:87:7d:a9:8d:
8f:ba:2b:72:15:73:79:70:70:14:c7:81:83:c5:ad:6d:d1:90:
09:96:d3:1c:4f:49:ea:7d:b9:82:9f:f8:6b:7d:15:53:be:bf:
4d:46:a5:2e:40:c4:02:83:cb:79:72:c2:fe:aa:3f:fc:64:88:
93:c7:ab:99:13:19:73:42:60:35:b5:9b:5c:95:0f:93:c9:d8:
ba:be:82:5c:b3:71:f9:27:90:49:8d:f8:0a:f7:db:7a:56:e1:
1c:ce:7c:98:37:d7:8c:7c:0b:b5:8c:5c:5a:c3:aa:d5:0b:bb:
10:01:87:f1:ed:6f:39:4b:4d:84:08:25:87:2e:3a:25:95:10:
85:0e:1e:b3:9c:19:a0:85:a1:d9:03:19:b4:5f:1a:02:6b:33:
7f:a5:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org