Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/_uBkgeKB-I4SecMHtv0a28itvMI.roa
File: _uBkgeKB-I4SecMHtv0a28itvMI.roa (raw, json)
Hash identifier: jlbCn1yLYQqPj06OvEnfQ3lVXREdN81I8U4F0+Z5b98=
Subject key identifier: FE:E0:64:81:E2:81:F8:8E:12:79:C3:07:B6:FD:1A:DB:C8:AD:BC:C2
Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF
Certificate serial: 0FD9
Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/_uBkgeKB-I4SecMHtv0a28itvMI.roa
Signing time: Fri 19 May 2023 05:53:35 +0000
ROA not before: Fri 19 May 2023 05:53:35 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63199
IP address blocks: 139.159.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4057 (0xfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF
Validity
Not Before: May 19 05:53:35 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=FEE06481E281F88E1279C307B6FD1ADBC8ADBCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:4d:a0:de:2f:11:68:08:44:ca:e8:90:a9:
a8:68:68:4b:c5:13:8c:ae:f0:a0:88:0d:48:92:d6:
53:7a:7e:ca:02:c0:dc:82:3d:f5:d9:1b:f2:33:16:
c1:7f:f8:54:11:9d:e5:a1:2e:c6:34:e9:0b:35:33:
a1:c0:2f:ff:e6:8e:9d:a7:16:c8:fd:3b:b8:8b:3e:
80:70:ac:29:c8:06:27:11:e2:92:e5:55:2d:11:b4:
81:bb:82:be:79:46:0e:50:b5:32:45:16:c8:98:3b:
ef:03:69:cf:54:61:2f:8b:03:1e:dc:dd:c0:c6:a2:
62:ab:6c:94:99:b9:56:42:be:58:9c:08:57:7b:39:
ff:24:8c:b3:5b:4b:d5:2e:6b:bf:9c:16:0e:6a:58:
56:90:a3:d0:3a:6f:ce:31:09:d5:17:3c:a8:fc:01:
93:12:29:e4:fe:7e:93:42:cb:90:a4:31:3a:8c:ce:
fd:e7:33:0f:13:46:3f:d6:15:b6:e8:8c:be:2c:bd:
b1:a6:a7:55:05:80:18:30:9f:6d:37:82:99:d7:14:
0e:18:d1:84:23:fb:e2:c5:82:d9:65:cb:9f:0c:58:
09:60:3e:de:94:b9:52:86:e0:88:7c:5f:8f:e3:42:
ab:21:d1:78:ec:76:9d:77:c4:ac:21:49:70:85:eb:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:64:81:E2:81:F8:8E:12:79:C3:07:B6:FD:1A:DB:C8:AD:BC:C2
X509v3 Authority Key Identifier:
keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/_uBkgeKB-I4SecMHtv0a28itvMI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.104.0/22
Signature Algorithm: sha256WithRSAEncryption
55:6d:24:1a:43:2e:da:76:80:ea:f5:ac:a7:cb:41:00:02:2f:
05:34:34:8f:60:4f:37:e9:48:e4:b4:2e:ee:36:73:d7:b4:eb:
1a:2d:06:d6:bd:2a:d7:9f:f9:e1:3a:33:59:01:b9:e3:88:4b:
81:51:4c:d1:8e:04:c2:80:7a:aa:38:54:73:8b:51:bb:84:e2:
80:91:ed:66:67:43:28:f0:43:51:ba:cc:a8:fc:5e:1a:9c:a7:
99:1a:64:d2:b0:a6:7e:c4:11:48:1e:e9:87:15:1d:3b:79:c1:
d4:cb:b7:ca:6b:fa:c1:1a:ec:04:62:e5:71:6b:6b:14:ae:85:
bf:ad:75:8d:51:0a:65:01:d2:23:12:69:2d:88:6f:fb:9f:88:
90:f5:db:8f:94:5e:c2:fc:93:ca:33:43:bc:41:b8:f6:f2:04:
e3:1c:da:95:2d:0a:c7:51:86:10:89:ff:33:5c:c7:86:6c:78:
db:bc:bc:1f:65:60:57:44:8d:dc:ff:76:a5:c9:9a:0a:5d:00:
18:5b:75:cb:85:8b:e0:3d:88:52:94:ad:97:88:8e:f3:d6:de:
7f:a3:be:2d:0d:85:ae:4b:da:d3:7e:23:43:65:6d:c5:e3:3b:
2f:f7:77:0b:ea:4e:20:f0:55:15:8b:35:f8:5e:20:36:8a:60:
6a:ac:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 07:19:53 2024 by rpki-client on console-ams.rpki-client.org