Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/tvH_p6FXSGFSNvt40P9pmuhQQ9k.roa
File: tvH_p6FXSGFSNvt40P9pmuhQQ9k.roa (raw, json)
Hash identifier: ynROW+rALf8h/pPOIBfGHXt4qYKvoQnAsKvbBm/l0Do=
Subject key identifier: B6:F1:FF:A7:A1:57:48:61:52:36:FB:78:D0:FF:69:9A:E8:50:43:D9
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 13D5
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/tvH_p6FXSGFSNvt40P9pmuhQQ9k.roa
Signing time: Tue 05 Mar 2024 06:26:30 +0000
ROA not before: Tue 05 Mar 2024 06:26:30 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 63199
IP address blocks: 103.210.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5077 (0x13d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Mar 5 06:26:30 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=B6F1FFA7A15748615236FB78D0FF699AE85043D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:2b:d9:a6:a6:b3:51:41:99:b6:7f:e8:b1:
10:20:97:07:cd:37:70:e6:c1:80:29:b7:fb:16:a5:
91:a6:a5:c2:f9:fc:65:7c:3d:76:29:d5:cf:cd:76:
6d:37:28:a7:7c:a7:25:49:a1:95:0e:1a:86:6d:de:
85:aa:59:06:9f:0f:5e:bf:90:aa:61:9c:9b:8d:be:
0f:ad:23:0e:5e:c5:0f:3a:a6:7f:dd:29:32:ae:b4:
88:d3:1d:da:f8:f8:a9:81:15:cc:b6:84:e5:0e:14:
1f:47:4e:b6:49:d9:04:a7:f5:cd:aa:7d:09:d8:07:
2a:73:df:c7:c3:0c:d2:eb:b1:5a:51:fd:b5:05:4d:
31:34:b7:a7:7b:e8:8e:53:a2:94:2c:2a:8b:40:53:
8b:02:9c:95:90:43:4c:62:27:7c:b1:17:22:5a:7f:
54:b4:ef:14:51:0e:a0:f6:29:20:5e:89:a0:b7:22:
df:86:15:65:e8:fb:c4:30:14:32:bf:25:0a:14:7e:
be:a0:4f:e3:10:75:67:a6:af:1f:ee:6f:8f:25:a0:
7a:0a:0d:0b:7b:81:f6:66:d4:32:99:1e:2d:cb:8f:
12:31:cd:09:23:ee:c0:da:30:b7:45:1b:88:21:ae:
97:fb:85:52:67:77:8a:90:82:bc:74:79:bf:11:8c:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:FF:A7:A1:57:48:61:52:36:FB:78:D0:FF:69:9A:E8:50:43:D9
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/tvH_p6FXSGFSNvt40P9pmuhQQ9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:96:fa:03:ee:4c:4e:70:b5:45:b8:a7:05:b6:9c:ec:67:5b:
6e:a0:1a:ef:02:19:22:f8:21:d1:6d:f5:ab:56:9c:ea:00:50:
34:b2:79:2c:b6:c2:77:0d:47:e2:7e:94:00:0e:94:ed:dc:cc:
d4:4c:a5:0e:22:80:0b:07:55:b4:3f:ff:1d:b7:06:76:9e:2a:
86:ff:f4:ee:ca:dc:3f:ff:42:d9:f9:3d:d7:63:cf:1b:56:2e:
58:01:93:2d:e5:17:a3:57:60:37:f5:ca:ec:f4:3d:70:a1:02:
54:85:ea:35:3e:2b:bb:d4:a3:f5:7b:1b:f9:76:96:91:e6:01:
cd:6a:1b:93:d9:cb:7c:1c:63:04:94:a3:25:7c:a1:c4:a2:38:
5a:36:90:a2:7e:a0:64:cd:66:ba:d6:0a:fd:51:89:89:31:c2:
08:0e:00:18:1e:d6:42:b5:8f:fd:bf:42:54:63:31:46:66:75:
8e:cd:5f:1f:42:1c:c4:f4:29:81:ef:47:6d:cf:6d:d0:68:ea:
34:6a:6c:a7:20:7a:07:b0:8a:21:cf:74:2b:7a:fb:8a:be:ba:
50:18:01:df:75:53:8b:7f:a7:4a:5b:c2:80:37:34:86:fc:1f:
5c:8b:5c:6d:94:d7:b1:38:4c:5b:d0:d6:3e:21:b3:08:c1:27:
d3:b5:6e:68
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICE9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4
ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yNDAzMDUw
NjI2MzBaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKEI2RjFGRkE3QTE1NzQ4
NjE1MjM2RkI3OEQwRkY2OTlBRTg1MDQzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2DSvZpqazUUGZtn/osRAglwfNN3DmwYApt/sWpZGmpcL5/GV8
PXYp1c/Ndm03KKd8pyVJoZUOGoZt3oWqWQafD16/kKphnJuNvg+tIw5exQ86pn/d
KTKutIjTHdr4+KmBFcy2hOUOFB9HTrZJ2QSn9c2qfQnYBypz38fDDNLrsVpR/bUF
TTE0t6d76I5TopQsKotAU4sCnJWQQ0xiJ3yxFyJaf1S07xRRDqD2KSBeiaC3It+G
FWXo+8QwFDK/JQoUfr6gT+MQdWemrx/ub48loHoKDQt7gfZm1DKZHi3LjxIxzQkj
7sDaMLdFG4ghrpf7hVJnd4qQgrx0eb8RjJQTAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUtvH/p6FXSGFSNvt40P9pmuhQQ9kwHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG
8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx
LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxL3R2SF9wNkZYU0dGU052
dDQwUDlwbXVoUVE5ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn0qAwDQYJKoZIhvcNAQELBQADggEBAFuW+gPuTE5wtUW4pwW2nOxnW26gGu8C
GSL4IdFt9atWnOoAUDSyeSy2wncNR+J+lAAOlO3czNRMpQ4igAsHVbQ//x23Bnae
Kob/9O7K3D//Qtn5PddjzxtWLlgBky3lF6NXYDf1yuz0PXChAlSF6jU+K7vUo/V7
G/l2lpHmAc1qG5PZy3wcYwSUoyV8ocSiOFo2kKJ+oGTNZrrWCv1RiYkxwggOABge
1kK1j/2/QlRjMUZmdY7NXx9CHMT0KYHvR23PbdBo6jRqbKcgegewiiHPdCt6+4q+
ulAYAd91U4t/p0pbwoA3NIb8H1yLXG2U17E4TFvQ1j4hswjBJ9O1bmg=
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org