Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa
File: mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa (raw, json)
Hash identifier: ATj4V6CH/7UVkTnD8qS52lWPPZW8wbUAx2XkoDYr2d4=
Subject key identifier: 9A:EF:A5:E7:09:D2:AC:68:27:0F:B1:44:24:34:65:39:8F:D6:D0:5B
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 0CB9
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa
Signing time: Wed 13 Mar 2024 01:20:52 +0000
ROA not before: Wed 13 Mar 2024 01:20:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 398704
IP address blocks: 103.232.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3257 (0xcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Mar 13 01:20:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9AEFA5E709D2AC68270FB144243465398FD6D05B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:e4:59:07:a1:df:7a:c5:90:cf:e9:e2:84:
3d:2a:e4:38:77:b5:b8:e5:35:7c:aa:c4:c3:3c:3c:
ae:f0:07:e9:8b:a6:4b:e3:be:6d:ae:24:5c:5b:0a:
c7:00:ba:45:8b:da:97:e9:34:e3:3e:6d:ea:78:eb:
ba:35:27:8d:60:8c:11:91:3e:8e:4a:c0:87:85:3c:
32:63:59:74:12:07:1c:24:6a:f9:4e:82:5b:91:b4:
34:d8:36:19:ce:85:c0:3c:ea:ab:77:26:0f:f3:23:
d8:fa:c6:8c:19:e0:17:1d:4e:94:7f:9f:6f:b3:2f:
5f:0b:5e:4a:b6:52:37:9e:29:90:a8:c7:6e:5b:4f:
0d:de:3c:ad:64:67:ef:7c:b8:6b:c9:7a:c8:f2:3d:
be:ab:72:8d:ca:dc:cc:89:c9:42:5d:a7:db:58:b8:
2e:38:00:3d:bd:39:17:5d:24:b0:ef:cc:a8:ea:d5:
65:65:92:d9:a4:99:00:ce:73:4a:db:13:9d:92:4d:
ed:26:b0:ea:17:8a:f4:91:52:72:f0:30:9e:cf:24:
86:b4:e8:c2:bb:18:47:35:42:78:cf:2e:03:d2:7e:
43:6c:4d:ab:a8:e2:fc:05:4a:57:20:bc:fd:ea:6d:
00:a8:6e:64:98:58:ed:b2:cf:4a:00:25:23:df:6d:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EF:A5:E7:09:D2:AC:68:27:0F:B1:44:24:34:65:39:8F:D6:D0:5B
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/mu-l5wnSrGgnD7FEJDRlOY_W0Fs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.144.0/22
Signature Algorithm: sha256WithRSAEncryption
09:7e:e7:51:06:03:29:3b:c6:6b:ef:c1:09:d6:e7:2d:89:37:
fc:8a:08:6a:de:b6:f0:28:56:dc:b2:54:3a:95:63:13:9a:87:
ac:d3:c0:52:fd:8a:43:5d:31:61:be:36:22:0e:26:be:29:08:
29:01:dd:01:71:e2:ed:87:52:de:88:fb:90:7d:e9:ee:40:6a:
90:f1:14:f9:b2:cb:ed:30:63:eb:a6:f5:c3:60:17:d1:92:44:
b1:b9:cb:a1:72:0c:48:e6:b9:f6:42:17:2e:32:85:02:97:a5:
d0:ce:f1:05:86:ee:a4:83:8b:a8:16:25:ec:af:89:9e:d5:30:
5b:e0:89:65:70:37:f2:5f:a4:31:73:10:3c:b2:fa:0d:71:43:
97:b0:b5:97:cf:ac:62:fa:ec:6d:4a:3a:93:1e:10:8a:4b:1d:
25:27:be:f9:2a:1b:ee:61:ae:7c:0e:1f:b3:b1:05:a8:1f:a4:
4a:4d:45:21:70:02:29:98:fc:e7:9e:33:a6:3e:6d:af:b0:04:
fd:67:80:ec:71:68:42:03:4e:e5:24:b2:6a:3b:ab:80:7e:0e:
b7:2f:74:e8:3d:19:d3:0d:78:95:38:ba:cf:fb:85:e1:72:36:
01:7b:5e:cd:70:7c:b5:df:11:85:ff:b2:96:5a:22:96:2b:b2:
6a:ba:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 09:00:34 2024 by rpki-client on console-ams.rpki-client.org