Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/OorlVNUf55SPtke2t-HLeorAFhI.roa
File: OorlVNUf55SPtke2t-HLeorAFhI.roa (raw, json)
Hash identifier: sQvLt8Htu7z5G7o/IzXm+ec604CxzYT3rmZOEhTZTuU=
Subject key identifier: 3A:8A:E5:54:D5:1F:E7:94:8F:B6:47:B6:B7:E1:CB:7A:8A:C0:16:12
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 11B8
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OorlVNUf55SPtke2t-HLeorAFhI.roa
Signing time: Wed 14 Jun 2023 06:18:34 +0000
ROA not before: Wed 14 Jun 2023 06:18:34 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 59077
IP address blocks: 106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 14 06:18:34 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3A8AE554D51FE7948FB647B6B7E1CB7A8AC01612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:55:c4:e2:71:73:49:e9:23:f3:88:f4:05:
e0:f2:54:5b:12:1e:ba:10:b4:41:d5:4d:6a:b5:2b:
00:0d:82:ae:15:cd:24:41:0b:46:4b:b2:e5:05:29:
8a:7b:8b:48:c1:3f:cf:eb:90:bf:0f:49:43:3f:84:
7a:98:d7:36:15:6f:aa:50:23:4d:71:78:d8:dc:06:
12:6e:93:09:04:f5:1b:08:d8:25:01:42:58:8c:c5:
ad:02:15:3f:b2:29:34:f2:d3:9d:54:07:e5:c1:49:
34:49:0b:53:9b:f8:83:be:79:cf:fd:9b:ad:57:eb:
79:ea:f8:89:da:47:27:be:90:70:87:8a:95:ec:15:
b0:ed:d7:2d:e9:7f:fb:85:ec:0b:75:ee:d1:91:ae:
9e:1b:35:eb:c2:e5:e1:f2:bd:7b:5a:a2:9f:8e:30:
95:49:a1:0b:dc:ca:05:98:43:02:e3:ea:0f:09:b4:
a3:14:97:53:b7:23:0a:54:dc:e3:fc:d9:ea:45:9a:
75:38:cb:6a:1b:5f:67:e9:30:0e:e2:2d:68:b0:cd:
e4:c2:39:1b:37:d9:f4:41:e5:bf:79:2f:2f:22:60:
f9:7e:a1:ac:6d:61:ee:24:3b:1e:71:7e:af:21:6d:
e6:a7:eb:a5:1b:27:5e:69:2a:af:a9:94:87:23:4d:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:E5:54:D5:1F:E7:94:8F:B6:47:B6:B7:E1:CB:7A:8A:C0:16:12
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OorlVNUf55SPtke2t-HLeorAFhI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.128.0/18
113.31.160.0/20
Signature Algorithm: sha256WithRSAEncryption
75:d8:cf:c3:b7:ff:e4:67:86:33:a2:db:73:9f:c3:55:06:3b:
c3:5e:c2:00:62:7d:5d:01:e7:33:48:0e:39:7e:b7:86:a7:d0:
a6:1e:06:30:d4:97:0b:fd:90:1c:10:2a:8c:5e:13:f8:cd:44:
98:00:2f:6c:f6:be:59:ff:44:96:33:18:c7:7b:5f:2c:57:04:
6e:ee:36:f3:96:df:dd:49:18:1b:6c:d3:8c:bf:73:8f:c6:70:
e3:1e:74:ec:be:5e:23:46:7e:8c:97:c9:f0:26:3e:c1:b5:3a:
25:a3:2c:87:e8:98:e1:51:14:4a:1c:ae:d5:68:35:19:43:fa:
60:44:c8:b0:af:21:e9:c8:36:d0:2f:f6:12:2e:0e:11:06:71:
b8:d1:b2:ef:04:c5:05:1e:14:6e:ce:75:73:c4:f5:2e:b0:d5:
23:c8:d4:4d:4b:c1:7d:5b:a3:9a:95:6e:28:97:f2:ad:24:30:
28:0a:6d:29:dc:12:98:a3:dc:50:0b:e0:d3:5b:8c:1d:9f:dc:
a1:17:2d:93:20:91:ba:2a:21:33:dd:48:b6:9c:ec:9b:e2:b3:
ff:5d:fa:31:5d:a8:88:74:0f:20:89:3b:33:8e:b4:2a:78:b6:
b4:a7:d6:9f:27:60:8c:28:b0:13:a4:80:04:46:aa:1e:e4:3d:
6b:72:07:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org