Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/mralNv-kiNn_mwKDqEgSrcWMbeU.roa
File: mralNv-kiNn_mwKDqEgSrcWMbeU.roa (raw, json)
Hash identifier: tJy91zuyC2w28FehcQugBPKsMon6uCJ6I0Y2+98vmAs=
Subject key identifier: 9A:B6:A5:36:FF:A4:88:D9:FF:9B:02:83:A8:48:12:AD:C5:8C:6D:E5
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 114C
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mralNv-kiNn_mwKDqEgSrcWMbeU.roa
Signing time: Wed 24 May 2023 03:53:35 +0000
ROA not before: Wed 24 May 2023 03:53:35 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 17621
IP address blocks: 106.75.208.0/20 maxlen: 20
106.75.224.0/20 maxlen: 20
106.75.240.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4428 (0x114c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: May 24 03:53:35 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9AB6A536FFA488D9FF9B0283A84812ADC58C6DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:61:7b:00:da:66:a3:ea:87:df:03:db:4f:
69:9d:10:6b:d1:e2:bd:8f:42:0e:7b:68:ac:fd:80:
65:e7:ad:17:d7:37:0c:a7:77:0e:91:60:39:7b:0a:
0d:f2:7d:21:bd:c8:a5:1d:68:0d:e8:8e:e3:ad:72:
be:70:e8:c3:53:1a:ca:a2:71:16:6c:71:9d:4e:2c:
97:db:56:da:ac:92:d7:95:88:f2:d3:8a:68:14:6f:
ef:ce:e0:64:2c:6e:43:f5:e4:27:f2:14:22:e0:77:
f3:1f:8a:1c:7e:ce:0d:82:22:92:ba:96:c8:a7:0f:
b2:d8:5d:07:32:62:5f:d4:be:4c:6d:21:07:f5:07:
43:5f:07:83:7d:64:33:a7:ee:ba:2b:d7:f4:cb:fe:
17:83:59:c2:fe:6c:14:58:73:80:f7:40:69:72:75:
ef:27:44:37:bf:45:6c:6f:d6:7b:19:d7:a7:0c:a6:
be:76:77:81:36:9f:55:ee:17:15:f5:3a:f6:4e:bf:
97:e2:2c:69:15:6c:df:e5:60:9f:9b:2c:90:76:fc:
0b:46:0c:fd:56:d3:a8:0c:7b:95:06:7b:f2:d4:20:
02:b2:f2:7c:60:8c:c0:92:6a:f5:cc:c1:bf:17:9e:
bd:88:46:b8:22:73:8f:e6:be:50:4e:8e:e8:b1:6e:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:A5:36:FF:A4:88:D9:FF:9B:02:83:A8:48:12:AD:C5:8C:6D:E5
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mralNv-kiNn_mwKDqEgSrcWMbeU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0-106.75.255.255
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
82:8a:24:6e:5a:c5:de:15:af:81:79:e2:bb:3d:04:c9:80:96:
5d:af:c4:52:b9:99:53:08:be:53:8c:2f:9c:1c:90:b8:12:9a:
de:09:26:1f:84:93:fc:98:dd:33:25:5b:84:55:a8:a2:e6:81:
6b:c4:f4:99:4d:1d:cb:b5:4d:e9:c3:9e:ef:67:cd:76:0a:e0:
d6:a7:85:48:42:a0:54:aa:c4:89:c6:d8:5b:27:ea:17:e0:78:
ca:d0:0d:b7:a4:7c:ad:8e:88:d3:98:0b:01:e1:22:4b:06:df:
89:ee:c6:cf:ae:30:a4:f4:40:ab:b8:90:cd:c2:41:09:60:d0:
5a:69:54:91:c6:af:2d:99:83:88:5e:a8:d6:47:c4:88:2e:60:
1e:98:0a:ad:32:2d:ac:0e:a6:2d:a1:90:c6:30:54:f6:e6:17:
72:6d:ca:6a:87:11:8b:49:86:bf:5a:38:79:ed:48:2c:73:95:
bc:f9:5c:b8:33:ec:ee:cc:1e:fc:cb:fe:37:1f:42:de:8e:a8:
56:34:c2:34:e9:9c:db:73:b8:81:76:a1:b7:fe:6c:88:4b:81:
7c:b8:22:3f:83:dc:f1:fe:0f:7f:81:43:34:a6:af:85:50:1e:
73:c9:c3:ab:03:56:ec:77:27:8d:ec:b0:47:cc:78:2c:4b:ff:
77:06:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org