Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/bsEVdQTLHbuXRDMSwTKb91O0ZyU.roa
File: bsEVdQTLHbuXRDMSwTKb91O0ZyU.roa (raw, json)
Hash identifier: iBC6Oy9uvd614ivM1cwNGGyKVHuQx7Ngy1Yti4zSfd0=
Subject key identifier: 6E:C1:15:75:04:CB:1D:BB:97:44:33:12:C1:32:9B:F7:53:B4:67:25
Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Certificate serial: 06F3
Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/bsEVdQTLHbuXRDMSwTKb91O0ZyU.roa
Signing time: Tue 04 Apr 2023 06:15:05 +0000
ROA not before: Tue 04 Apr 2023 06:15:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59043
IP address blocks: 103.56.184.0/24 maxlen: 24
103.56.185.0/24 maxlen: 24
103.56.186.0/24 maxlen: 24
103.56.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Validity
Not Before: Apr 4 06:15:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6EC1157504CB1DBB97443312C1329BF753B46725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:28:6e:a9:f0:a8:bd:89:46:b8:e1:45:e1:
96:ee:46:f2:78:44:2e:1b:b8:de:82:1b:57:cf:11:
55:8d:a0:18:7b:67:4b:04:09:0b:36:65:f8:2f:b3:
7e:04:7e:01:e8:a7:ae:37:19:7a:3f:64:13:ab:d6:
41:b4:81:03:0e:2c:d6:85:3a:8d:5d:aa:06:2d:d9:
9b:61:7f:ee:53:68:f8:b6:94:77:98:88:ec:f1:5e:
b4:0b:f3:62:9b:a2:1e:b8:8a:7e:b3:92:b2:69:02:
35:09:cb:d6:c8:cd:fc:86:b3:a6:68:9f:83:39:50:
46:f2:3c:47:2e:eb:db:4f:79:39:19:50:86:6e:39:
e6:3f:37:ce:a5:b0:62:83:e7:a7:41:4b:60:39:79:
8f:8b:de:be:7c:5d:64:61:63:9d:49:1f:22:af:db:
f8:8f:09:f2:0c:37:71:fe:d3:4b:73:70:3c:4b:00:
47:22:be:b5:38:ce:02:b5:30:64:79:9f:91:5f:12:
ef:c0:cc:85:5b:75:1a:d5:83:91:80:49:5c:8c:a8:
6d:37:92:d1:97:4d:44:0d:06:be:65:d8:ae:2c:4a:
c5:a8:d3:e4:a2:7d:37:3d:99:b7:27:03:00:be:a6:
11:61:00:76:6b:a6:3e:a9:c6:0f:22:9d:51:cd:0c:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:15:75:04:CB:1D:BB:97:44:33:12:C1:32:9B:F7:53:B4:67:25
X509v3 Authority Key Identifier:
keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/bsEVdQTLHbuXRDMSwTKb91O0ZyU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.184.0/22
Signature Algorithm: sha256WithRSAEncryption
56:34:7c:a8:92:ab:a2:03:ce:bf:14:ed:ee:b1:f4:09:ae:13:
e5:8c:72:11:27:b7:90:4e:8d:a8:5a:99:c2:f4:b2:bc:60:c9:
66:96:48:86:6d:4e:e1:7f:ea:56:92:0e:3c:e0:05:15:30:6a:
f4:44:05:a6:dd:b6:ec:31:e5:5b:eb:5d:77:75:b4:7c:11:a6:
36:e9:7a:ae:d5:cd:13:ce:62:c3:3a:f6:d0:d3:ba:f0:52:7b:
9e:75:52:4e:75:20:03:d8:3f:92:a4:4c:53:5c:d6:a6:0a:e8:
53:95:54:1c:32:56:2a:2c:78:b5:e3:f9:3d:93:06:d2:0f:10:
ce:8c:51:58:68:9d:b0:6a:b1:21:84:f5:e6:91:99:b9:35:b1:
5b:9a:dc:48:40:be:26:3c:2c:35:d9:b5:fa:27:36:26:fe:9b:
46:4a:42:e9:0d:be:8c:8b:d3:a5:c1:16:e7:4f:d5:f0:11:4a:
40:5b:8e:0f:af:72:ad:8b:e4:71:22:ed:ef:bc:82:b5:f7:9f:
2f:57:c2:b7:2f:3f:ad:76:32:55:1c:a5:20:7a:b5:c1:d1:25:
1f:55:e0:d5:83:c0:d4:bd:45:4e:08:0e:9b:29:da:e9:12:a8:
84:e6:e0:bf:f4:38:e4:82:ac:2f:d7:f9:ec:6d:d1:41:9a:85:
44:f9:e2:68
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
QkNFOEY3RjhBODNEQjkzOUFFMEY0MkZBMDU0MTNCMjg1MTgxRTAeFw0yMzA0MDQw
NjE1MDVaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDZFQzExNTc1MDRDQjFE
QkI5NzQ0MzMxMkMxMzI5QkY3NTNCNDY3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjyChuqfCovYlGuOFF4ZbuRvJ4RC4buN6CG1fPEVWNoBh7Z0sE
CQs2Zfgvs34EfgHop643GXo/ZBOr1kG0gQMOLNaFOo1dqgYt2Zthf+5TaPi2lHeY
iOzxXrQL82Kboh64in6zkrJpAjUJy9bIzfyGs6Zon4M5UEbyPEcu69tPeTkZUIZu
OeY/N86lsGKD56dBS2A5eY+L3r58XWRhY51JHyKv2/iPCfIMN3H+00tzcDxLAEci
vrU4zgK1MGR5n5FfEu/AzIVbdRrVg5GASVyMqG03ktGXTUQNBr5l2K4sSsWo0+Si
fTc9mbcnAwC+phFhAHZrpj6pxg8inVHNDEaHAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUbsEVdQTLHbuXRDMSwTKb91O0ZyUwHwYDVR0jBBgwFoAUYVvOj3+Kg9uTmuD0
L6BUE7KFGB4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYx
L1lWdk9qMy1LZzl1VG11RDBMNkJVRTdLRkdCNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWVZ2T2ozLUtnOXVUbXVEMEw2QlVFN0tGR0I0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODYxL2JzRVZkUVRMSGJ1WFJE
TVN3VEtiOTFPMFp5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnOLgwDQYJKoZIhvcNAQELBQADggEBAFY0fKiSq6IDzr8U7e6x9AmuE+WMchEn
t5BOjahamcL0srxgyWaWSIZtTuF/6laSDjzgBRUwavREBabdtuwx5VvrXXd1tHwR
pjbpeq7VzRPOYsM69tDTuvBSe551Uk51IAPYP5KkTFNc1qYK6FOVVBwyVioseLXj
+T2TBtIPEM6MUVhonbBqsSGE9eaRmbk1sVua3EhAviY8LDXZtfonNib+m0ZKQukN
voyL06XBFudP1fARSkBbjg+vcq2L5HEi7e+8grX3ny9XwrcvP612MlUcpSB6tcHR
JR9V4NWDwNS9RU4IDpsp2ukSqITm4L/0OOSCrC/X+ext0UGahUT54mg=
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:41 2024 by rpki-client on console-ams.rpki-client.org