Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/8Skyn0ma-_CO7UiibHx1mQxB6f8.roa
File: 8Skyn0ma-_CO7UiibHx1mQxB6f8.roa (raw, json)
Hash identifier: 0BpCyUGzNaBk9j7w2r5ORH7jRpoBXS3jv4VVNJ8/1i4=
Subject key identifier: F1:29:32:9F:49:9A:FB:F0:8E:ED:48:A2:6C:7C:75:99:0C:41:E9:FF
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0192
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/8Skyn0ma-_CO7UiibHx1mQxB6f8.roa
Signing time: Mon 25 Dec 2023 02:50:52 +0000
ROA not before: Mon 25 Dec 2023 02:50:52 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.248.184.0/22 maxlen: 22
103.205.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 25 02:50:52 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=F129329F499AFBF08EED48A26C7C75990C41E9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:60:dc:7e:b7:20:c3:44:8c:6d:c4:e4:7c:
b4:c1:ec:0f:90:97:5e:46:51:3c:73:ea:c5:af:43:
e0:15:ac:6f:1e:7b:33:24:5c:6a:4f:03:26:13:1c:
de:c2:90:59:85:64:e9:c3:e5:c2:60:2b:d4:92:41:
e3:d1:f2:45:31:8d:be:c5:7f:ea:0d:28:20:ac:0c:
e7:22:fb:4e:08:ba:cc:42:dc:26:db:17:e3:10:78:
18:fe:a4:27:59:e2:0e:51:a0:9d:5c:c7:61:9e:d4:
f4:ed:95:0b:99:1b:fb:b1:9d:c6:da:24:85:57:a3:
d0:f0:00:d5:2a:75:f9:5e:1f:b8:12:06:c6:23:e8:
33:24:20:e3:0d:f8:ff:3a:39:c4:ee:67:41:84:bb:
d7:a5:0c:74:3e:d2:04:d7:c8:dd:47:0b:fd:f0:a6:
15:b1:79:fe:c2:b3:45:ef:7d:a4:af:c4:fc:c4:47:
97:38:e2:55:28:5c:d4:71:fa:9e:20:39:15:91:7c:
c4:e3:a5:a7:0f:c2:5a:93:78:eb:59:a8:08:a8:3f:
2a:4b:01:02:bd:61:e9:ce:cb:a4:c1:d1:1c:fa:73:
16:49:1f:ad:f6:c7:f4:8f:82:5d:b0:04:2d:34:82:
91:7e:77:33:2d:a7:18:82:1d:20:b9:4f:22:f9:d9:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:32:9F:49:9A:FB:F0:8E:ED:48:A2:6C:7C:75:99:0C:41:E9:FF
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/8Skyn0ma-_CO7UiibHx1mQxB6f8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.184.0/22
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b5:86:59:a7:3f:a2:c5:fd:09:52:c5:d0:93:f6:53:53:fb:
77:8a:bc:fc:2d:77:72:8f:c2:8c:17:dd:0e:9e:eb:8a:90:b6:
c0:7b:34:28:c3:5a:47:e4:02:29:0a:e2:98:1b:5b:39:b3:f8:
84:9d:59:3e:67:98:c8:45:53:38:c6:3d:c1:d2:a2:17:d7:f7:
48:a1:6b:0e:30:a7:42:37:96:f7:8a:7a:9f:b2:1f:2e:42:8c:
7a:ef:e0:04:3a:99:c6:4a:7d:0e:9e:da:20:63:a3:5b:43:89:
4f:3f:13:dc:cf:25:3f:09:43:e9:4c:ad:ba:38:ba:3e:c1:b1:
c2:07:7e:06:28:cf:0d:3a:4d:5e:06:8f:31:15:49:ad:e2:f2:
8e:9d:a4:d3:be:4e:26:d7:44:45:83:69:47:23:7c:31:52:1a:
cc:f0:80:96:7a:77:d6:ff:9b:a8:9d:c9:e2:94:ec:23:c9:07:
7b:ec:38:eb:e3:8e:3b:6c:c6:70:d1:88:8f:c5:66:eb:a7:a1:
11:3e:e6:05:5b:90:45:db:1c:af:d8:ba:7e:b6:e4:5f:1f:6b:
67:b4:27:55:ea:8a:ca:ca:b0:df:f1:9e:31:a1:de:df:f7:67:
10:b3:d7:d9:07:48:a6:5d:ae:86:1a:92:09:aa:87:b1:8c:60:
5e:50:78:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 03:53:04 2023 by rpki-client on console-fra.rpki-client.org