Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/HDroXyDnhfQrdfEi75NFmQ6-h3g.roa
File: HDroXyDnhfQrdfEi75NFmQ6-h3g.roa (raw, json)
Hash identifier: LVt9+Bj5ptrQiXP+7RreGWQVZ/hWel0TXRFpFX4pxmw=
Subject key identifier: 1C:3A:E8:5F:20:E7:85:F4:2B:75:F1:22:EF:93:45:99:0E:BE:87:78
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 010A
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/HDroXyDnhfQrdfEi75NFmQ6-h3g.roa
Signing time: Wed 29 Nov 2023 05:39:25 +0000
ROA not before: Wed 29 Nov 2023 05:39:25 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 103.45.160.0/22 maxlen: 22
103.205.252.0/22 maxlen: 22
103.239.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Nov 29 05:39:25 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=1C3AE85F20E785F42B75F122EF9345990EBE8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:b0:9e:11:b5:8a:ad:79:fd:b5:d7:df:4a:
60:43:38:89:ec:e9:6a:66:6e:19:03:5a:7e:f6:8d:
f2:5a:fb:25:c9:6f:04:2a:81:7f:b9:59:e9:0b:58:
af:e7:11:b1:f7:62:51:c4:7a:93:df:aa:7c:f0:63:
c4:12:6f:48:60:53:73:65:05:86:53:65:cf:fc:85:
e9:93:3b:cd:2a:b9:9b:06:c6:c2:ee:f8:df:0d:65:
80:16:f2:cf:2a:e5:2c:db:68:6d:8c:fa:08:30:3b:
06:99:09:ac:5b:71:da:df:cf:17:ff:83:d6:ed:b2:
a5:ea:1f:e0:60:ac:68:f3:80:01:ba:a7:d6:0d:b0:
27:a5:85:d5:52:38:1e:c7:48:a7:5d:61:e8:43:28:
24:8d:b8:bf:6d:fe:1a:a9:d9:cc:3d:18:69:c0:36:
b3:b1:8e:ed:ef:5d:13:d1:d9:36:0f:2e:1e:fe:97:
59:cf:7c:97:6a:6a:f1:d0:7e:bb:fa:a4:64:9c:32:
5e:a4:92:d6:35:e4:84:02:b8:38:df:23:0f:cf:33:
22:9d:be:15:40:72:21:dc:7f:a1:bd:28:de:a9:30:
7d:c1:aa:03:5b:7b:1d:89:d3:4a:fd:8c:bc:df:68:
fe:81:07:fe:da:29:80:39:8f:c8:d7:ea:ca:e1:2b:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:E8:5F:20:E7:85:F4:2B:75:F1:22:EF:93:45:99:0E:BE:87:78
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/HDroXyDnhfQrdfEi75NFmQ6-h3g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
103.205.252.0/22
103.239.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ed:ec:12:df:75:c5:5b:46:14:92:8b:6c:b4:cd:70:54:35:
b0:a5:48:6b:af:d1:c1:66:fd:13:cb:21:ad:e4:07:07:4e:fa:
8c:c2:3c:9f:19:1a:92:49:c9:15:5f:2b:dd:39:d8:f7:79:e2:
30:fd:53:c6:f4:d4:5a:db:4d:c7:94:95:4a:e0:cb:8c:cb:32:
db:a5:26:ef:c0:c7:b2:65:dc:ba:43:c5:30:2b:f9:dd:91:f1:
86:5c:fe:d8:6c:3f:8f:10:a2:58:df:b2:25:dc:a5:13:0d:c9:
66:f2:f8:b9:4e:b1:8e:f2:83:48:c5:56:d7:53:3d:2a:91:79:
8c:c9:0c:f7:cd:6d:e8:ce:a4:07:a5:f1:bd:aa:fd:88:d2:65:
b5:53:e3:59:51:7e:5e:29:a7:86:36:ff:05:8f:64:f1:b3:d7:
08:33:1d:40:98:59:e3:b9:bd:13:8a:05:95:f3:db:8b:bb:57:
19:2a:2f:fb:7e:32:e4:b5:4d:d5:dd:e8:72:32:b2:46:0b:2a:
98:29:e6:a2:80:e8:a9:fd:77:ca:47:07:10:e7:22:a2:b7:00:
a4:b9:1e:fe:8b:20:94:3f:ba:5f:e7:ba:18:2d:d2:7a:dc:a8:
47:6e:7f:fc:c2:25:b5:03:df:71:fd:00:33:0c:42:bf:bd:75:
32:63:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 15:04:32 2023 by rpki-client on console-fra.rpki-client.org