Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/ScTA7U0me4Z6p2Fz3geODuF6IMo.roa
File: ScTA7U0me4Z6p2Fz3geODuF6IMo.roa (raw, json)
Hash identifier: tL402gWyLLpXvRZQ0VQmrKmjXDFVy7WkGnTqcvfwo00=
Subject key identifier: 49:C4:C0:ED:4D:26:7B:86:7A:A7:61:73:DE:07:8E:0E:E1:7A:20:CA
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0190
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ScTA7U0me4Z6p2Fz3geODuF6IMo.roa
Signing time: Mon 25 Dec 2023 02:50:32 +0000
ROA not before: Mon 25 Dec 2023 02:50:32 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.241.50.0/24 maxlen: 24
103.45.161.0/24 maxlen: 24
103.45.162.0/24 maxlen: 24
103.45.163.0/24 maxlen: 24
103.205.255.0/24 maxlen: 24
103.239.244.0/24 maxlen: 24
103.239.245.0/24 maxlen: 24
103.239.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 25 02:50:32 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=49C4C0ED4D267B867AA76173DE078E0EE17A20CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:c2:46:d8:7f:23:74:3f:8b:f0:42:05:1f:
56:9b:17:9e:02:66:6c:a6:dd:cd:39:30:3b:0a:b3:
8b:fc:78:f3:c7:bf:a1:fe:4c:69:df:51:bc:34:42:
ac:33:63:09:7b:ed:63:9d:ee:9d:e7:71:b9:4f:ad:
67:fe:21:37:56:5e:c8:aa:52:07:62:11:12:7b:73:
0a:77:2d:3a:17:0b:11:01:4d:c5:3c:72:52:aa:ce:
4c:98:52:60:b4:23:0d:cf:35:d2:e3:95:06:70:a7:
9d:60:61:c3:90:7f:67:71:ab:5c:31:7a:84:5f:a6:
c0:47:16:90:cc:7f:39:66:d8:05:80:b2:04:d6:7b:
e4:7a:fa:ec:fb:5c:b4:c9:9c:da:16:d5:86:79:0c:
7f:c9:40:5a:53:fc:66:fa:51:4a:92:9d:88:74:f2:
03:b2:94:03:f8:5f:5b:63:a7:7b:c8:4e:cf:19:d9:
53:83:88:bd:46:2d:3b:76:27:50:f2:4f:7a:2b:a9:
b3:87:86:6d:20:50:1b:d5:c6:4c:3c:ef:3e:5b:82:
dc:26:15:d9:59:08:ac:87:aa:15:70:e3:25:ce:8c:
74:f9:90:ae:bb:a7:44:e8:82:e5:54:bb:fe:b3:f0:
b5:dd:97:a9:5e:7c:3a:67:8e:54:fa:a8:f8:3c:6c:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:C0:ED:4D:26:7B:86:7A:A7:61:73:DE:07:8E:0E:E1:7A:20:CA
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ScTA7U0me4Z6p2Fz3geODuF6IMo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.50.0/24
103.45.161.0-103.45.163.255
103.205.255.0/24
103.239.244.0/23
103.239.247.0/24
Signature Algorithm: sha256WithRSAEncryption
94:96:8e:91:bc:c4:c8:19:22:f1:82:29:0f:1f:ae:f9:bc:fd:
93:31:d5:36:2c:5a:23:ad:50:3a:c9:60:bc:44:ed:71:95:74:
9b:cf:2e:ea:55:dc:43:8f:4a:78:c1:ce:c5:fa:63:26:d3:e9:
73:e9:05:3e:eb:aa:cf:48:17:76:e9:d4:b6:e3:3b:ea:62:2f:
58:24:57:13:05:55:ba:77:3c:3c:fa:db:38:26:5c:d9:78:89:
ae:b4:9c:59:2d:1e:87:24:15:1b:2f:e7:30:97:6c:40:e3:fb:
54:e1:f3:5a:24:d5:81:ed:eb:35:59:d2:10:bc:a4:11:12:d5:
f3:0f:f3:62:88:f1:73:93:ae:bd:c3:16:30:16:ce:56:13:75:
85:28:bb:e3:bb:cf:3d:9d:e6:98:d2:a2:ae:1c:f1:8f:85:2b:
89:92:4d:ba:a9:1b:b4:80:5c:a6:72:59:a4:17:cb:e5:f1:23:
11:4c:17:03:1b:49:e4:47:49:fc:6b:dc:6a:49:6a:7f:a0:3d:
a2:55:40:8a:3e:f0:40:e8:e7:3a:ce:86:07:d5:c6:5f:3b:16:
16:bd:29:b2:05:80:2a:c1:5f:04:aa:61:4f:10:73:4b:54:b2:
56:a8:e4:3d:3e:78:2d:b2:11:7c:9c:e8:0f:50:f0:34:9e:74:
50:d1:d7:65
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 25 06:14:24 2023 by rpki-client on console-fra.rpki-client.org