Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/VlNkgyo-GZCNtWfaY05Ag8nza3k.roa
File: VlNkgyo-GZCNtWfaY05Ag8nza3k.roa (raw, json)
Hash identifier: EcjGt9rb4IjBSoeWDHV7I8Z2SK+UdlNuDfI4epHij7A=
Subject key identifier: 56:53:64:83:2A:3E:19:90:8D:B5:67:DA:63:4E:40:83:C9:F3:6B:79
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 015E
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/VlNkgyo-GZCNtWfaY05Ag8nza3k.roa
Signing time: Fri 15 Dec 2023 14:20:05 +0000
ROA not before: Fri 15 Dec 2023 14:20:05 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 15 14:20:05 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=565364832A3E19908DB567DA634E4083C9F36B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:ab:0a:a1:4c:fb:58:78:b4:9d:83:aa:31:
eb:a9:49:4e:87:ec:ad:02:5e:4d:59:b8:50:ea:ca:
f8:3b:66:eb:75:4f:66:ae:34:99:a0:5b:65:de:13:
af:c3:5b:64:f8:a7:f2:a0:3c:94:7a:d9:a1:17:04:
b3:c3:09:56:8e:9c:a4:5e:0b:47:33:9e:dd:97:19:
2f:9f:7d:54:bf:83:dc:56:21:fd:5e:53:2c:cb:fb:
52:af:d9:27:09:de:43:e2:94:b7:c0:ff:f0:d4:67:
5c:91:89:04:5f:89:75:ca:b8:29:99:22:f5:05:66:
78:a0:73:66:32:52:52:de:87:c3:bf:c2:9f:77:f4:
77:b1:95:b7:fe:63:7c:95:7b:28:7e:9d:dc:df:1f:
13:60:dc:87:22:2c:9c:69:de:76:ed:6e:17:1f:42:
89:d1:2d:78:97:d3:8c:9f:5f:45:7e:65:ef:64:1e:
a4:8d:9d:2c:0c:da:0e:52:3c:46:14:23:87:a7:2e:
52:36:b1:30:55:4c:59:b6:12:ba:ab:c5:89:24:b4:
89:7b:7c:4a:3d:39:1c:3b:63:34:97:4f:f1:6c:84:
ab:8f:d4:e5:5c:01:56:3a:6b:5c:37:34:25:89:24:
79:07:18:e5:6c:a1:f5:d1:9f:34:0b:87:64:3e:3e:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:64:83:2A:3E:19:90:8D:B5:67:DA:63:4E:40:83:C9:F3:6B:79
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/VlNkgyo-GZCNtWfaY05Ag8nza3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4f:dd:95:70:4d:69:ef:27:52:2c:31:87:01:be:e4:b5:08:
b8:ea:61:d6:79:94:cc:9c:ef:f9:93:db:20:a3:f7:22:b7:6b:
86:ce:bd:3c:3f:88:d0:ad:07:14:55:8c:fb:71:0d:ca:80:ac:
df:21:65:90:cb:be:8c:3e:81:42:3f:4c:ab:05:86:b8:bc:42:
e6:e0:85:1a:aa:cb:5e:da:52:9e:63:e7:bb:20:cc:dc:0d:b8:
99:2c:b3:d5:0c:61:97:e0:1c:29:42:fc:5f:1a:73:c9:88:1b:
a7:70:66:11:e4:42:06:17:8d:27:92:d7:e1:44:51:95:fa:21:
93:f3:bd:11:f0:66:e1:69:e8:49:5c:d0:e8:1d:14:f7:87:c3:
74:85:67:dd:14:31:d7:83:bd:b3:0b:5d:53:13:21:ff:1b:be:
30:49:f5:93:51:af:ae:a9:e3:cc:16:f0:23:48:ed:e6:3a:1d:
8b:17:72:f4:08:29:e4:70:d5:18:3e:cd:12:26:33:4c:64:bc:
a9:c2:a0:14:10:15:fe:a1:fe:12:b5:5c:4e:83:ca:b3:ce:4d:
48:65:48:53:16:de:22:18:11:06:f8:cb:07:42:26:70:73:57:
38:22:b9:23:9b:eb:26:44:04:a7:eb:4c:9c:b1:e5:97:3f:03:
98:3c:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 25 03:14:44 2023 by rpki-client on console-ams.rpki-client.org