Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/Y_xFhRVDkGnjG_vZjsI19tsJZV0.roa
File: Y_xFhRVDkGnjG_vZjsI19tsJZV0.roa (raw, json)
Hash identifier: 2UYbHnHJ37Ygr748kVUOMaJ8Wop9k0ixjkBSS5WwBwQ=
Subject key identifier: 63:FC:45:85:15:43:90:69:E3:1B:FB:D9:8E:C2:35:F6:DB:09:65:5D
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 01B0
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Y_xFhRVDkGnjG_vZjsI19tsJZV0.roa
Signing time: Wed 27 Dec 2023 04:53:14 +0000
ROA not before: Wed 27 Dec 2023 04:53:14 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.248.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 31 Jan 2024 02:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 27 04:53:14 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=63FC458515439069E31BFBD98EC235F6DB09655D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:98:77:91:b0:bb:4d:a8:43:85:f6:5d:85:
fd:57:a8:48:98:7a:2c:7a:7d:ff:af:6a:c8:95:9c:
7b:9a:f6:0c:a1:73:5a:95:7b:af:99:ad:d3:13:93:
da:7b:fc:6c:c4:1a:a8:74:e8:0f:53:8b:bd:99:a3:
53:c3:bf:3b:34:db:bb:1f:33:6a:15:f3:5d:95:06:
6e:81:52:cb:9a:78:34:a2:ad:8e:9a:3c:d0:38:e7:
76:0f:f9:06:0a:62:06:09:55:f3:cf:9a:1b:11:85:
57:94:07:2d:1b:5e:bd:58:1f:48:24:12:bf:a2:f9:
ff:a9:5a:7b:15:fd:e7:2f:99:30:a9:26:29:aa:86:
88:79:41:25:16:96:83:98:b4:c5:cd:f1:4e:79:e0:
17:90:9d:80:a6:06:0e:14:58:89:03:d0:e8:53:9a:
14:ab:b1:b1:54:39:1e:03:73:81:4a:af:cc:c6:fa:
c2:73:3c:25:c2:e3:7b:88:00:78:94:18:fa:83:a3:
d3:90:06:6b:60:cf:4d:64:f4:d2:d2:cf:5e:00:fc:
6c:73:46:b1:0e:0a:78:37:c5:06:ca:98:aa:2a:74:
78:3b:2b:01:75:2a:6f:c3:27:28:0c:52:b4:e9:ce:
d3:d8:88:b8:97:4a:f5:50:8d:f1:ee:e3:5a:44:d1:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:45:85:15:43:90:69:E3:1B:FB:D9:8E:C2:35:F6:DB:09:65:5D
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/Y_xFhRVDkGnjG_vZjsI19tsJZV0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
75:2d:fa:52:f3:85:23:83:29:2c:78:bf:7b:99:d5:e8:e0:1d:
24:a3:84:e3:a1:91:54:8c:88:43:80:1b:21:bc:00:db:96:23:
4c:af:36:e1:25:a9:78:f0:df:0b:09:59:d6:d8:1c:9c:9d:75:
43:52:cd:01:23:30:99:13:1b:63:97:08:ec:7a:66:57:1d:68:
bd:d0:94:f7:ae:ac:3d:6d:14:22:f5:8e:8e:54:44:86:2d:45:
db:13:6d:10:18:3a:b2:93:ea:5c:5a:b5:b6:0f:01:77:66:bc:
8a:f5:97:22:3b:71:7a:b9:18:ef:ee:27:09:92:f6:b8:4b:2c:
f7:8c:a5:80:bc:f2:f9:63:2f:d9:13:48:39:ab:4a:e0:bf:cf:
3f:78:bf:52:7b:97:b0:aa:5a:3d:b6:f4:46:34:02:3f:cc:e8:
2e:9d:53:da:e7:0d:0e:5d:2a:cd:a4:f0:17:1f:f7:63:95:0d:
a4:ff:fd:8a:f8:89:a5:8e:53:ca:c1:01:68:aa:4b:93:a7:25:
dd:24:1d:86:29:ff:66:5d:ae:5a:49:be:e5:e7:53:f1:81:9f:
7a:91:cf:6a:83:0a:c4:e1:8d:f4:43:9d:4e:e2:f2:1b:7e:cf:
d2:65:68:ca:2c:32:9e:5f:38:d7:2b:4d:dd:3a:c6:e1:bc:26:
5a:2a:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 04:35:15 2024 by rpki-client on console-ams.rpki-client.org