Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/fzAG-sN9DrGOhPy9jZ2HKmtTaqg.roa
File: fzAG-sN9DrGOhPy9jZ2HKmtTaqg.roa (raw, json)
Hash identifier: TTnblWbyFlUy5429DBWi9FuKHtE1WS3wL178BQ14SXw=
Subject key identifier: 7F:30:06:FA:C3:7D:0E:B1:8E:84:FC:BD:8D:9D:87:2A:6B:53:6A:A8
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 01AB
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/fzAG-sN9DrGOhPy9jZ2HKmtTaqg.roa
Signing time: Wed 27 Dec 2023 02:12:07 +0000
ROA not before: Wed 27 Dec 2023 02:12:07 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 22 Jan 2024 01:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 27 02:12:07 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=7F3006FAC37D0EB18E84FCBD8D9D872A6B536AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:47:0f:e6:8f:8c:e6:82:e9:ec:04:0c:33:
73:ab:06:07:c1:ed:ea:5c:e7:c2:63:44:ea:8e:28:
76:39:9c:d0:14:3e:72:2a:42:6a:ec:09:65:42:d2:
97:f5:e8:7c:29:36:14:29:63:a6:9e:c6:b5:a3:49:
47:dc:f3:ec:97:ee:d8:eb:08:b3:72:52:00:bb:6a:
cb:53:b4:46:b1:ad:0d:2b:53:83:3e:4a:37:aa:b6:
8f:c8:3a:31:f3:c4:bc:2a:e3:96:a8:71:8f:c3:7f:
1a:ff:6d:fc:d8:16:05:03:92:88:07:2a:50:44:6c:
8b:de:e4:19:a5:fe:dd:12:83:9b:db:2a:d7:2b:54:
30:00:66:fa:74:ee:17:62:cb:79:54:09:7f:d2:29:
50:dc:aa:95:9c:9b:81:44:f6:8c:ad:37:ce:73:41:
9f:29:4a:6b:34:c0:8f:27:5c:bf:90:f6:be:78:8a:
12:b7:8f:18:25:41:e5:a7:e9:47:8d:a6:30:ed:22:
9e:d4:cd:2a:b6:ef:fc:52:f9:21:6b:54:5f:6e:4a:
f1:cb:dc:ef:1b:e2:a1:1c:53:01:4f:4a:8c:45:2c:
10:fb:5d:de:7b:80:54:bc:41:98:8d:5a:8e:7c:d8:
e4:d4:a7:c9:7b:71:b7:d1:02:f3:57:54:5b:39:f1:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:06:FA:C3:7D:0E:B1:8E:84:FC:BD:8D:9D:87:2A:6B:53:6A:A8
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/fzAG-sN9DrGOhPy9jZ2HKmtTaqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:2e:38:29:05:5f:3f:e9:e7:3f:87:aa:73:4f:0e:e5:c7:be:
b7:e1:dc:d2:36:49:86:c5:b7:50:d4:33:10:94:1d:60:5f:b6:
3f:05:1a:7c:0f:68:a1:6c:37:bc:d3:60:66:46:ea:2c:aa:90:
76:2c:75:51:59:dd:81:ef:b2:25:1f:4c:99:5d:49:67:df:5e:
08:a7:99:95:cb:0d:29:e5:be:7a:4d:09:c4:47:e2:ba:bb:22:
2a:c2:7c:92:32:72:b0:fb:d9:65:34:09:90:22:08:c7:46:38:
aa:96:d0:0a:0f:92:1e:f7:a0:cf:b4:99:f0:73:1e:bd:1f:06:
2b:2b:81:16:15:4a:bc:da:f6:eb:eb:84:22:19:55:3e:e0:3c:
4f:b9:ee:a0:9c:43:8a:fa:9e:81:5b:8b:03:fa:4b:77:d1:cb:
83:09:cd:d6:52:0e:8c:3a:f6:65:34:ae:f5:88:57:b2:4c:c5:
2e:7e:7f:cc:17:0f:97:e1:0a:89:40:fd:4c:78:87:ea:5d:82:
2d:0d:dc:2e:b8:fc:d6:41:a4:09:1e:5f:6f:d4:a1:57:69:88:
95:33:66:15:2e:ae:2f:6b:1a:d5:18:a3:6a:ab:fc:c3:14:41:
d0:35:7c:ae:f1:f9:38:58:24:dd:45:16:07:e3:45:bd:c0:76:
22:e7:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 04:52:40 2024 by rpki-client on console-fra.rpki-client.org