Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/uvTbMw1HI_FFiRrsWFv3LgfJ_U8.roa
File: uvTbMw1HI_FFiRrsWFv3LgfJ_U8.roa (raw, json)
Hash identifier: 53qLtWabDk9EUJJKI7G3Vj+/UygLI8NpAY2L+aGJgkc=
Subject key identifier: BA:F4:DB:33:0D:47:23:F1:45:89:1A:EC:58:5B:F7:2E:07:C9:FD:4F
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 88
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/uvTbMw1HI_FFiRrsWFv3LgfJ_U8.roa
Signing time: Fri 03 Nov 2023 14:34:51 +0000
ROA not before: Fri 03 Nov 2023 14:34:51 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.241.50.0/24 maxlen: 24
103.45.161.0/24 maxlen: 24
103.45.162.0/24 maxlen: 24
103.45.163.0/24 maxlen: 24
103.205.255.0/24 maxlen: 24
103.239.244.0/24 maxlen: 24
103.239.245.0/24 maxlen: 24
103.239.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Nov 3 14:34:51 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=BAF4DB330D4723F145891AEC585BF72E07C9FD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:31:1f:5e:1b:9d:b1:2a:54:0a:0e:84:75:
ca:97:b1:60:ff:97:87:06:0a:0a:9d:ec:5f:cd:49:
84:d9:ae:60:cc:d2:90:1a:e5:da:1b:7a:17:2c:96:
6d:04:1c:6e:28:a1:ea:29:6b:f7:19:6f:45:30:6a:
28:b9:3a:7a:4e:e7:85:29:83:69:92:ff:03:4b:f4:
c2:66:3e:2d:4e:ef:ff:b8:77:e4:d9:e9:c1:72:f6:
22:b1:15:ac:ac:ab:0b:76:07:38:f7:6e:2e:db:f7:
4b:2c:d3:c7:a6:4d:88:5a:e3:fc:34:0c:42:7f:b4:
05:ac:1e:2b:51:6d:20:0c:df:9d:ee:f0:d7:58:42:
d8:fe:f9:f9:83:b9:1b:45:56:28:ea:47:bc:2e:22:
69:00:b7:14:89:54:fc:c0:59:e0:8b:19:6e:6e:6c:
74:74:45:61:e2:a1:37:55:f8:79:03:24:32:a1:15:
88:ab:96:b9:09:af:2c:6d:2f:a2:2c:91:74:4f:a2:
a4:9d:f5:c4:9a:ec:d1:17:8f:cd:5d:30:4b:cb:f2:
60:76:6e:df:b3:1e:e2:3b:8b:70:66:6e:c1:8f:82:
3b:36:a6:4d:07:17:2f:80:a3:f4:65:92:f1:0e:73:
4c:7c:ba:35:2b:e0:f7:6e:0c:ca:f5:51:a0:30:77:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:DB:33:0D:47:23:F1:45:89:1A:EC:58:5B:F7:2E:07:C9:FD:4F
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/uvTbMw1HI_FFiRrsWFv3LgfJ_U8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.50.0/24
103.45.161.0-103.45.163.255
103.205.255.0/24
103.239.244.0/23
103.239.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:32:32:a7:e4:8c:b0:aa:e5:72:97:2c:07:09:70:e2:c5:0a:
be:2b:ac:96:c3:f5:2f:e5:4c:27:f0:25:56:6a:d1:02:80:8c:
d8:e6:06:d9:f8:9c:3c:74:cb:d9:be:96:bd:a3:fb:e9:32:c1:
97:37:6a:51:de:8a:cd:ce:80:aa:a9:03:17:c3:7f:df:b6:85:
85:83:44:79:90:ec:ac:a6:a3:d0:a3:c5:36:3b:b9:8b:dd:a8:
81:d7:cd:b3:48:17:55:e1:20:85:96:45:e8:ff:b7:26:db:9d:
da:66:88:10:15:5e:06:c8:59:cc:13:b8:b5:78:84:77:6b:31:
81:ec:c2:35:5f:88:74:48:41:e5:61:7c:7f:65:b6:4d:e3:3b:
4f:53:48:74:f8:44:9e:2c:08:5c:a0:0f:bc:5a:c1:ca:b5:f2:
75:67:5b:87:31:d4:da:20:ea:53:10:bf:27:65:0a:3f:5c:1e:
f8:8d:62:75:90:48:3f:9a:81:ed:e6:a9:b7:ed:7a:59:20:f5:
84:1e:e6:5a:08:25:34:90:8d:15:fa:6b:b7:b1:25:eb:f2:6e:
fd:1d:da:e0:c7:46:81:6c:b8:f8:bc:b3:f1:b0:16:4f:dd:ef:
c4:a0:19:5e:c6:3e:c1:89:b3:15:e9:b7:a4:38:20:a4:db:7f:
22:32:05:43
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 25 03:14:44 2023 by rpki-client on console-ams.rpki-client.org