Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/xvWIH6zSYdTEE7_tP5kXs5tST7Q.roa
File: xvWIH6zSYdTEE7_tP5kXs5tST7Q.roa (raw, json)
Hash identifier: mE95Q+IzueTokFw+Nq08FZYRnGFuFU7zIgeUHibf1JU=
Subject key identifier: C6:F5:88:1F:AC:D2:61:D4:C4:13:BF:ED:3F:99:17:B3:9B:52:4F:B4
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: E4
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/xvWIH6zSYdTEE7_tP5kXs5tST7Q.roa
Signing time: Wed 22 Nov 2023 01:11:54 +0000
ROA not before: Wed 22 Nov 2023 01:11:54 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Nov 22 01:11:54 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=C6F5881FACD261D4C413BFED3F9917B39B524FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:f4:dc:ea:ea:6e:d6:22:dd:20:82:52:84:
39:ea:a4:bd:9c:58:b7:ba:7c:0d:e2:63:93:60:7a:
5f:1b:21:99:08:f3:55:e5:3d:80:63:78:0e:93:e4:
7d:c0:cb:ab:00:5f:ee:86:7a:8d:a5:bc:1c:d9:20:
52:82:5f:c2:0a:a4:49:16:41:2f:ae:33:ff:fc:6d:
b4:fc:8a:61:f2:cc:dc:6d:d9:66:01:93:e7:0b:56:
8c:bc:37:5b:15:08:ce:e6:1e:95:0d:d3:1e:ad:cd:
69:51:ab:ce:c8:92:73:e0:d7:6f:e8:a0:c0:2c:c7:
e2:ae:ef:e9:4f:b8:62:83:ae:21:4c:14:e3:c6:9f:
a7:a7:16:0d:96:10:69:6e:1b:09:b7:53:2e:97:33:
7b:cc:23:97:29:6f:49:71:f4:13:3d:90:35:86:a5:
04:d4:5d:86:b1:60:9d:ed:6a:02:f4:80:ec:89:0c:
f8:b1:fe:66:2f:6e:67:89:55:a7:32:c3:61:bb:4c:
f6:82:6a:c6:37:4d:1b:0e:e7:26:5b:0c:86:ea:ee:
ee:11:df:b0:24:3c:a6:1b:e7:c9:bc:7a:fb:21:f5:
3f:1f:cf:e1:c2:be:34:03:0d:03:c9:1c:9b:de:aa:
7c:9c:94:ad:a1:ad:ef:2b:e9:94:eb:88:41:82:d3:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:88:1F:AC:D2:61:D4:C4:13:BF:ED:3F:99:17:B3:9B:52:4F:B4
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/xvWIH6zSYdTEE7_tP5kXs5tST7Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
35:83:bb:18:8f:6c:f3:5f:18:0c:98:6c:a1:d6:db:c6:ec:25:
33:54:5d:e9:c5:e5:c6:82:2d:d2:b6:3f:12:6c:a4:15:4f:b8:
c9:c4:e6:16:2d:aa:87:8d:73:95:15:d9:82:66:7c:11:41:f5:
bd:0e:5e:71:44:ab:25:9e:5b:cb:ee:ef:7c:e1:9b:5e:fc:81:
43:ef:72:39:90:f3:fb:b6:b8:d4:aa:40:a2:4c:2d:74:93:13:
8d:af:74:80:b9:94:cb:60:25:fc:cc:45:57:6f:58:12:46:0f:
8d:f9:7d:40:2a:b4:16:f7:ec:a3:8a:6c:c6:83:84:65:1a:bd:
fb:2d:7f:67:d7:58:ff:70:16:41:14:3d:94:01:c3:1a:63:6a:
08:f8:00:c6:71:60:eb:69:d3:91:9e:eb:60:ab:0b:ff:84:1d:
03:13:35:1f:45:29:a6:59:38:1b:bc:ab:17:42:32:bd:e8:4a:
a2:72:15:3b:65:89:83:81:cf:7c:36:99:0f:46:b1:f3:bc:8f:
32:19:95:b8:2d:ea:01:c7:16:7d:bc:d0:b3:07:c6:19:7a:56:
1c:f6:de:9c:e1:ef:08:9e:1e:45:f8:a1:a1:de:9c:79:45:b7:
f9:32:0d:64:39:06:54:c0:d6:25:b0:cd:9c:44:47:4f:b4:2f:
0f:2c:a1:69
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 29 06:19:45 2023 by rpki-client on console-fra.rpki-client.org