Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/-zLZ6nHuv5DWKJitimUpeY7TBv8.roa
File: -zLZ6nHuv5DWKJitimUpeY7TBv8.roa (raw, json)
Hash identifier: b5GgSV59cYub88iUA50vPIJh4aRAWMdlSpBdRBIpA8E=
Subject key identifier: FB:32:D9:EA:71:EE:BF:90:D6:28:98:AD:8A:65:29:79:8E:D3:06:FF
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0105
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/-zLZ6nHuv5DWKJitimUpeY7TBv8.roa
Signing time: Mon 18 Dec 2023 05:45:30 +0000
ROA not before: Mon 18 Dec 2023 05:45:30 +0000
ROA not after: Sun 27 Oct 2024 02:55:36 +0000
asID: 45250
IP address blocks: 124.175.224.0/20 maxlen: 24
124.175.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Dec 18 05:45:30 2023 GMT
Not After : Oct 27 02:55:36 2024 GMT
Subject: CN=FB32D9EA71EEBF90D62898AD8A6529798ED306FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:7b:08:1e:fa:d0:ab:b2:5d:40:72:01:a6:
be:d5:42:1e:ff:88:07:e5:1c:d9:cb:92:be:c2:ba:
56:cb:0d:39:60:75:dd:fe:e6:ee:e2:fb:31:6c:c0:
da:d2:2a:1e:47:45:d8:3f:e5:97:0d:de:31:6f:80:
16:36:4d:20:61:4d:88:56:20:bd:54:ad:ae:2c:cf:
9a:cb:62:7f:fe:ca:0f:e7:22:b2:96:14:75:e8:77:
4d:c9:c9:26:77:01:29:f4:50:d9:67:05:75:ee:9b:
e0:f6:3f:15:1e:93:1d:13:08:80:a6:28:95:7a:fd:
79:82:09:31:d0:66:1c:11:9d:06:93:b4:16:73:e3:
4b:02:0b:cf:a7:91:d2:57:b0:b2:4b:c0:82:d6:b2:
ad:8d:ba:2f:60:8f:85:3a:da:0c:fa:5f:e2:a5:1a:
a5:dd:2e:fa:8c:9b:58:97:8f:24:02:1e:e5:f1:f6:
3a:04:fc:0d:55:f3:f1:15:4f:bb:84:65:53:d3:3b:
30:f7:d1:5f:10:5d:73:04:46:df:21:f6:c5:d3:c7:
85:d5:ef:0e:e6:19:7d:5c:97:ca:c7:83:8d:fd:4b:
dc:64:a5:d3:43:5d:9d:36:d9:fb:07:66:51:bc:ec:
60:52:1a:21:f1:d8:ae:7e:fc:f3:2f:18:c6:13:08:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:D9:EA:71:EE:BF:90:D6:28:98:AD:8A:65:29:79:8E:D3:06:FF
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/-zLZ6nHuv5DWKJitimUpeY7TBv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:8b:81:36:7c:76:e0:9c:2c:18:91:8f:e7:8a:00:4b:1c:7e:
13:52:dd:00:2a:50:b9:67:80:fb:f4:58:f4:aa:77:8f:72:e1:
e1:52:17:dc:1d:11:f0:c2:bd:f0:35:14:c8:00:4f:88:9a:cf:
41:a3:a3:85:4a:d8:4d:5a:f5:90:13:95:2f:ad:f3:51:f6:15:
d0:1f:09:09:aa:63:4e:5b:70:74:6f:c5:01:83:7b:b8:ca:53:
b4:80:a9:b2:d2:17:99:90:df:8e:ad:be:bb:fe:76:de:87:87:
14:47:22:fc:95:f2:d2:52:d0:0e:f1:76:10:95:a7:67:4b:8e:
6b:11:6d:98:0e:6a:c0:e6:8c:18:e5:e0:01:9c:f6:c1:af:0a:
ca:5e:9b:45:8d:12:ae:0c:1d:1d:34:19:99:fd:66:84:2e:c1:
a0:a8:3d:c9:aa:6e:ac:f6:18:9e:9c:a4:61:aa:76:6d:4e:9f:
6f:de:02:ba:4b:80:d4:9b:b3:8d:78:7c:bd:b5:a7:be:5a:8f:
f0:fd:0f:c5:7c:03:3d:c3:ec:31:66:2e:8f:f1:28:75:be:c5:
9b:4f:26:16:a3:6a:5c:eb:63:7c:a9:8b:78:b8:cc:28:67:35:
38:e6:01:ea:60:16:07:36:30:30:72:59:d4:0a:91:4e:87:79:
b2:e8:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 11:30:04 2023 by rpki-client on console-fra.rpki-client.org