Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/5EEYAg_5QopttyrdR4o1Gh0zxkI.roa
File: 5EEYAg_5QopttyrdR4o1Gh0zxkI.roa (raw, json)
Hash identifier: wIoHJrP7RCXd0M7HrPkD31nsGfvVcjFaNY27tTXnzLQ=
Subject key identifier: E4:41:18:02:0F:F9:42:8A:6D:B7:2A:DD:47:8A:35:1A:1D:33:C6:42
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05F7
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/5EEYAg_5QopttyrdR4o1Gh0zxkI.roa
Signing time: Wed 14 Aug 2024 01:27:17 +0000
ROA not before: Wed 14 Aug 2024 01:27:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23852
IP address blocks: 124.175.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 14 01:27:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E44118020FF9428A6DB72ADD478A351A1D33C642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:cb:4b:73:53:0d:c8:95:19:fd:f8:1f:75:
2c:8e:11:2e:3a:20:d8:09:18:a4:12:1b:b3:ed:34:
41:cd:8f:99:94:73:74:5c:78:b6:2a:72:95:f7:9b:
8b:4b:2c:ba:8e:dd:f9:9e:a3:de:5b:97:f6:3c:b9:
b3:c0:ce:15:94:f6:51:f7:38:3c:06:49:b7:ce:80:
7a:31:88:82:1e:2d:8e:73:a8:38:a1:31:ac:3b:2b:
27:32:94:2c:e1:f7:23:d9:1d:16:a6:d7:f3:1e:a8:
b7:1c:83:e4:93:0c:e9:72:37:15:36:78:78:8c:1b:
45:53:6d:6f:fa:15:3a:61:fb:44:9e:5c:e2:cd:00:
af:69:1f:d3:c1:78:7b:dc:09:54:9b:90:d8:b3:47:
ea:f8:bb:82:37:88:f0:24:e7:9b:6d:c1:b0:a9:f4:
66:86:34:a0:8b:de:fe:9a:12:98:15:1d:dc:30:7f:
98:fb:11:42:c4:6f:1e:ec:0c:e9:be:51:28:bc:29:
41:71:95:6b:b3:cb:ea:0e:7f:7c:b6:72:3e:ee:5d:
a2:87:c3:71:86:e2:42:a4:66:24:69:cf:4d:23:0b:
80:96:58:ef:d3:26:99:9f:d6:4a:e9:6e:d5:9d:a5:
05:d4:90:c9:eb:0e:e3:32:20:2a:85:05:e4:3c:7d:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:18:02:0F:F9:42:8A:6D:B7:2A:DD:47:8A:35:1A:1D:33:C6:42
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/5EEYAg_5QopttyrdR4o1Gh0zxkI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:99:d4:d6:ff:66:53:b1:e6:e7:12:e6:44:74:89:87:39:7b:
e2:89:ac:0f:4a:9e:17:9d:41:ee:5b:6a:62:01:44:9d:21:30:
3a:a9:d1:57:4e:11:4a:18:2b:4a:57:c5:21:a3:02:77:90:8a:
6f:74:39:95:9c:c4:1b:62:ba:4d:89:5e:f4:63:6a:08:0a:71:
bf:87:ad:2e:47:8c:63:41:56:09:76:b6:bb:10:38:2e:52:cf:
42:da:53:a3:11:fd:21:a3:01:e7:f8:9a:cb:36:45:61:77:b9:
e4:ab:41:39:72:23:a4:f3:27:d4:60:e6:a3:d6:52:36:2c:7d:
69:fd:d8:56:39:a4:2b:90:34:19:b5:98:3c:35:7b:e7:02:42:
7f:da:76:37:69:b0:6b:e3:7d:8b:b6:dd:e8:75:99:5d:b9:34:
58:ff:d0:27:53:44:15:90:c0:b2:bb:80:bc:0e:ab:eb:b7:39:
a5:70:00:2c:97:b7:97:dd:fd:28:b6:50:e2:09:87:a7:11:55:
74:10:82:a7:ad:8d:51:32:3e:8f:6e:29:d5:ea:65:fc:01:79:
bd:a6:0e:e5:ab:52:14:3d:b5:ee:03:6b:f3:54:13:83:a4:e5:
b2:be:1f:20:4c:5b:e0:0d:dc:0b:bb:ea:39:6c:0e:ca:96:dc:
e6:59:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org