Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/ADqXjePfEPPzuxQPOMtDAOGqCS0.roa
File: ADqXjePfEPPzuxQPOMtDAOGqCS0.roa (raw, json)
Hash identifier: Av1VW7XNQlKDoxxBSfAPYPfIehMc4tTt9gUOxWDQ5qs=
Subject key identifier: 00:3A:97:8D:E3:DF:10:F3:F3:BB:14:0F:38:CB:43:00:E1:AA:09:2D
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05F4
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/ADqXjePfEPPzuxQPOMtDAOGqCS0.roa
Signing time: Wed 14 Aug 2024 01:27:17 +0000
ROA not before: Wed 14 Aug 2024 01:27:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23852
IP address blocks: 124.175.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 14 01:27:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=003A978DE3DF10F3F3BB140F38CB4300E1AA092D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:d0:50:f8:51:5e:31:4d:db:1d:50:a2:32:
b3:e6:1a:88:09:8c:a3:7f:c2:fc:01:09:77:57:61:
eb:aa:4a:2a:64:f7:e5:8f:97:ec:ac:f4:26:ac:2f:
36:57:8e:70:f0:01:bd:e8:6f:f4:0c:ee:b1:7e:d5:
f9:5e:ff:4c:c4:b6:eb:3b:9e:89:ba:65:35:3f:38:
40:20:a1:d4:72:1c:cb:e1:98:2a:8c:9b:30:91:34:
2a:19:da:45:9f:9e:7a:47:56:8c:2c:6c:7c:a1:7e:
9c:06:c7:24:ea:88:ef:ff:df:5a:bc:78:e6:fe:b6:
35:7e:bb:4a:0f:0c:7d:da:7a:58:39:30:d5:09:d7:
8f:3e:03:8b:e1:72:5c:ee:bb:9b:02:c7:ad:c0:2d:
ba:fa:e7:96:88:d7:8f:31:83:79:a7:08:25:9f:8a:
b2:c5:5e:dd:06:5a:49:46:b0:a5:29:f3:0d:ef:df:
9e:91:2e:80:16:df:80:64:d3:fa:e5:0e:94:21:95:
5a:83:9b:de:c6:33:92:98:d9:42:e5:0f:9d:0c:6f:
34:3d:ef:1d:3c:27:2f:4c:94:f7:2f:ac:04:4e:78:
cb:38:43:67:91:de:4d:b3:24:1e:6d:2a:3f:09:a3:
71:31:6e:e8:47:5e:e1:99:de:ba:d9:21:dd:3c:a4:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:97:8D:E3:DF:10:F3:F3:BB:14:0F:38:CB:43:00:E1:AA:09:2D
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/ADqXjePfEPPzuxQPOMtDAOGqCS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:14:60:d9:a7:00:3f:fa:66:3a:be:cd:85:8f:f5:6c:42:7b:
52:d2:4c:4a:15:82:e3:26:aa:d2:49:24:aa:12:eb:74:6f:ba:
a9:0e:5f:b0:39:9e:7b:af:66:7d:a7:2a:66:58:00:4d:54:cc:
a0:bd:76:95:76:4e:7e:f7:cd:88:d2:b9:53:23:dc:bf:04:6c:
ce:7d:81:63:e5:99:35:ca:ff:4c:f1:22:71:1c:af:99:08:18:
02:84:c2:8b:d3:4b:8f:85:2f:a3:37:a3:f5:6e:8e:1a:16:93:
c0:48:f7:45:29:31:47:96:ec:73:bc:8b:2a:94:23:d4:63:dd:
78:f3:ff:18:c6:97:90:26:c3:db:67:fc:29:cf:5b:23:47:f5:
d4:32:de:79:69:b5:74:f3:4c:29:04:32:7f:18:c0:fc:07:58:
f0:2a:9a:63:78:8d:40:7e:48:01:36:e3:00:d2:81:67:27:d7:
9e:0b:4f:9b:91:4d:3f:59:ad:02:eb:3b:16:eb:ac:c1:ff:9b:
48:92:76:04:99:63:63:8e:c3:96:24:c2:55:31:44:6c:5a:27:
c3:ac:d9:6b:81:ff:45:a3:76:19:8f:c0:9a:40:7a:e1:65:37:
23:43:87:44:1b:21:0e:45:a6:17:de:03:d3:fc:fe:58:19:cd:
b2:05:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org