Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/AuAQvQSeT7jdUVfFNPxGYvpsGOs.roa
File: AuAQvQSeT7jdUVfFNPxGYvpsGOs.roa (raw, json)
Hash identifier: a03uARrbt6G3dbOb1ohiSGhvLfrMbCw+XGiAWjfG2xQ=
Subject key identifier: 02:E0:10:BD:04:9E:4F:B8:DD:51:57:C5:34:FC:46:62:FA:6C:18:EB
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05D2
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/AuAQvQSeT7jdUVfFNPxGYvpsGOs.roa
Signing time: Mon 12 Aug 2024 04:09:44 +0000
ROA not before: Mon 12 Aug 2024 04:09:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 18811
IP address blocks: 124.175.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=02E010BD049E4FB8DD5157C534FC4662FA6C18EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:2a:05:44:71:a3:e4:c8:da:d5:cb:ae:7a:
16:8f:e0:b3:53:59:98:49:ea:74:5e:31:b5:ab:95:
f0:02:ce:5b:fb:cf:69:32:94:c5:e7:38:27:cd:e8:
b0:9e:69:2b:64:00:97:7c:98:54:d3:ad:20:96:af:
0c:fa:a3:86:06:c4:a1:ff:0b:d0:5e:86:6a:1a:d0:
d6:96:1b:4b:b8:57:38:f4:24:73:f5:39:82:fb:10:
a3:f0:79:f1:34:ea:b3:11:20:d7:73:1b:3e:dc:f0:
e0:4e:17:d4:7e:36:38:2b:37:cb:2c:db:3b:b1:6a:
ec:56:05:ab:e0:8a:ad:d2:b9:41:ac:3e:91:ed:f8:
34:76:54:bb:e6:62:33:ac:0a:2a:60:fb:4f:f8:ba:
ef:c8:38:e9:37:a1:c1:c6:2a:01:c8:aa:3e:f2:30:
54:7f:27:9c:5f:7f:3d:b4:b7:78:0e:27:43:61:a2:
89:2f:38:c4:2b:e2:4d:3e:c4:d1:92:c5:7b:fa:6b:
31:92:b0:b0:b7:cc:e7:f2:05:f6:97:16:cb:9f:d3:
5d:64:00:36:75:bc:e7:72:b2:a2:7e:b5:b9:7e:bd:
61:14:56:d9:5d:19:51:d6:ce:13:3e:16:c1:c5:fb:
c2:90:41:f9:e6:29:56:dd:84:16:2c:11:24:7b:7b:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E0:10:BD:04:9E:4F:B8:DD:51:57:C5:34:FC:46:62:FA:6C:18:EB
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/AuAQvQSeT7jdUVfFNPxGYvpsGOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.48.0/21
Signature Algorithm: sha256WithRSAEncryption
69:85:ef:f6:5d:c4:75:f6:6e:e3:04:52:61:b4:11:59:99:1b:
6e:b2:ea:78:d6:6e:f7:e4:e2:b1:a6:f5:0e:2f:97:98:6f:c9:
65:41:ba:1e:75:48:f3:ad:a9:92:b3:52:b8:43:d5:ae:47:29:
f2:b5:32:e6:46:00:92:a2:4d:0e:cc:4b:1a:5a:39:62:58:4d:
d3:29:7c:6e:ff:52:89:f7:4a:3c:74:31:eb:e9:99:c1:63:c3:
97:68:34:22:3c:3b:20:68:05:96:d3:01:0a:b7:46:db:b0:ff:
4e:b5:de:aa:a8:0f:04:25:e2:50:61:77:02:02:06:14:ef:f6:
27:ad:74:a1:8f:5d:50:7c:70:1c:64:1a:c2:5a:ef:b7:99:e8:
8e:9d:4e:d9:08:cc:f2:a6:e5:6a:0c:31:18:d9:21:f4:a1:8c:
54:02:93:20:77:e2:80:17:aa:14:62:0d:92:a9:60:e9:bd:2b:
54:03:00:97:ac:0a:9f:cb:54:b4:88:5b:98:f1:d2:79:19:c7:
67:05:05:93:9c:c4:72:76:6f:15:e6:13:ac:43:07:0c:df:1e:
fe:12:55:45:c6:0d:14:28:f8:27:e3:b9:be:83:33:e4:a3:be:
98:80:a2:52:71:2f:12:a8:a4:2e:f2:dc:1d:5b:23:f7:c5:34:
52:66:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:33:39 2024 by rpki-client on console-ams.rpki-client.org