Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/CWmsJtJWcs6WdaDlZ3ggOCz7MYQ.roa
File: CWmsJtJWcs6WdaDlZ3ggOCz7MYQ.roa (raw, json)
Hash identifier: hJ6QyVle6BW8S1h8u/nMZPq/o4tGOzibjsiCvZD9LOc=
Subject key identifier: 09:69:AC:26:D2:56:72:CE:96:75:A0:E5:67:78:20:38:2C:FB:31:84
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05CB
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/CWmsJtJWcs6WdaDlZ3ggOCz7MYQ.roa
Signing time: Mon 12 Aug 2024 04:09:42 +0000
ROA not before: Mon 12 Aug 2024 04:09:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0969AC26D25672CE9675A0E5677820382CFB3184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:a9:2f:3d:21:13:4f:b3:c1:8e:85:b5:10:
af:e6:f7:4c:eb:72:f8:60:be:9e:93:63:06:c0:31:
43:ba:2d:f2:78:6e:2d:46:ba:0a:a9:f3:2d:5d:b3:
a8:a4:19:ee:a0:a4:c1:b3:ba:0f:da:1e:85:17:21:
d0:62:ba:d6:c3:e5:8b:2f:f1:3d:e0:80:a7:69:8b:
5c:7a:e6:a9:22:01:b7:d1:c7:0d:25:fe:4a:ff:2a:
04:91:66:cf:a7:14:45:f1:35:ec:02:27:34:e4:1c:
6d:80:c7:65:7a:8d:51:2c:d9:15:4f:78:ee:51:34:
74:a9:a7:eb:33:6b:92:c3:95:e7:80:34:73:9a:06:
9a:f9:d0:da:65:44:17:39:22:f5:7b:6b:2d:00:51:
51:34:b0:53:60:a2:35:ca:88:bc:98:3d:4b:19:85:
6e:8c:6e:64:6f:51:fc:e1:f3:e7:c4:ad:51:23:fe:
00:06:ed:0e:0e:2b:2e:d3:69:99:4e:eb:6c:03:26:
f7:e2:32:83:f7:a8:f9:b7:63:9a:e6:e8:c5:52:9c:
61:85:e1:e3:75:7e:01:86:ff:fe:69:06:28:3e:8a:
ca:3d:cd:cb:98:1d:70:72:6a:0c:e3:aa:56:dd:c0:
a9:28:ff:4a:64:c0:91:24:b5:f7:74:d0:4e:82:d2:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:AC:26:D2:56:72:CE:96:75:A0:E5:67:78:20:38:2C:FB:31:84
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/CWmsJtJWcs6WdaDlZ3ggOCz7MYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.112.0/21
Signature Algorithm: sha256WithRSAEncryption
92:4e:d0:43:cf:80:b5:99:00:e9:ef:45:78:92:e6:d3:53:27:
ec:4a:ba:f1:55:b1:46:eb:67:f9:72:dd:7d:b3:8e:2b:76:bd:
ef:b1:aa:8c:a8:6c:86:67:aa:9b:8d:c8:87:48:7e:62:8a:9a:
52:d3:1c:ca:a5:56:68:73:80:b7:73:53:e5:e9:cd:ae:dc:f3:
00:92:5b:32:05:67:42:ea:87:58:15:22:24:96:72:72:1d:d6:
88:d6:9e:48:f6:1e:b0:a0:7c:e5:f8:93:40:12:59:5c:be:e9:
75:e2:e0:25:c9:bf:54:e8:8c:14:bc:a8:12:62:fd:fd:f3:90:
90:10:89:dc:9b:98:e8:49:14:c4:3a:5e:05:a6:34:e5:fe:29:
d4:3e:01:9a:2c:08:63:cd:7a:a9:11:cf:89:19:e5:2f:8b:5f:
8d:58:1e:93:52:d2:f8:47:a5:96:ec:0d:f1:c8:12:e2:21:0a:
c3:0a:d5:1c:f8:f1:8e:9a:06:80:df:1b:bb:88:2c:16:ae:53:
94:6a:24:30:26:1a:33:b0:8e:a5:03:b6:b6:88:fa:09:d0:a7:
f0:1c:50:2d:63:0f:d4:b8:96:63:e2:fd:45:1e:e5:7b:e2:9b:
09:d4:41:01:77:75:36:30:cf:06:4d:f1:17:9a:ca:5a:38:d5:
e3:ed:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org