Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/IGNebN3ydzWAZD1lWCGesuzWmRM.roa
File: IGNebN3ydzWAZD1lWCGesuzWmRM.roa (raw, json)
Hash identifier: zNDaPIE7AMBzxc16i6KlYc1OXYIO4pxszoIGEO1JOpw=
Subject key identifier: 20:63:5E:6C:DD:F2:77:35:80:64:3D:65:58:21:9E:B2:EC:D6:99:13
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05DD
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/IGNebN3ydzWAZD1lWCGesuzWmRM.roa
Signing time: Mon 12 Aug 2024 04:09:48 +0000
ROA not before: Mon 12 Aug 2024 04:09:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=20635E6CDDF2773580643D6558219EB2ECD69913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:8a:62:56:66:4e:b4:79:79:30:c5:62:ff:
25:d2:3d:c8:1b:ed:13:64:22:39:83:e1:91:0f:63:
ae:fb:bd:8b:87:72:67:a3:ab:8c:e6:ee:c5:cd:bf:
42:0a:71:50:62:57:64:9e:15:e5:ab:7c:0e:7d:1c:
3a:09:f9:21:a5:97:29:76:f4:ec:68:bf:62:f3:40:
ff:0a:5c:36:ff:6e:4b:df:11:73:39:21:bf:ba:30:
94:94:69:9d:f9:4d:86:8a:8a:1e:80:44:57:96:75:
bd:17:84:c7:79:97:dd:41:dd:84:25:97:48:12:67:
e8:61:00:ca:d5:cc:7a:e1:82:ad:06:30:a5:a3:a8:
01:5e:4a:66:68:f3:2e:e2:e4:aa:4c:f6:8b:a6:e8:
05:32:56:f6:24:82:68:b0:f9:97:00:38:fa:fe:ec:
e5:bb:86:75:e1:5e:19:2c:da:38:57:16:50:b7:22:
80:bd:9d:1e:f0:e0:0d:83:a3:ec:d3:d8:31:07:fc:
8f:b8:91:41:73:82:34:11:fa:06:24:d9:ff:c7:a7:
a3:1b:b0:85:2f:64:46:8b:37:4b:73:14:5f:13:13:
f5:73:29:74:9f:d0:bc:57:73:17:2f:fa:7e:3f:d4:
98:29:38:ea:32:18:f7:10:c3:95:ac:bb:d8:57:cc:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:5E:6C:DD:F2:77:35:80:64:3D:65:58:21:9E:B2:EC:D6:99:13
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/IGNebN3ydzWAZD1lWCGesuzWmRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.176.0/21
Signature Algorithm: sha256WithRSAEncryption
32:fb:c5:7b:30:60:52:bb:c1:70:86:f2:cf:5d:0a:e1:a6:61:
36:cf:0d:ae:87:39:64:a4:c8:7f:97:d6:d3:d0:86:c0:db:0d:
ce:c9:e1:fd:cf:df:cb:1f:0e:08:4d:34:86:1d:70:34:02:12:
3d:80:bc:69:e7:f0:10:f8:db:34:e6:22:61:9d:97:df:24:cc:
a2:88:e1:4b:30:93:9b:1e:da:f4:3c:7b:5a:ad:61:24:d8:d3:
e1:bb:f2:bf:d9:6f:f2:3c:2d:27:49:02:f8:ac:55:41:23:e5:
33:77:18:b4:9d:8d:0b:ae:4d:19:cd:68:50:4e:b0:fb:29:d7:
b1:d1:88:54:b0:6f:3e:6c:e5:6f:c5:ce:d3:19:7a:8d:72:19:
44:df:2a:e3:74:2c:33:45:72:22:08:b3:c1:db:74:25:23:7f:
08:fa:e8:ff:cf:8d:fa:06:fb:e8:78:ae:0e:a6:ca:4b:24:4f:
2b:65:fa:7d:6f:30:97:bc:dd:54:70:50:82:bd:b9:5c:0e:66:
f7:28:99:6b:31:ca:cf:2c:85:03:66:c7:cb:95:9f:9d:ab:d0:
7f:bf:b8:b0:14:1a:27:2e:a8:b6:0c:d7:68:fe:09:0a:95:9c:
28:70:a3:4b:ed:23:af:c8:34:98:fc:77:e3:31:03:71:ff:ad:
fe:5d:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org