Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/LgukUM9Bc30HxMHmxGuEObV7LeY.roa
File: LgukUM9Bc30HxMHmxGuEObV7LeY.roa (raw, json)
Hash identifier: K2YLuTa6tJ05EkZmFBH6gvPVO86qCDyxK+E3um1J5Eo=
Subject key identifier: 2E:0B:A4:50:CF:41:73:7D:07:C4:C1:E6:C4:6B:84:39:B5:7B:2D:E6
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05E8
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/LgukUM9Bc30HxMHmxGuEObV7LeY.roa
Signing time: Mon 12 Aug 2024 04:18:42 +0000
ROA not before: Mon 12 Aug 2024 04:18:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23852
IP address blocks: 124.175.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 01:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:18:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2E0BA450CF41737D07C4C1E6C46B8439B57B2DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:c1:1e:54:2e:b2:78:99:1e:1a:d8:31:b4:
69:a9:fc:b9:64:14:44:6b:d7:17:55:67:8c:6c:00:
82:bc:f3:48:52:e2:93:39:46:0e:e9:d0:af:45:35:
9e:67:02:8b:47:55:5b:ce:d4:3e:df:1d:3d:a2:4a:
d8:f1:8a:f4:f2:65:cf:d0:ab:ae:8d:51:45:e9:16:
bb:98:4c:f4:ad:8f:44:04:d0:a1:bd:c6:9c:1e:ca:
1e:e9:8b:b5:51:57:3c:06:8c:f5:9c:d9:03:ba:60:
6e:d0:71:87:e4:ba:81:e2:93:c8:d2:a9:88:17:66:
8b:8c:32:74:f4:12:2e:42:e9:1e:1a:67:87:bb:ca:
42:2d:fb:1a:5c:9e:ee:05:e0:1c:3b:cd:45:19:6e:
df:54:1e:88:da:a1:9c:1c:4c:7e:14:bf:a4:42:b6:
f0:24:e3:5e:63:00:00:74:b0:1d:12:0c:5d:4e:27:
05:c9:3d:73:90:bb:69:74:26:96:c6:e8:7e:5e:71:
6f:2d:24:36:25:22:ca:4c:b1:ba:b3:72:f6:94:50:
77:9c:ee:2c:9b:25:f5:65:6a:61:b1:33:c4:86:a9:
d4:11:ec:47:28:22:a7:f3:1a:8c:57:48:10:3d:b5:
19:9d:e7:f5:be:bc:f1:92:68:39:e4:a9:76:a5:c2:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:A4:50:CF:41:73:7D:07:C4:C1:E6:C4:6B:84:39:B5:7B:2D:E6
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/LgukUM9Bc30HxMHmxGuEObV7LeY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.216.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:07:7d:79:9d:2c:55:23:10:ec:4e:8f:df:d0:ca:a5:bd:7a:
d1:98:e0:41:94:b0:dd:cb:1a:bc:30:cc:c1:3c:dd:77:b3:19:
19:63:7d:ff:de:60:4e:6b:25:26:be:a3:50:f2:91:0c:3e:e6:
05:b0:f2:01:1d:6c:85:c8:f7:01:53:bb:24:fa:a0:f6:41:12:
60:0d:78:b2:20:a9:49:ec:43:98:81:91:ab:63:f3:63:2d:bd:
b2:98:f6:07:bb:e5:58:b1:d6:3d:33:24:03:71:6b:af:96:91:
9c:16:6d:83:eb:bc:87:65:e8:cc:50:a0:66:09:41:15:c2:5f:
ef:77:c5:16:13:1c:c8:37:13:43:43:b5:e2:3a:a6:39:aa:1e:
62:4b:2d:4c:8c:85:65:66:9c:78:20:e2:7e:aa:a1:57:10:52:
46:8a:6c:0b:84:8e:3c:52:21:54:d6:b3:3b:1b:fb:0a:92:b5:
79:6d:3b:d5:00:d9:45:eb:2d:72:cc:0c:99:33:fd:fe:54:fd:
00:a9:4c:c1:fd:11:94:b4:f6:ab:17:a7:c4:2e:67:3c:2c:20:
56:96:29:16:79:a7:28:d8:15:a6:14:19:ce:e3:f7:f4:21:98:
9e:43:c8:74:25:9f:56:a7:b5:8b:32:e2:f2:5f:09:47:15:ef:
0a:e1:9b:0d
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 14 05:05:47 2024 by rpki-client on console-ams.rpki-client.org