Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/She1xa5gr3v3uHnyertHnJkyByE.roa
File: She1xa5gr3v3uHnyertHnJkyByE.roa (raw, json)
Hash identifier: thfwCbOrGqDZELNv9apSFp+/yCuNpMvSj5tW75RNols=
Subject key identifier: 4A:17:B5:C5:AE:60:AF:7B:F7:B8:79:F2:7A:BB:47:9C:99:32:07:21
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05F5
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/She1xa5gr3v3uHnyertHnJkyByE.roa
Signing time: Wed 14 Aug 2024 01:27:17 +0000
ROA not before: Wed 14 Aug 2024 01:27:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23852
IP address blocks: 124.175.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 14 01:27:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4A17B5C5AE60AF7BF7B879F27ABB479C99320721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:34:1d:3b:08:b8:27:cc:1d:c0:cc:65:13:
37:21:2b:fd:50:b3:23:10:09:63:c6:84:b6:a0:37:
95:37:ab:12:6f:13:d7:43:e6:7b:c7:b6:ec:3a:90:
dd:84:f0:8d:d7:1d:90:0f:88:37:86:2e:c7:90:64:
d9:40:7c:b6:67:0a:d8:38:3b:5b:04:00:5b:86:b2:
b1:1d:c5:52:ae:f9:78:a6:cb:1c:62:46:e0:32:c1:
73:e8:dd:f9:d7:9d:48:d7:60:5c:35:52:a1:aa:b5:
79:65:ec:61:47:a3:94:11:3d:a6:37:53:c7:5c:6b:
fc:8d:13:ae:fa:9e:b6:84:72:cf:d0:9b:ed:01:b5:
77:88:3a:cb:ef:09:f2:f6:23:c8:1f:c0:aa:34:59:
08:34:a6:a6:ec:9a:91:d9:ba:a1:47:0d:37:21:0a:
01:44:c6:5e:89:22:ae:1c:36:ca:01:b6:b0:dd:a7:
62:de:29:4a:06:cb:62:d0:5f:67:b4:4c:81:73:b4:
e7:a6:a7:6f:6a:54:96:3b:3a:56:5e:71:87:bb:16:
f6:c9:08:02:e0:37:8e:1c:78:f0:bf:e7:2e:8c:2a:
4d:b9:04:6f:58:f9:4c:cb:bc:f6:ae:08:c6:c9:74:
5e:10:f4:74:1b:2b:fa:59:9f:a6:e3:32:1b:07:c2:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:B5:C5:AE:60:AF:7B:F7:B8:79:F2:7A:BB:47:9C:99:32:07:21
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/She1xa5gr3v3uHnyertHnJkyByE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9e:7b:bb:3d:71:b5:50:cd:57:b8:24:f5:d2:e9:55:25:0d:
38:9f:fc:3e:b0:3b:52:f6:3c:c7:8b:65:96:73:95:04:08:8f:
c8:21:22:ec:0c:c7:80:0c:3e:c7:85:3e:dc:f8:18:29:19:4e:
8c:01:0d:52:e7:45:bb:04:a4:85:b6:4c:6f:9b:ff:30:ca:4b:
05:f7:cf:22:67:f8:61:8e:34:e0:d3:c1:c3:45:85:4a:70:10:
b4:5b:24:1a:bb:83:e7:e6:22:88:5b:42:73:9a:6f:01:6a:f5:
76:ec:8e:1a:86:8b:55:c7:4e:38:04:4f:b5:d4:5e:2f:a1:c6:
bb:cf:67:ea:57:95:f8:84:00:ad:c0:22:13:52:58:c5:c7:26:
a5:86:6c:8c:df:4b:24:f6:a1:dd:3f:95:1d:06:4f:7d:cb:87:
c2:0a:79:c2:93:c3:c6:6b:16:90:2a:b7:59:34:94:4b:80:16:
87:56:a8:eb:05:25:3a:7f:36:98:d5:4b:16:8c:bb:14:ec:2f:
f5:e9:62:8d:20:e7:ea:64:5a:24:ef:d0:7f:34:6b:a7:3e:04:
e6:03:56:9e:db:e4:47:1e:d4:89:05:99:cf:dd:73:db:80:25:
29:2f:1f:90:41:0b:82:25:62:5b:5b:4e:b6:a4:87:29:c8:29:
60:65:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org