Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/YuN7HdRtIeGFZ9BTCsPxkcRr29Y.roa
File: YuN7HdRtIeGFZ9BTCsPxkcRr29Y.roa (raw, json)
Hash identifier: IEhDIxcCwkCTCQEcMQGPJOIE/NAJ2+fMoNfbrJNgPig=
Subject key identifier: 62:E3:7B:1D:D4:6D:21:E1:85:67:D0:53:0A:C3:F1:91:C4:6B:DB:D6
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/YuN7HdRtIeGFZ9BTCsPxkcRr29Y.roa
Signing time: Sat 28 Oct 2023 12:07:35 +0000
ROA not before: Sat 28 Oct 2023 12:07:35 +0000
ROA not after: Sun 27 Oct 2024 02:55:36 +0000
asID: 40676
IP address blocks: 124.175.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Oct 28 12:07:35 2023 GMT
Not After : Oct 27 02:55:36 2024 GMT
Subject: CN=62E37B1DD46D21E18567D0530AC3F191C46BDBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:db:6c:cf:cf:11:d7:bd:db:e3:d7:31:0c:
32:8d:8a:56:fa:68:01:6a:8a:e2:0d:de:a2:a4:15:
80:08:96:23:60:67:0a:5b:e1:83:0b:43:f0:ec:f7:
d4:fe:fe:ec:05:be:1e:bf:67:a2:31:47:32:9b:23:
e6:ba:42:65:55:35:3f:9b:46:83:d1:4f:6b:b8:92:
d7:10:3d:01:49:90:16:6b:4e:81:04:c9:83:72:fe:
9f:4a:98:45:f3:17:16:14:a3:05:fa:7f:95:e1:c4:
c8:22:46:37:13:e2:db:0f:87:4f:e5:7f:40:bd:e5:
42:5b:ec:43:d1:0f:59:cc:5f:28:b6:2b:0c:60:c0:
f5:3b:33:84:9f:a6:ed:00:46:55:5b:bb:b0:31:d9:
81:e7:6d:af:bb:14:df:85:e9:29:2e:9c:61:28:f0:
b6:f8:ee:1e:c6:40:66:1f:c0:e4:b7:34:c8:60:33:
8c:d6:6a:5c:d4:07:51:16:b9:d6:66:dd:34:10:cb:
a0:58:de:01:b6:89:fd:60:c0:d2:4e:4a:c4:65:56:
3e:8e:c0:dd:85:56:44:eb:6f:b4:e9:9a:bf:c0:0a:
89:d1:85:13:a5:41:c1:52:03:56:c3:a6:0e:c7:2f:
f9:31:0a:22:90:c0:4f:af:d3:a0:dc:ee:12:d0:4a:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:7B:1D:D4:6D:21:E1:85:67:D0:53:0A:C3:F1:91:C4:6B:DB:D6
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/YuN7HdRtIeGFZ9BTCsPxkcRr29Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.192.0/19
Signature Algorithm: sha256WithRSAEncryption
05:62:6d:5b:ae:f3:a0:73:4c:af:63:4d:d4:cd:9f:2d:c7:7b:
2b:76:93:fd:82:02:78:5f:a9:b7:dd:5e:06:02:e5:f0:44:49:
f6:ab:7f:19:13:6c:fa:b6:bb:67:ed:e5:43:3a:7d:1d:cf:7d:
02:98:95:f8:5c:d4:da:41:f3:21:c7:e8:07:f4:ef:06:25:18:
55:51:d8:cc:ca:20:d5:bd:f1:ee:38:06:84:48:05:c3:e8:ea:
39:8a:0a:c6:2f:25:4a:e8:e6:b5:87:b8:c8:5a:22:43:8a:7e:
00:97:49:62:97:4e:6f:c3:17:28:e2:91:60:4c:cc:44:8c:75:
d2:77:30:a9:7f:8b:e5:71:2a:ad:68:47:db:c5:a9:ce:a9:61:
a9:24:6a:bf:2f:da:67:2c:d4:d6:99:fc:98:6d:de:11:f3:ad:
a1:2a:d2:db:24:2a:9d:55:4b:66:2e:c5:61:4b:ed:0d:fd:77:
b2:1c:73:6a:e8:50:cb:63:79:dd:9a:40:13:73:fa:26:e8:41:
84:64:82:eb:b8:02:53:b4:c2:5b:d4:63:5e:b0:cd:69:65:72:
ba:a4:d8:96:6e:45:9c:ef:5c:cc:f2:80:bf:16:e1:f1:c7:99:
49:63:00:04:38:49:ea:08:cb:6b:fd:db:2a:3e:81:a5:36:4f:
5d:0e:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 14:58:14 2023 by rpki-client on console-ams.rpki-client.org