Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/cbS7qbCMQ2jXc85-k9QrI47NEak.roa
File: cbS7qbCMQ2jXc85-k9QrI47NEak.roa (raw, json)
Hash identifier: whhsfPqvZTJZy2eczJjS1+b1Y43m4RTYOwF9Iy8mtMM=
Subject key identifier: 71:B4:BB:A9:B0:8C:43:68:D7:73:CE:7E:93:D4:2B:23:8E:CD:11:A9
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05C9
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/cbS7qbCMQ2jXc85-k9QrI47NEak.roa
Signing time: Mon 12 Aug 2024 04:09:41 +0000
ROA not before: Mon 12 Aug 2024 04:09:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1481 (0x5c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=71B4BBA9B08C4368D773CE7E93D42B238ECD11A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:46:f4:ea:ed:55:1d:91:f8:ff:4c:d5:5b:
dc:2d:04:2d:38:29:ae:e4:aa:5c:38:56:33:ee:c7:
14:f1:01:29:45:5c:86:39:b6:c1:74:91:cc:08:77:
b5:e5:00:1b:7f:7c:b8:5d:46:28:6e:2f:5e:d2:aa:
51:ff:e2:e3:be:0c:97:ee:0f:d7:1d:e1:1f:2a:2f:
9c:df:39:cb:b8:b2:27:c9:d2:5f:08:79:77:4a:79:
fd:90:f3:e9:a5:28:d6:15:4d:b0:57:38:99:d4:32:
61:a0:54:59:fa:7a:26:86:13:03:25:6f:3e:93:ad:
09:6e:38:4f:9a:ca:33:03:08:93:0c:44:24:a1:1a:
78:9a:b6:41:71:5f:17:b2:c4:f6:fa:cc:6e:00:9b:
72:98:1a:87:66:24:55:62:c7:75:c1:5c:58:27:b2:
d0:db:3f:de:3e:d7:97:37:6c:80:56:c1:07:dd:8f:
1a:c0:03:ab:c0:15:3e:98:bf:7b:53:51:c4:fc:75:
c9:49:d7:12:8a:fb:85:a0:4e:2f:1d:70:dd:6d:9a:
4e:08:13:7b:14:72:79:48:38:ca:51:b1:22:72:ff:
d7:91:04:6b:7b:c2:4d:42:c0:f1:0e:95:61:3a:4a:
f0:bd:d3:5e:2e:fc:a7:e2:86:79:11:0f:b7:2a:ce:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:BB:A9:B0:8C:43:68:D7:73:CE:7E:93:D4:2B:23:8E:CD:11:A9
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/cbS7qbCMQ2jXc85-k9QrI47NEak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.184.0/21
Signature Algorithm: sha256WithRSAEncryption
17:3f:27:20:f3:6d:e5:eb:a1:94:19:55:fd:42:30:16:ef:45:
30:90:61:be:dc:2a:58:60:cf:af:e9:0d:6a:c4:21:dd:9e:26:
35:6f:1c:ce:56:97:aa:a5:0e:9a:5d:41:9d:4e:2f:46:48:db:
71:13:ac:cb:1a:80:ef:55:cd:8a:e8:e7:32:cd:9e:2d:d7:60:
65:e6:0c:bc:a5:ab:b9:e6:a3:c8:14:d6:4f:17:d9:28:6f:96:
35:a4:40:95:67:73:c0:bb:47:d4:19:ae:90:41:ba:c0:0f:0b:
6d:3a:e7:43:4f:c7:cf:10:68:e4:3a:45:df:64:82:4f:8d:6c:
49:3f:5d:d5:60:0a:bf:ed:c2:d5:95:5f:9a:1e:59:01:43:06:
65:76:9a:31:bb:f8:b2:c2:df:d1:73:ef:14:ff:bf:ca:d6:ba:
7e:95:10:cc:dc:e8:56:4b:3d:15:10:00:f0:d6:d8:69:44:3b:
79:d3:ef:f0:03:12:f8:3f:50:f9:ec:d3:a1:e0:68:8e:65:23:
2e:57:d1:0e:3e:a3:67:fb:91:0d:13:da:5d:9a:67:c5:39:b5:
1b:fe:93:4c:6f:8c:b2:a3:08:93:2a:c6:8b:cb:f6:2f:6d:36:
6f:72:0c:99:ef:23:57:c4:f8:c2:2b:eb:12:09:1c:aa:6c:2a:
f1:3b:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org