Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/jS_QdnNu8zu9MzEPODkQ1ux-QaU.roa
File: jS_QdnNu8zu9MzEPODkQ1ux-QaU.roa (raw, json)
Hash identifier: tRWQIt1Oz8owSbVhZZO7wXSyWtlAsUegOBN7r3naaFY=
Subject key identifier: 8D:2F:D0:76:73:6E:F3:3B:BD:33:31:0F:38:39:10:D6:EC:7E:41:A5
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05DF
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/jS_QdnNu8zu9MzEPODkQ1ux-QaU.roa
Signing time: Mon 12 Aug 2024 04:09:49 +0000
ROA not before: Mon 12 Aug 2024 04:09:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136897
IP address blocks: 124.175.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8D2FD076736EF33BBD33310F383910D6EC7E41A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:48:46:dc:22:5e:7d:44:85:e3:25:be:a0:
87:cb:ca:a6:f9:7b:49:e2:19:19:4c:9b:34:fd:11:
33:e0:6b:75:a3:3d:a7:d2:ef:18:25:c7:90:53:3f:
d1:d6:6d:ae:b9:72:a7:8c:58:e6:83:a1:52:65:ce:
d3:11:cb:04:20:ee:e9:d2:d8:69:28:39:bf:40:0a:
8e:f6:3c:f6:ef:34:3c:36:d1:e0:03:85:a0:f6:3d:
99:d9:09:40:f2:bb:37:1b:df:2d:6d:9e:e8:37:4c:
4d:6e:91:69:ea:af:3c:d9:67:66:b1:43:06:56:36:
45:39:8e:3e:eb:86:53:72:c7:50:9b:bf:2a:04:a0:
7a:3d:91:79:24:48:fe:ea:f3:ff:da:67:41:34:da:
f3:5b:97:58:00:b5:a4:c4:4f:74:71:94:c4:56:8a:
d6:00:83:3a:3a:b0:32:d8:4c:f5:e0:53:b9:58:e8:
ad:52:10:63:01:46:21:75:82:bc:96:16:fe:86:ca:
20:45:f5:df:cd:74:5d:9d:58:8e:55:7f:14:ad:df:
e0:b3:3a:be:b9:46:5f:03:e1:a5:c4:af:96:3c:20:
ee:19:c7:f3:f9:96:ff:78:ee:dc:90:e8:f8:8b:01:
26:bf:21:9d:60:97:51:e8:60:70:0c:a9:f5:01:7d:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:D0:76:73:6E:F3:3B:BD:33:31:0F:38:39:10:D6:EC:7E:41:A5
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/jS_QdnNu8zu9MzEPODkQ1ux-QaU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.128.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:66:da:47:3d:ab:4c:2e:a1:ac:48:d0:c6:9c:8f:af:39:6f:
3e:a6:ff:6d:3c:4a:55:42:5c:dd:b3:26:c4:72:35:bb:46:33:
36:e1:77:cf:2a:84:9b:ab:57:2f:37:e7:ee:ef:18:9b:49:89:
87:cc:86:e1:2e:ed:80:1f:f8:df:47:80:c9:8d:d5:d3:32:db:
81:56:d4:f2:44:d7:2e:d9:bf:a8:25:96:47:99:6d:78:f2:b2:
5d:af:ae:6e:11:df:33:e1:a9:7e:61:44:cd:ec:8a:9b:7d:3c:
2f:2d:f5:29:d4:4b:21:7f:4b:d2:4c:f8:a0:f7:3e:4a:10:8c:
15:d9:fb:81:be:6c:63:cd:e0:62:22:a4:d5:05:a6:e5:ac:51:
e1:33:e2:c7:56:7a:03:78:02:f8:89:35:e5:80:c7:05:eb:3b:
5a:fa:1e:91:da:68:0e:15:8a:9d:98:2d:75:95:b8:5c:d4:e1:
fa:70:da:03:e0:82:75:6e:34:a6:2e:57:28:9d:26:41:ee:fe:
09:f3:6f:10:41:57:84:9a:25:80:10:c9:6f:5d:13:7d:25:77:
0a:ab:70:11:cc:b9:b5:d4:da:c2:c4:0c:a5:ab:a4:7c:d0:53:
d1:fa:ae:da:07:ca:df:45:4b:dc:e0:3c:99:69:6b:3d:29:fc:
03:11:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:33:39 2024 by rpki-client on console-ams.rpki-client.org