Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/nKeCkNbrWZMsjNlMbFm5MYgNWgg.roa
File: nKeCkNbrWZMsjNlMbFm5MYgNWgg.roa (raw, json)
Hash identifier: qrOaiUKsezzKDpCgXjnDt1iNnjJfo1gflsYzEnV9SpU=
Subject key identifier: 9C:A7:82:90:D6:EB:59:93:2C:8C:D9:4C:6C:59:B9:31:88:0D:5A:08
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05DB
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/nKeCkNbrWZMsjNlMbFm5MYgNWgg.roa
Signing time: Mon 12 Aug 2024 04:09:48 +0000
ROA not before: Mon 12 Aug 2024 04:09:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9CA78290D6EB59932C8CD94C6C59B931880D5A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:85:f8:38:07:19:b6:9f:b2:81:79:58:53:
fa:f9:69:e8:08:40:bd:81:54:91:c6:51:0c:4d:1b:
7e:10:1e:81:2a:39:0b:f4:1b:ab:f1:8a:bb:bb:ed:
74:d5:51:76:29:60:12:c4:b7:32:10:94:fa:e2:04:
28:85:db:61:15:50:86:6b:f3:56:a6:44:80:7b:84:
5f:6c:f5:f7:1c:33:cd:7c:ff:a1:7d:4f:24:6d:fe:
21:59:d0:99:03:4b:51:e6:91:ac:63:00:75:69:77:
da:f7:85:ae:6e:53:aa:74:f3:8a:d7:bd:90:22:79:
b7:92:c8:d0:f8:3e:e6:72:70:25:53:82:db:ef:1e:
b3:0d:1e:68:35:e2:98:a7:21:a1:38:98:5d:91:a8:
cc:00:24:0b:7d:04:86:a2:9c:67:bc:15:d7:74:4c:
cb:f6:0f:9e:15:1b:09:ea:fb:d9:3e:e1:1e:d5:5c:
23:83:ce:22:c5:74:c6:97:cd:80:bd:68:84:ce:42:
41:00:31:c3:d2:1a:55:c2:e0:82:72:ce:1f:75:ed:
94:04:63:f1:2f:c8:8c:c6:47:92:c5:f9:cc:e4:34:
30:55:1c:3b:30:6d:94:21:ec:f0:80:e1:85:04:3b:
be:9f:ef:23:a7:e7:f7:f0:12:7b:03:63:0e:ac:8d:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:82:90:D6:EB:59:93:2C:8C:D9:4C:6C:59:B9:31:88:0D:5A:08
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/nKeCkNbrWZMsjNlMbFm5MYgNWgg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.120.0/21
Signature Algorithm: sha256WithRSAEncryption
33:f0:f8:15:6b:e4:79:cd:1d:76:22:49:2e:04:09:af:36:e2:
25:89:8a:3a:29:8b:34:ff:e9:73:e5:ff:b0:f5:81:8e:bf:68:
79:19:f5:00:2a:63:21:50:c4:d6:91:c9:13:33:53:7a:ee:92:
84:7b:58:d4:52:b9:10:a4:f6:6f:fa:3a:68:eb:d9:6c:13:e8:
cf:2c:97:0e:41:0e:dd:b7:58:32:a2:8f:78:26:96:b9:59:0a:
4e:97:9d:ad:dc:4f:55:eb:93:13:1a:e8:f4:7d:56:d3:63:70:
12:72:d4:11:89:50:50:7c:46:4b:27:b4:e3:f1:76:01:59:d1:
8b:d6:38:24:89:62:40:d1:6f:76:a3:c3:90:a3:a1:f6:74:24:
ef:8f:9f:42:61:02:80:44:a6:94:df:56:14:84:db:05:2f:21:
2c:39:b0:cb:26:d0:29:d2:2e:cc:6b:fa:81:8d:78:b5:88:68:
13:19:dd:42:d5:94:da:95:38:64:9e:fa:c8:fa:9c:d5:e2:6d:
b2:8e:ca:c5:9d:27:bf:d8:aa:09:48:1e:77:fd:fe:5c:74:92:
fd:f0:83:62:32:71:83:38:22:87:77:be:a1:18:45:48:cd:a0:
9b:8c:12:d8:95:5e:5a:e3:38:a4:2b:2f:6c:8e:bd:1b:08:68:
c6:17:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:33:39 2024 by rpki-client on console-ams.rpki-client.org