Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/pm1HR5nMNAwDiAdyAX-5L6KZ_jE.roa
File: pm1HR5nMNAwDiAdyAX-5L6KZ_jE.roa (raw, json)
Hash identifier: Oz1UM7EGWJJMfqRsKsxsqVSpz4kJVkFT11qrdj4j7Yg=
Subject key identifier: A6:6D:47:47:99:CC:34:0C:03:88:07:72:01:7F:B9:2F:A2:99:FE:31
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 031A
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/pm1HR5nMNAwDiAdyAX-5L6KZ_jE.roa
Signing time: Tue 02 Apr 2024 13:17:43 +0000
ROA not before: Tue 02 Apr 2024 13:17:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.64.0/18 maxlen: 24
124.175.160.0/21 maxlen: 24
124.175.168.0/21 maxlen: 24
124.175.176.0/21 maxlen: 24
124.175.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 09:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Apr 2 13:17:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A66D474799CC340C03880772017FB92FA299FE31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:60:58:a8:36:e7:66:0e:1a:00:6f:37:b8:
81:9d:3f:1a:5c:f4:0e:34:7f:b0:c3:d6:76:1f:93:
73:69:f4:36:36:ef:04:5f:00:06:79:f4:65:df:5f:
ce:82:8d:57:2e:a5:27:14:b3:1d:0c:c4:34:32:1c:
27:39:4a:0f:6a:84:5a:df:0d:ae:fc:b0:62:7d:98:
90:f7:c1:dc:21:ea:9a:bf:a5:f2:3c:29:eb:e2:cd:
25:70:a3:ec:6e:5b:e0:8a:7c:69:8e:cf:16:98:7e:
aa:6f:e8:bc:d8:97:0f:2e:05:0d:36:55:2d:bf:c7:
c2:28:17:d7:78:c6:7f:9e:1b:fc:bd:bf:c6:4f:4c:
b9:0d:09:da:06:b0:9b:52:8c:78:85:a5:b4:55:40:
a4:e6:a8:ad:76:88:f6:05:be:73:1c:2f:29:a7:9b:
73:9a:22:c3:c2:f5:1f:6e:f9:66:68:7a:93:e8:74:
6e:ff:e3:96:d8:8f:21:d4:bc:32:5e:cf:3e:1d:51:
9f:fe:7c:21:ee:7f:86:29:f4:ba:40:98:b9:a0:49:
d5:a4:f9:33:a0:92:44:ce:9a:83:9b:0f:d2:de:96:
a4:e7:1c:b2:8e:41:8c:fa:82:f4:7e:ff:16:bf:ed:
e1:dc:b2:dd:75:fb:80:43:f8:ae:e7:77:8b:ac:0a:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6D:47:47:99:CC:34:0C:03:88:07:72:01:7F:B9:2F:A2:99:FE:31
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/pm1HR5nMNAwDiAdyAX-5L6KZ_jE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.64.0/18
124.175.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:23:ee:35:d8:65:6d:b2:32:a2:b1:5e:fe:80:8b:46:6a:b0:
ad:ca:06:fb:66:cf:ba:9d:38:9c:0f:e9:85:43:fb:0f:96:63:
f9:77:a1:c1:31:0f:da:45:f0:24:c9:36:66:9f:c6:85:a3:54:
b2:0d:24:79:e8:18:0e:a6:8b:c9:f0:b8:6b:3b:bc:de:b7:65:
b2:9d:21:19:b4:94:f7:6b:37:fd:ba:1a:33:dd:2c:1d:5c:44:
f5:bd:11:5d:0b:4c:8d:07:d5:86:d9:ff:c1:bf:4d:e0:aa:ae:
df:3d:35:7b:59:e7:de:d2:cb:ea:20:f7:3c:59:83:87:8e:46:
3b:08:b2:8b:cf:93:0d:33:63:32:93:c9:aa:6f:4d:9f:96:59:
51:52:f7:8d:95:41:d7:c1:26:bb:5a:01:29:28:8c:11:99:b9:
aa:a2:99:47:a0:0a:8e:82:5a:5d:75:86:af:5d:ed:73:ac:43:
6d:c7:b2:3f:f5:41:0c:6a:11:44:a0:a3:88:9f:12:dd:36:e3:
6b:bd:8d:8e:c8:21:99:f0:08:ed:5f:55:eb:aa:10:66:71:78:
c5:0c:36:8d:42:ef:4f:a9:81:c5:9a:d9:b2:3c:dc:a8:3f:a6:
eb:b0:6e:79:33:c7:40:9a:01:b2:d8:3a:43:af:28:06:8b:78:
3a:c4:ba:5a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA0MDIx
MzE3NDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE2NkQ0NzQ3OTlDQzM0
MEMwMzg4MDc3MjAxN0ZCOTJGQTI5OUZFMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZi2BYqDbnZg4aAG83uIGdPxpc9A40f7DD1nYfk3Np9DY27wRf
AAZ59GXfX86CjVcupScUsx0MxDQyHCc5Sg9qhFrfDa78sGJ9mJD3wdwh6pq/pfI8
KevizSVwo+xuW+CKfGmOzxaYfqpv6LzYlw8uBQ02VS2/x8IoF9d4xn+eG/y9v8ZP
TLkNCdoGsJtSjHiFpbRVQKTmqK12iPYFvnMcLymnm3OaIsPC9R9u+WZoepPodG7/
45bYjyHUvDJezz4dUZ/+fCHuf4Yp9LpAmLmgSdWk+TOgkkTOmoObD9LelqTnHLKO
QYz6gvR+/xa/7eHcst11+4BD+K7nd4usCjd5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUpm1HR5nMNAwDiAdyAX+5L6KZ/jEwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvcG0xSFI1bk1OQXdEaUFkeUFY
LTVMNktaX2pFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBnyv
QAMEBXyvoDANBgkqhkiG9w0BAQsFAAOCAQEAWyPuNdhlbbIyorFe/oCLRmqwrcoG
+2bPup04nA/phUP7D5Zj+XehwTEP2kXwJMk2Zp/GhaNUsg0keegYDqaLyfC4azu8
3rdlsp0hGbSU92s3/boaM90sHVxE9b0RXQtMjQfVhtn/wb9N4Kqu3z01e1nn3tLL
6iD3PFmDh45GOwiyi8+TDTNjMpPJqm9Nn5ZZUVL3jZVB18Emu1oBKSiMEZm5qqKZ
R6AKjoJaXXWGr13tc6xDbceyP/VBDGoRRKCjiJ8S3Tbja72NjsghmfAI7V9V66oQ
ZnF4xQw2jULvT6mBxZrZsjzcqD+m67BueTPHQJoBstg6Q68oBot4OsS6Wg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 14:34:12 2024 by rpki-client on console-ams.rpki-client.org