Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/s60UmuJtduE_USqMmX2zpjwDvYc.roa
File: s60UmuJtduE_USqMmX2zpjwDvYc.roa (raw, json)
Hash identifier: MjhEXzxJgONywUFN2X0QXpVqANj4WM8XYmev6jiorK8=
Subject key identifier: B3:AD:14:9A:E2:6D:76:E1:3F:51:2A:8C:99:7D:B3:A6:3C:03:BD:87
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05DE
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/s60UmuJtduE_USqMmX2zpjwDvYc.roa
Signing time: Mon 12 Aug 2024 04:09:49 +0000
ROA not before: Mon 12 Aug 2024 04:09:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B3AD149AE26D76E13F512A8C997DB3A63C03BD87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:61:d5:1a:d7:43:3b:40:ec:2a:10:7a:42:
f1:b2:be:92:c1:72:34:2c:91:4d:36:b7:c6:b4:50:
4f:e6:3f:8c:5d:b4:46:94:58:28:82:25:c2:eb:8d:
67:77:9a:05:80:96:2f:53:9a:b8:71:2b:1c:16:33:
44:0f:39:b5:5c:10:83:1e:3e:e0:bb:d5:71:28:16:
dc:46:ed:59:81:70:ae:2d:87:1a:df:72:6a:39:c7:
e5:62:2d:82:55:4c:69:de:93:cd:4b:15:d2:e1:64:
87:7f:27:3d:6d:7c:c2:04:be:0e:f3:da:b4:e8:24:
fe:b4:84:08:e6:ec:28:ca:05:cd:a7:08:4e:86:29:
dd:dd:b3:bb:8d:04:39:62:3f:a8:5c:e9:54:67:ca:
e7:04:c2:06:1e:a0:62:d0:45:79:12:44:58:ab:88:
22:c6:07:12:56:cd:3e:67:96:cb:9b:dd:4a:b7:48:
3d:39:d5:e9:19:ae:23:61:cf:f8:39:25:dc:e2:93:
d0:f0:23:1d:9f:af:30:d0:37:e2:89:fa:73:85:9a:
68:ae:23:d0:01:3a:7d:dd:00:3d:96:00:49:b6:aa:
b4:a8:be:2d:6c:da:a7:b9:ea:16:17:d8:ff:8c:36:
45:1a:18:db:8d:a1:79:2d:e7:43:6c:33:d1:53:2c:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:14:9A:E2:6D:76:E1:3F:51:2A:8C:99:7D:B3:A6:3C:03:BD:87
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/s60UmuJtduE_USqMmX2zpjwDvYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.0.0/21
Signature Algorithm: sha256WithRSAEncryption
68:95:f2:cf:e3:4e:da:24:4d:72:3b:f6:44:2c:04:5d:98:4f:
70:03:50:c8:5d:9c:51:df:d6:75:c8:e3:d6:79:fa:04:1a:d2:
76:85:e1:7b:40:6b:78:67:d7:c5:b5:1c:1e:16:45:14:96:33:
4f:e7:14:8b:e3:a5:a9:0d:16:8a:82:55:11:f8:13:2c:5f:b0:
b4:a7:b2:4e:dc:1c:f6:76:ce:39:9c:eb:de:8a:39:3c:e0:c0:
07:db:44:6b:d5:bb:5e:46:71:e6:3a:6a:17:6c:0e:97:27:1f:
7d:bd:6f:3e:07:58:69:0f:41:b8:99:ae:d4:b2:2e:fb:f2:c0:
aa:69:b2:b0:f1:52:40:39:bf:49:a5:d8:ac:d8:1d:65:cf:62:
47:1a:26:12:32:6f:7d:a0:ae:a8:c4:0f:79:fc:0b:57:85:6e:
07:1a:fb:cf:f3:6b:b3:97:f4:cd:94:dd:13:45:6e:72:8f:fd:
2c:07:65:31:a4:5b:99:06:1f:27:70:69:76:0d:66:78:ba:61:
28:0e:96:47:d3:9a:1f:15:52:f8:8d:27:22:a6:aa:2d:e7:af:
c7:95:2a:06:f3:e8:ca:5d:56:88:8b:ee:81:75:55:b9:7c:60:
3c:bc:02:17:33:d6:21:c3:8c:86:75:5e:87:b4:0d:ad:24:d8:
0a:61:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org