Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa
File: tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa (raw, json)
Hash identifier: XBsiZ0ZLDy/3Ri4t8kUhCgK0XEMTcyLtnhPX1N9VJ2g=
Subject key identifier: B4:A2:34:DC:AB:3C:3D:DF:55:18:85:5D:32:3D:C6:5A:1D:E2:D4:FC
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 039E
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa
Signing time: Thu 25 Apr 2024 13:58:45 +0000
ROA not before: Thu 25 Apr 2024 13:58:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 124.175.208.0/21 maxlen: 24
124.175.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 02:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Apr 25 13:58:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B4A234DCAB3C3DDF5518855D323DC65A1DE2D4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:4b:e0:fb:e1:e2:55:3b:10:3f:e5:6d:46:
58:91:38:eb:d0:78:ae:10:d9:de:f4:f8:8e:ef:a7:
5e:82:d9:e6:36:1b:37:dd:08:db:2d:9c:ef:a2:46:
3e:d3:04:96:4d:10:6d:e7:41:e3:29:35:a9:c4:42:
7b:ef:06:a0:4e:56:41:db:cf:c5:6d:99:67:60:a6:
ab:f6:55:57:b3:8d:ea:0e:77:0b:52:04:3c:3c:50:
44:93:4f:e2:a6:78:2a:89:2b:9e:ab:1d:0a:9c:f4:
4f:c8:bb:37:b0:bc:ee:b4:67:21:9a:19:5b:2e:33:
35:46:e7:5d:aa:95:94:55:94:d2:cf:e2:7b:88:ab:
ec:55:95:0a:c4:4a:f0:19:5e:bc:5e:b7:03:19:de:
91:ef:5c:8b:a8:28:7d:b6:59:10:07:51:d4:e5:db:
cd:8c:df:df:6b:02:8f:ff:1a:29:b9:b8:fa:33:9f:
22:4c:c7:5f:4a:1f:60:d0:3a:1a:d7:f9:57:c5:ce:
9b:66:8b:87:ad:91:9a:73:68:52:5a:0a:30:2d:1c:
92:c3:8e:0f:3c:e4:ef:7e:6a:9c:2b:5c:c5:05:47:
1f:fa:e4:a1:61:e1:02:5b:5e:3e:01:38:11:09:e1:
55:d6:11:a1:48:18:57:57:f7:0d:bf:b6:8c:c1:c6:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:34:DC:AB:3C:3D:DF:55:18:85:5D:32:3D:C6:5A:1D:E2:D4:FC
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/tKI03Ks8Pd9VGIVdMj3GWh3i1Pw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.208.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:1d:d5:5f:82:b0:53:97:86:a1:7e:23:2d:5a:d6:ec:ff:2a:
6e:d5:37:47:cf:e6:c9:14:41:1b:65:2b:2e:97:8d:49:ba:d9:
9e:1b:89:e0:69:bb:9f:17:b0:40:9f:c5:e1:ce:ec:9e:6b:96:
b3:79:32:a8:c1:c3:7d:ce:c7:0d:05:9a:af:a2:64:f1:39:67:
ae:65:c5:66:fe:3c:4c:75:83:5a:2c:26:d0:34:f6:60:10:b1:
56:9a:8d:97:16:f7:ff:26:10:ce:e1:04:e0:88:38:8a:9f:bd:
24:ff:5b:d7:24:75:fb:08:e9:9e:7e:93:67:5b:86:81:9a:22:
ea:3e:e7:95:99:6d:e5:e1:d1:58:73:3f:e5:ed:36:5a:78:c7:
4b:77:07:cf:0e:ba:56:7a:44:2b:71:14:85:8e:bd:08:7e:43:
11:1c:bc:40:c8:5a:77:a2:9a:c8:3b:1e:2f:cb:63:a7:91:50:
15:8a:0d:c5:6b:1b:a6:70:2b:81:10:55:35:42:fa:3b:ec:80:
43:54:64:73:b7:b6:ca:91:61:a1:4d:e9:f7:0f:ab:9f:6f:3a:
4e:ce:e9:15:3a:d7:6a:f9:71:e1:97:58:18:63:a0:58:40:e7:
b0:57:fd:85:a9:e8:7d:35:6f:65:a8:49:9b:51:59:7b:17:db:
7d:10:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:20:37 2024 by rpki-client on console-fra.rpki-client.org