Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/w5z2KhmWpht7BObRfCCDq7lKyJQ.roa
File: w5z2KhmWpht7BObRfCCDq7lKyJQ.roa (raw, json)
Hash identifier: Xc7/5YcH0pe2npWjsR2cLfisJRZiMBw6ttDFrfWUyBk=
Subject key identifier: C3:9C:F6:2A:19:96:A6:1B:7B:04:E6:D1:7C:20:83:AB:B9:4A:C8:94
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05D4
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/w5z2KhmWpht7BObRfCCDq7lKyJQ.roa
Signing time: Mon 12 Aug 2024 04:09:44 +0000
ROA not before: Mon 12 Aug 2024 04:09:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C39CF62A1996A61B7B04E6D17C2083ABB94AC894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:6a:e4:86:68:7d:f3:78:c3:8f:c0:bb:60:
44:f0:33:19:d9:c1:3b:9e:6e:bd:0f:9a:2f:f0:46:
9c:2d:d9:b7:9a:de:18:c7:e6:85:53:a4:1d:83:61:
52:4f:83:8b:00:00:d4:48:ba:63:b5:57:b6:0d:0a:
1a:83:35:10:2c:74:b4:7a:01:c8:65:f9:05:37:06:
6d:fb:13:e0:b4:45:89:ae:e2:30:5c:4f:fc:0c:8f:
2b:56:3a:c5:56:13:44:22:f8:e5:0e:8f:54:47:5b:
0e:0c:8e:6f:95:6d:4a:f3:64:b9:28:01:c8:0b:66:
08:a8:98:41:c4:86:e0:c5:f2:6e:f3:f8:45:0f:c3:
99:cd:0d:0f:62:94:4b:7c:36:e4:4b:a0:02:be:62:
86:b4:4c:9f:13:ac:6b:18:8a:f6:30:65:a1:3d:e5:
f4:90:cf:93:91:6d:b9:98:41:25:bf:0c:95:69:90:
b1:02:e2:53:1d:84:7e:6a:d1:49:78:0e:a3:95:2b:
6c:ea:73:43:d1:cf:ee:7d:1a:22:64:a8:28:ee:87:
22:e7:56:ac:f1:20:58:f3:42:da:3e:ca:ca:5e:cf:
d2:ad:8e:3a:b0:83:38:3d:6f:46:8c:c2:2a:80:aa:
2e:4c:8f:5c:31:24:51:5d:62:fe:e9:15:1c:c0:be:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:F6:2A:19:96:A6:1B:7B:04:E6:D1:7C:20:83:AB:B9:4A:C8:94
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/w5z2KhmWpht7BObRfCCDq7lKyJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.96.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:c2:59:7b:63:00:da:c8:40:53:4c:56:6f:c0:7c:45:dd:01:
b0:1a:57:96:11:66:c3:8e:98:e6:8e:47:e5:d1:2a:f4:72:76:
7f:cd:a3:c1:12:09:fe:fd:d3:70:a2:2d:84:04:69:0c:26:07:
f0:ac:ac:1f:25:ac:af:f0:a0:3a:8b:f1:c9:45:0d:ba:22:dc:
c1:71:8e:b0:dd:44:22:bc:89:45:36:8e:d6:c7:e1:be:f5:ed:
3d:93:55:ad:b8:5f:3f:a5:f6:84:de:3f:e0:c3:29:f1:9e:cb:
62:a1:23:68:05:3f:19:5a:33:9a:87:1a:f3:33:47:3b:5b:f7:
3f:90:44:a4:fe:1a:dc:5d:0c:3b:61:57:6c:1c:ca:94:a3:3d:
eb:d9:46:7a:55:3f:fa:c6:17:2e:25:4d:d0:1c:0a:ce:84:51:
c1:72:5e:aa:37:3a:0d:9c:8c:75:e6:d2:a4:16:18:f4:a5:20:
ce:ae:7c:a9:c0:01:ab:27:5f:dc:2d:7e:cc:7f:1d:03:93:7b:
86:60:e2:63:9e:60:47:c9:03:a9:1e:50:d7:5d:ee:11:fa:80:
1c:51:da:17:f9:9f:cf:d9:d8:f9:4e:02:4f:2e:5f:ba:88:96:
07:d7:21:7e:86:77:4e:e2:fd:a2:b7:0e:5b:92:d2:75:a4:71:
56:bb:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:33:39 2024 by rpki-client on console-ams.rpki-client.org