Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/xjkqrITGIifK3Zw_Ua1EBrCYDl8.roa
File: xjkqrITGIifK3Zw_Ua1EBrCYDl8.roa (raw, json)
Hash identifier: JRC6KGecsNPr2N7dia3vMyOetmcXF5EjDfczMfmoBKA=
Subject key identifier: C6:39:2A:AC:84:C6:22:27:CA:DD:9C:3F:51:AD:44:06:B0:98:0E:5F
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05F6
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/xjkqrITGIifK3Zw_Ua1EBrCYDl8.roa
Signing time: Wed 14 Aug 2024 01:27:17 +0000
ROA not before: Wed 14 Aug 2024 01:27:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23852
IP address blocks: 124.175.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 14 01:27:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6392AAC84C62227CADD9C3F51AD4406B0980E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:c8:d1:b2:26:80:35:48:e2:13:c7:20:7e:
91:78:8d:a4:ed:7d:c3:16:b7:f4:4d:9a:53:63:9c:
b0:62:8f:4b:e6:52:ba:2c:f1:d0:a7:b6:d3:15:8f:
ee:8a:45:3e:0a:9f:bf:bf:47:13:86:36:e0:fd:ce:
b2:91:64:2c:f0:55:b8:f9:a2:75:14:00:c1:01:08:
ed:8d:ee:5d:a9:7c:30:52:c0:54:12:d2:10:08:7c:
18:82:fb:09:0c:f4:b9:79:88:54:3b:ec:42:5b:ce:
65:30:5f:55:cf:f5:65:70:6e:a6:09:26:e1:88:0a:
fe:b8:c9:05:cd:ad:33:37:3b:85:d5:34:dc:34:9c:
a5:0b:94:ca:97:2a:d6:bc:73:f6:9c:10:68:be:d0:
52:92:66:98:04:62:17:93:ad:23:26:38:4c:75:bb:
03:57:19:1d:35:6c:87:cb:f1:cb:21:8e:ad:b4:ab:
94:9e:35:8d:ab:2c:25:11:d6:76:0d:8e:a0:08:80:
bd:38:d4:fe:56:10:b2:1d:f1:a0:61:62:f5:8c:eb:
e1:6a:a0:1b:c8:ee:30:b6:44:f7:9c:0b:fb:04:ec:
5c:03:9c:ef:d2:e4:bd:ea:ff:e3:f4:bf:4e:e7:2c:
c7:8b:b4:bd:d1:db:02:00:00:73:08:4f:a1:40:88:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:2A:AC:84:C6:22:27:CA:DD:9C:3F:51:AD:44:06:B0:98:0E:5F
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/xjkqrITGIifK3Zw_Ua1EBrCYDl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.216.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:ee:f5:39:c6:a3:e0:29:e7:ae:b1:c9:4f:4f:52:70:47:f6:
dd:55:6f:59:7e:f7:0e:64:a1:ce:e9:f9:ea:9f:67:16:aa:26:
69:3f:33:c8:b9:17:14:92:45:c7:0a:5c:45:8d:54:dd:87:f2:
d9:db:79:f2:05:4f:26:05:62:64:26:db:9e:1b:9b:5c:71:63:
77:e9:20:6d:02:d7:27:a7:c9:fc:47:91:ea:0c:7d:43:a4:8e:
ff:2b:15:31:b8:5b:1e:60:4a:f7:89:01:42:a8:e2:38:79:bd:
1b:f8:9d:8c:5f:80:8a:b8:c1:82:f3:3a:f4:bc:b9:19:2b:46:
f1:6a:b9:74:34:d1:7a:ba:c8:ca:c3:e9:27:49:38:7f:a4:de:
00:0d:58:6e:03:73:5b:37:c0:b2:01:73:27:99:c8:6c:8d:c4:
17:54:a3:66:57:bf:80:12:53:4a:9b:eb:3c:48:a1:5c:c6:84:
b3:bb:b4:7c:66:38:63:f2:3a:72:51:7a:0d:b0:7c:33:da:47:
73:b5:f0:20:ac:f5:2f:14:f8:95:39:a4:e9:1d:24:2e:b5:a8:
93:ef:f9:f2:85:32:3d:46:40:e3:02:48:e6:f1:28:95:91:f0:
34:1a:1f:0f:93:77:88:7b:11:f4:b1:70:59:f6:bd:e1:83:e6:
6b:6f:ec:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org