Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/yhldDJPhBo6jl1RVyszrARxWozE.roa
File: yhldDJPhBo6jl1RVyszrARxWozE.roa (raw, json)
Hash identifier: ZoaVVX2piL+0ZUE/2ht/cvTlz5mLi8G5QhS+RcPk9lQ=
Subject key identifier: CA:19:5D:0C:93:E1:06:8E:A3:97:54:55:CA:CC:EB:01:1C:56:A3:31
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05CE
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/yhldDJPhBo6jl1RVyszrARxWozE.roa
Signing time: Mon 12 Aug 2024 04:09:43 +0000
ROA not before: Mon 12 Aug 2024 04:09:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136897
IP address blocks: 124.175.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA195D0C93E1068EA3975455CACCEB011C56A331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:c4:73:57:41:84:99:05:59:b9:43:ef:67:
aa:9a:9f:a3:e4:a4:a7:0d:37:0f:36:cb:59:a2:d7:
38:86:dc:fd:8e:eb:fe:6f:0f:3c:24:d1:fb:89:a8:
62:22:66:dd:5c:1d:eb:d2:0d:fd:73:8d:9b:99:0f:
5d:de:86:7a:b9:d3:a6:93:ea:a4:c9:4f:f7:e5:65:
f8:19:ed:57:86:ec:28:5e:69:ad:d0:4b:72:12:fd:
f7:93:17:78:c3:39:57:53:14:ba:22:1e:a4:80:d2:
c4:e6:cc:64:28:11:ae:0f:f6:9e:d3:05:e1:7a:cb:
34:75:56:61:19:20:8a:97:f7:0d:37:c3:0f:0f:43:
85:45:3b:8a:07:b9:06:fe:3a:61:bc:c4:a2:1d:74:
53:cc:5b:2b:25:7b:a7:69:bd:d3:6f:b2:f4:45:c9:
ef:9f:7d:25:e1:f1:bd:fb:46:96:52:aa:ce:ad:00:
4e:ff:a5:13:22:77:58:8a:23:50:80:04:80:05:ac:
ff:7f:41:85:8c:50:e2:0a:dd:48:22:7c:81:03:7f:
2b:25:02:29:6f:ce:9b:d1:24:a7:c9:cc:37:5b:c1:
07:cd:25:d1:99:dc:1b:4b:6f:67:75:74:cf:a7:6d:
4e:c9:87:7d:46:3f:21:92:7e:20:10:52:c2:ac:58:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:5D:0C:93:E1:06:8E:A3:97:54:55:CA:CC:EB:01:1C:56:A3:31
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/yhldDJPhBo6jl1RVyszrARxWozE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:60:f6:92:29:10:b5:4e:60:11:67:90:df:ec:28:ed:dd:be:
c9:f0:90:66:e4:63:91:10:61:ae:7e:fa:62:74:c1:9d:e9:6b:
62:b4:63:02:eb:e9:94:11:bd:8a:11:e2:d1:be:c4:5b:ff:d0:
46:4d:37:31:39:c1:3b:5d:1f:ae:a6:ee:f6:cd:be:9b:31:c0:
3a:19:09:8e:b8:11:97:91:55:34:de:95:94:06:9e:a9:be:e6:
c9:6f:95:3c:70:52:ab:eb:23:7a:17:56:73:13:59:10:28:3a:
b8:df:3a:b7:b3:f9:94:2a:c4:3d:3a:4c:3d:c8:be:8c:0f:0a:
2f:9d:df:ad:fb:c8:9f:7f:f5:ac:c8:8d:6f:df:85:de:04:41:
20:34:d1:ba:b9:be:d7:0f:dc:5f:11:c1:c9:f0:ab:b3:28:1b:
23:35:8d:31:76:b2:92:3e:40:13:d1:e8:f3:f8:16:3d:4c:5c:
11:f0:23:e5:ab:48:12:7f:62:d2:4d:8f:8e:6a:b4:48:cb:92:
e4:7a:66:0c:76:39:b7:4a:92:27:11:89:da:79:a5:88:85:e8:
d5:55:61:69:1a:9f:ad:98:ff:8f:18:58:c5:1e:4f:52:d5:a7:
e7:77:cd:23:c4:41:eb:4f:e4:95:56:00:4e:9a:25:61:53:69:
ac:65:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org