Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/yph92knEgMWXz5SAl_V1FP1vtT8.roa
File: yph92knEgMWXz5SAl_V1FP1vtT8.roa (raw, json)
Hash identifier: /Fke7MZ5PNEauvbEwbTI9nuDSCOc5mGmwpC7XMHQrPY=
Subject key identifier: CA:98:7D:DA:49:C4:80:C5:97:CF:94:80:97:F5:75:14:FD:6F:B5:3F
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 05D6
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/yph92knEgMWXz5SAl_V1FP1vtT8.roa
Signing time: Mon 12 Aug 2024 04:09:46 +0000
ROA not before: Mon 12 Aug 2024 04:09:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 124.175.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 01:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 12 04:09:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA987DDA49C480C597CF948097F57514FD6FB53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:cc:04:e2:58:27:13:24:88:06:60:e7:0a:
b8:5e:a2:a4:18:95:8c:63:48:a8:c1:e5:c7:99:05:
4a:07:0f:b3:f2:9f:1f:9a:e2:0a:62:12:d2:c7:ee:
40:a5:5d:c8:4e:ba:21:6b:71:95:23:b1:9c:f2:b7:
46:84:0b:4f:e8:c6:76:fb:05:b7:12:4a:05:a5:a3:
f9:67:3a:9a:4c:49:a1:2e:3d:db:7e:cd:fc:91:89:
5e:67:b0:b1:b2:59:26:f5:d0:82:7f:9b:ec:98:e0:
44:72:28:d6:48:35:47:24:4e:7c:d9:d9:e2:79:5f:
60:85:a5:8f:46:06:c2:1d:c3:d6:00:a7:44:c1:93:
e0:52:26:4c:39:56:cb:51:3c:61:a5:5b:52:06:75:
88:6f:68:94:91:bc:54:5b:76:63:7d:b2:88:2f:91:
9c:32:d6:68:11:06:c8:ce:0c:f6:97:cc:76:6f:2d:
94:ec:02:93:61:40:0c:2f:de:59:23:2d:2e:be:ff:
33:79:3a:fd:c8:86:41:2b:df:6e:eb:89:04:ec:41:
cc:c4:29:39:16:7e:42:da:1f:1b:ab:97:16:92:0c:
56:94:f3:0b:57:e2:33:3b:b1:96:03:a5:1a:2f:36:
48:16:83:08:8c:45:a7:74:2b:23:8a:65:2e:20:ac:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:7D:DA:49:C4:80:C5:97:CF:94:80:97:F5:75:14:FD:6F:B5:3F
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/yph92knEgMWXz5SAl_V1FP1vtT8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.8.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:4e:e1:d8:90:ee:a8:a2:1f:5d:25:d7:a7:e3:eb:c9:8a:8c:
fa:6c:2d:3d:55:8d:45:73:ec:10:5f:0f:fd:d9:22:d1:41:c1:
ee:eb:4d:0d:8b:75:7f:25:d4:0e:9d:04:36:08:93:db:08:61:
64:ee:e1:33:dc:05:32:39:85:6f:c2:a6:0b:c4:a2:6f:71:af:
b1:4c:b0:f5:33:16:17:4e:29:f7:b3:43:f7:b0:1f:45:8c:25:
d0:70:a8:75:68:f5:db:df:d8:dc:0c:57:ed:36:59:b1:5e:ec:
99:e5:18:13:cd:78:e6:35:71:fc:6a:1a:7d:1a:06:40:d5:e8:
e8:1e:65:94:39:3e:7a:68:10:9c:2d:77:88:cf:e6:52:dc:11:
cd:00:73:4d:35:96:b1:b1:b2:7e:11:30:7f:3d:98:e2:6e:0d:
d4:b1:0d:5c:61:b4:a7:eb:2d:e3:ec:84:1f:0a:f5:c6:d1:95:
65:f1:93:3e:8f:69:d4:1a:c6:d4:2d:62:cd:bf:e1:6a:66:73:
79:1f:d8:d4:f6:6d:99:de:d1:d7:f7:b9:12:d6:34:d5:01:46:
47:b8:bc:5c:5a:28:1a:29:f4:75:92:a8:27:a3:f4:d7:92:bb:
1e:f6:5b:22:15:b2:c0:61:39:2a:3c:e0:25:ba:f4:c7:f2:8a:
af:37:e0:49
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MTIw
NDA5NDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENBOTg3RERBNDlDNDgw
QzU5N0NGOTQ4MDk3RjU3NTE0RkQ2RkI1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOc8wE4lgnEySIBmDnCrheoqQYlYxjSKjB5ceZBUoHD7Pynx+a
4gpiEtLH7kClXchOuiFrcZUjsZzyt0aEC0/oxnb7BbcSSgWlo/lnOppMSaEuPdt+
zfyRiV5nsLGyWSb10IJ/m+yY4ERyKNZINUckTnzZ2eJ5X2CFpY9GBsIdw9YAp0TB
k+BSJkw5VstRPGGlW1IGdYhvaJSRvFRbdmN9sogvkZwy1mgRBsjODPaXzHZvLZTs
ApNhQAwv3lkjLS6+/zN5Ov3IhkEr327riQTsQczEKTkWfkLaHxurlxaSDFaU8wtX
4jM7sZYDpRovNkgWgwiMRad0KyOKZS4grMqPAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUyph92knEgMWXz5SAl/V1FP1vtT8wHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYveXBoOTJrbkVnTVdYejVTQWxf
VjFGUDF2dFQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yv
CDANBgkqhkiG9w0BAQsFAAOCAQEA0E7h2JDuqKIfXSXXp+PryYqM+mwtPVWNRXPs
EF8P/dki0UHB7utNDYt1fyXUDp0ENgiT2whhZO7hM9wFMjmFb8KmC8Sib3GvsUyw
9TMWF04p97ND97AfRYwl0HCodWj129/Y3AxX7TZZsV7smeUYE8145jVx/GoafRoG
QNXo6B5llDk+emgQnC13iM/mUtwRzQBzTTWWsbGyfhEwfz2Y4m4N1LENXGG0p+st
4+yEHwr1xtGVZfGTPo9p1BrG1C1izb/hamZzeR/Y1PZtmd7R1/e5EtY01QFGR7i8
XFooGin0dZKoJ6P015K7HvZbIhWywGE5KjzgJbr0x/KKrzfgSQ==
-----END CERTIFICATE-----
Generated at Wed Sep 4 03:33:39 2024 by rpki-client on console-ams.rpki-client.org