Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/NA2S6vy8jIu7Jxj3d3kfFbbiWJU.roa
File: NA2S6vy8jIu7Jxj3d3kfFbbiWJU.roa (raw, json)
Hash identifier: e2Fan1zP5nWeEd4dQoDXz7WLJ/By6cvfc2bpj9fdx1Q=
Subject key identifier: 34:0D:92:EA:FC:BC:8C:8B:BB:27:18:F7:77:79:1F:15:B6:E2:58:95
Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Certificate serial: 06D1
Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/NA2S6vy8jIu7Jxj3d3kfFbbiWJU.roa
Signing time: Tue 07 Nov 2023 09:16:24 +0000
ROA not before: Tue 07 Nov 2023 09:16:24 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 9807
IP address blocks: 219.235.128.0/21 maxlen: 21
219.235.136.0/21 maxlen: 21
219.235.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Validity
Not Before: Nov 7 09:16:24 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=340D92EAFCBC8C8BBB2718F777791F15B6E25895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:a9:b8:d0:7f:3b:86:18:87:2e:27:85:6c:
0a:58:07:2d:33:0f:77:db:15:5c:94:67:7d:46:27:
2c:34:6b:d1:96:68:87:88:16:3a:8f:09:8a:dc:a3:
2c:46:fc:d3:2a:f3:ab:4d:ea:81:fe:04:50:72:ca:
d4:bc:c1:03:b1:c6:cc:66:d1:e4:d5:42:f6:84:da:
98:bf:13:a8:b2:3b:cd:45:2a:f1:4a:a2:ee:55:0a:
b5:09:db:f2:66:86:cb:eb:60:17:1e:8d:38:d2:c8:
e3:f5:1c:b7:15:67:28:64:13:ea:8d:b9:75:08:42:
e9:ed:af:41:ab:45:e2:d2:34:cd:8d:85:ef:14:88:
e4:b7:4d:70:84:b3:32:9d:be:db:dc:eb:ac:7d:86:
a4:d1:83:cf:60:81:86:55:62:9a:4d:11:55:21:71:
c9:7c:8b:ce:26:49:96:aa:07:13:a7:3d:cc:0b:b0:
7a:11:4a:bb:ed:68:5f:f3:a3:cd:41:4d:0d:52:89:
0a:64:30:35:21:c8:4d:10:b9:39:15:b0:bc:27:8d:
17:63:3c:3d:37:29:75:04:7a:5b:a8:1a:fc:de:30:
b4:55:c1:1e:50:e5:04:48:26:58:b2:90:1f:d3:76:
c6:7e:5a:89:73:80:35:ff:41:88:b4:cc:1b:ad:07:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:92:EA:FC:BC:8C:8B:BB:27:18:F7:77:79:1F:15:B6:E2:58:95
X509v3 Authority Key Identifier:
keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/NA2S6vy8jIu7Jxj3d3kfFbbiWJU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.235.128.0-219.235.151.255
Signature Algorithm: sha256WithRSAEncryption
4c:9e:37:af:6c:b0:39:c0:54:4f:c9:18:4b:48:a2:c0:0f:ad:
d2:06:1f:80:3e:21:0b:18:94:32:b4:d2:5f:8a:6b:04:06:30:
c7:9c:f0:d5:47:13:2b:ae:2a:2a:87:0f:5d:9f:91:2b:bc:61:
8f:c9:48:8e:c1:d1:c3:f0:4c:25:a6:fa:a4:23:bd:d4:c1:9c:
80:03:82:ef:bd:81:82:b1:5e:31:e0:45:83:66:60:ce:a5:7e:
ec:9c:b9:a2:2e:bc:e1:25:c7:f4:a7:7e:cc:9d:44:e6:07:78:
e5:7f:3f:e0:1d:90:d3:c4:31:7f:e7:d3:6c:3b:45:9d:58:1a:
76:3b:eb:b8:12:b5:c9:dd:54:06:5b:b6:8b:d7:cf:c2:f1:a9:
d5:ca:e0:a0:89:4e:31:f8:24:fc:78:e2:a9:f4:0b:6d:57:da:
64:7f:8c:b2:3b:6b:e8:a0:fa:5b:b1:75:7a:4b:57:e0:3d:1f:
0c:13:65:1c:80:85:48:e0:bf:af:ec:a0:0b:ad:36:f1:9b:af:
20:54:2e:54:de:08:bd:0b:97:a8:66:45:18:c2:dd:fd:af:08:
6b:94:b0:9a:f7:7e:36:e8:b7:a4:d0:5a:f5:38:f0:2a:30:5e:
30:4a:ea:e9:16:83:af:67:89:f7:8a:09:ff:65:85:29:fd:1e:
50:f0:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org