Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1407/LE4gpB402FCvwwCWxXV1-KJuJVM.roa
File: LE4gpB402FCvwwCWxXV1-KJuJVM.roa (raw, json)
Hash identifier: vVivh+EcV8wVsILoVM+GX71Kyfj1f0ZA18KlSIWsWwc=
Subject key identifier: 2C:4E:20:A4:1E:34:D8:50:AF:C3:00:96:C5:75:75:F8:A2:6E:25:53
Certificate issuer: /CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Certificate serial: 15E6
Authority key identifier: 5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/LE4gpB402FCvwwCWxXV1-KJuJVM.roa
Signing time: Wed 13 Mar 2024 01:22:13 +0000
ROA not before: Wed 13 Mar 2024 01:22:13 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 134700
IP address blocks: 182.50.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5606 (0x15e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Validity
Not Before: Mar 13 01:22:13 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=2C4E20A41E34D850AFC30096C57575F8A26E2553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:da:49:49:dc:97:b2:b2:0e:ff:f4:62:7d:
8f:6f:c3:1a:01:b9:a6:77:cb:51:e9:0a:56:b8:0a:
62:da:aa:34:f8:a2:99:91:24:93:24:52:99:7a:fd:
16:93:3b:d8:7e:39:19:d6:78:d4:d6:45:43:8e:48:
77:07:aa:ad:b5:2e:f5:0f:98:a1:33:80:7c:94:1e:
99:1b:e2:c9:14:d3:38:6e:ad:e3:0a:c3:a5:7a:df:
70:0c:69:19:47:91:c2:89:33:bc:bf:cb:da:a5:18:
ad:ef:51:b7:83:9d:2e:f3:b0:20:cd:b4:02:9c:57:
e0:73:5a:fb:bc:65:68:54:5c:ce:39:fe:af:1e:1d:
67:61:f4:12:bc:d8:d8:13:81:81:d8:7d:ee:a0:30:
ce:0b:0e:97:9e:b7:07:19:14:d8:ac:77:37:b4:77:
01:af:99:ff:a2:a2:5f:d5:b6:bb:21:a9:a7:af:f8:
e7:51:e8:b7:cb:08:f6:46:c3:0f:49:16:da:e8:f7:
fe:e0:cc:45:83:85:aa:a7:9d:cd:a4:c7:f6:d6:5c:
e7:d2:21:80:ed:d0:e9:79:bc:c6:85:8e:8b:38:28:
ae:c2:07:78:36:55:9a:81:f0:63:31:1e:31:0d:47:
38:27:60:d9:61:21:75:e4:03:64:20:97:4e:16:37:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:20:A4:1E:34:D8:50:AF:C3:00:96:C5:75:75:F8:A2:6E:25:53
X509v3 Authority Key Identifier:
keyid:5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/LE4gpB402FCvwwCWxXV1-KJuJVM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.50.7.0/24
Signature Algorithm: sha256WithRSAEncryption
14:46:dd:e3:5a:92:c4:b6:e2:eb:e3:f0:d8:a8:70:f0:ac:c4:
11:3f:0b:20:8e:76:ae:65:ab:45:e3:72:19:24:79:84:be:1d:
c8:2a:91:4b:55:e1:ad:e6:c0:99:e1:43:4f:ef:20:ad:45:af:
e0:22:b9:34:71:41:ac:6d:c5:99:0b:75:7b:8c:31:a8:dc:70:
d7:6e:85:62:9c:c5:a5:07:97:33:41:c5:a1:ff:1d:99:9a:12:
db:26:fe:c9:25:2c:fc:00:12:df:d2:18:f2:b7:d2:27:3e:1d:
36:f7:89:e7:c7:95:af:a6:ef:22:91:a7:a0:fb:99:14:0c:1e:
b5:38:38:8d:d4:83:1a:de:f2:1b:64:6f:b1:a4:64:ee:33:c4:
13:d2:1b:77:e4:10:e6:33:be:84:a5:de:d7:9d:d5:8f:81:1b:
47:d1:16:54:52:90:16:28:ec:a8:b4:35:a0:89:c6:b5:d1:85:
0c:91:a5:9e:9c:07:ef:3e:e5:d3:2f:ff:4b:d8:ea:e4:8a:94:
f6:fb:02:d0:c0:7d:56:96:c0:1b:64:b9:a9:53:e3:44:93:cc:
90:79:d7:61:80:e2:31:1a:9b:07:d6:4e:c8:13:d9:ac:8d:37:
89:bb:58:fa:89:ac:2d:d1:d0:40:33:f5:9f:36:dc:2f:5e:c6:
38:e6:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org