Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/U6HQ7yXRAFaBRKg8V8VTEWKnQto.roa
File: U6HQ7yXRAFaBRKg8V8VTEWKnQto.roa (raw, json)
Hash identifier: WIfWjf+h/Kp2YOqA+9tRcBbrUlN0Fe8WbrYabZEHkgI=
Subject key identifier: 53:A1:D0:EF:25:D1:00:56:81:44:A8:3C:57:C5:53:11:62:A7:42:DA
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 15E4
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/U6HQ7yXRAFaBRKg8V8VTEWKnQto.roa
Signing time: Wed 13 Mar 2024 01:21:40 +0000
ROA not before: Wed 13 Mar 2024 01:21:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 38814
IP address blocks: 123.49.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5604 (0x15e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 13 01:21:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53A1D0EF25D100568144A83C57C5531162A742DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:c1:20:4e:8a:41:c2:bf:69:9f:73:5d:96:
06:23:5f:93:54:11:26:3a:03:54:c4:a9:cd:c5:bf:
77:10:8d:05:e9:d6:c4:81:e6:b6:fd:8f:6e:36:b0:
b1:24:19:4f:a6:99:b3:11:8b:d2:da:ee:7f:60:dc:
c8:7e:a7:60:79:01:cf:d3:cb:89:c4:56:09:21:cd:
e7:35:94:45:f7:a9:b2:ae:26:c7:fd:04:07:03:b4:
14:c5:94:9a:16:9c:d7:c7:ac:63:f9:a1:be:85:5a:
73:b7:da:21:b8:0e:c2:d5:5e:96:98:42:e8:bf:48:
ba:e5:51:65:8c:25:81:a0:5a:bb:e3:f1:98:78:7e:
c7:06:5d:4f:db:c5:30:6e:59:7b:f9:d9:af:4b:cd:
72:42:1d:8a:08:c4:ee:78:cf:14:d4:48:00:ec:ae:
2d:a2:51:f1:4f:5d:0a:53:13:c6:95:b5:39:22:1c:
4b:16:b4:1f:20:9e:28:c0:57:ae:6b:e6:ae:00:c1:
d8:a3:92:66:91:92:f0:91:f1:24:5f:40:3d:a3:e9:
83:d9:ff:8a:d6:63:52:c0:c4:ec:d9:30:34:2a:67:
f5:f0:5f:14:57:15:50:8f:af:d9:b7:be:21:7c:10:
65:4b:a7:2e:ae:88:6d:2f:04:b6:62:97:db:5e:f4:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:D0:EF:25:D1:00:56:81:44:A8:3C:57:C5:53:11:62:A7:42:DA
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/U6HQ7yXRAFaBRKg8V8VTEWKnQto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9c:4b:37:f9:dc:84:6a:72:21:36:72:2d:6e:2e:75:80:25:
51:c2:6d:8a:8a:33:d9:cd:ce:2b:67:73:fb:b1:cf:8a:1a:9a:
9f:29:4f:8d:a1:31:1c:a5:10:79:ac:84:f5:c8:9f:4f:4d:2d:
5a:1e:00:7c:a6:20:cf:3d:0d:80:65:f4:5c:65:02:d5:50:8e:
1d:ef:3f:5a:0b:cf:64:72:69:91:0e:d0:a9:74:78:44:98:5e:
dd:ee:e5:aa:38:a1:ab:90:68:14:f2:9e:e5:a7:e7:86:20:63:
21:58:70:e0:c2:00:59:58:21:4d:e6:14:92:2d:9a:0a:b4:6b:
01:e3:c1:9f:23:19:7a:1e:e7:88:0f:ed:7e:75:ad:21:36:45:
0d:cb:a6:d0:2d:1e:52:17:ea:c8:49:5f:d4:9e:93:11:7e:06:
3a:5c:9f:b4:8f:c7:eb:e5:f4:8a:0a:b0:02:bb:45:d2:6a:70:
60:55:4f:5d:e0:f7:c8:79:ae:7b:da:1e:3e:b4:7a:b4:3d:ad:
ca:ce:47:5b:1b:4b:66:40:ea:73:f8:09:e4:c7:06:63:fd:34:
45:5d:be:52:b3:dd:97:ea:87:8e:8d:7d:71:50:bd:b1:db:6c:
5e:30:4b:a9:03:62:70:f1:13:31:5e:fe:6d:b2:52:0f:a8:f8:
2c:eb:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org