Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/_6IWGLVlBmjv6XJj-xEBJaWak34.roa
File: _6IWGLVlBmjv6XJj-xEBJaWak34.roa (raw, json)
Hash identifier: q/jaBhEgC1WgZD0NaWk4ukIrxtGZ5q94zha27yuZfOA=
Subject key identifier: FF:A2:16:18:B5:65:06:68:EF:E9:72:63:FB:11:01:25:A5:9A:93:7E
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 36
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/_6IWGLVlBmjv6XJj-xEBJaWak34.roa
Signing time: Thu 01 Aug 2024 02:33:00 +0000
ROA not before: Thu 01 Aug 2024 02:33:00 +0000
ROA not after: Tue 22 Jul 2025 06:31:48 +0000
asID: 63631
IP address blocks: 119.161.136.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 01 Aug 2024 07:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Aug 1 02:33:00 2024 GMT
Not After : Jul 22 06:31:48 2025 GMT
Subject: CN=FFA21618B5650668EFE97263FB110125A59A937E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:18:79:1a:48:ca:14:00:dc:9f:fb:b7:1a:b4:
bf:07:e8:ae:b0:e7:51:44:b7:2c:48:71:55:d4:cc:
56:02:09:b5:44:59:69:7b:23:47:be:f8:fe:ad:79:
54:a3:63:5e:f7:42:b6:66:bf:0b:73:2b:5e:2f:61:
9b:44:48:ed:5a:44:94:cc:95:95:fb:2c:be:11:03:
b8:01:3f:9a:cf:60:a2:ec:94:22:f6:1a:d7:1a:66:
4e:26:71:34:6d:8b:86:ba:28:f0:3e:c9:5b:c4:e4:
5a:0c:8b:45:f3:7a:7d:26:f0:a2:ad:da:89:02:0a:
19:4c:47:d7:05:4c:3e:a0:b1:8a:bc:09:ff:a4:8c:
48:50:0e:8f:01:3d:db:f7:6f:55:2b:3a:6d:fa:60:
00:91:58:4c:97:c4:bf:03:26:07:91:a4:7e:7a:ca:
6e:70:2b:e0:c1:df:90:e0:4a:e2:be:52:da:5b:70:
e1:4a:65:3a:68:d5:a1:f8:10:1b:33:86:39:d1:08:
6f:bc:4e:bb:f6:8c:7c:40:e2:13:24:33:77:d6:fe:
10:2e:2c:1a:3e:b0:56:87:40:90:1b:00:23:47:3e:
7a:72:9c:e3:e7:3a:38:e1:11:b8:af:6d:a5:df:36:
33:ab:0c:f6:00:69:01:94:16:9a:17:ec:05:38:2a:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:16:18:B5:65:06:68:EF:E9:72:63:FB:11:01:25:A5:9A:93:7E
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/_6IWGLVlBmjv6XJj-xEBJaWak34.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.161.136.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a5:fc:42:fa:56:b2:b2:13:24:60:6e:70:00:0e:1b:38:63:
15:b5:89:a9:40:e9:e4:02:43:0d:17:79:5a:dd:bc:26:66:3a:
f4:7b:ae:5e:a2:9d:3c:d8:85:75:a9:17:8c:33:59:9a:d1:30:
ad:3a:73:f1:5d:1d:6b:aa:f9:1d:a2:ee:6d:d1:d7:6a:5c:39:
9a:3e:4e:8b:1c:87:9a:36:ee:b3:77:3a:23:4e:66:4b:ee:76:
f8:a3:14:c6:b1:7b:e7:30:8a:1c:f1:e9:eb:b1:17:e3:c7:25:
ab:2c:9a:7a:f5:50:64:e2:01:89:88:60:57:8e:96:77:f7:e8:
23:a7:a8:5e:98:83:04:76:32:d7:1e:4a:02:f5:c1:d8:b5:a1:
40:8e:d4:cf:01:75:1c:ca:19:ad:10:16:f1:b9:60:72:24:22:
60:da:bf:57:a9:06:af:36:c2:d6:65:ff:75:85:30:2f:0a:09:
88:cd:25:fc:b6:c1:f2:65:17:46:e7:d5:4e:3e:d8:9d:c5:be:
0f:8b:7d:e3:e0:fa:2a:56:4b:95:2f:4d:47:45:13:ed:e5:87:
be:6b:05:0f:24:3a:ea:9c:e3:6b:57:25:1c:ef:92:62:f1:ba:
16:fc:37:27:b9:c6:76:a1:cc:fa:0d:54:f7:b2:a8:d8:73:59:
7b:0e:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:13 2024 by rpki-client on console-fra.rpki-client.org