Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/3ykONhAjSHhJKwWNFG9xnI_Z8t8.roa
File: 3ykONhAjSHhJKwWNFG9xnI_Z8t8.roa (raw, json)
Hash identifier: nIWRVOq417irH+/WE+JTt0luH4BVPQ0QWQ9OyA5jh+0=
Subject key identifier: DF:29:0E:36:10:23:48:78:49:2B:05:8D:14:6F:71:9C:8F:D9:F2:DF
Certificate issuer: /CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Certificate serial: 07D0
Authority key identifier: 9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/3ykONhAjSHhJKwWNFG9xnI_Z8t8.roa
Signing time: Fri 30 Jun 2023 04:15:09 +0000
ROA not before: Fri 30 Jun 2023 04:15:09 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4847
IP address blocks: 2403:8080:101::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Validity
Not Before: Jun 30 04:15:09 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=DF290E3610234878492B058D146F719C8FD9F2DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:db:87:fa:be:f2:cc:f3:c2:40:22:b5:af:
12:d1:87:e4:05:16:d8:8b:57:4b:6e:2d:a2:48:08:
0e:20:fe:c2:a5:6f:a4:9d:eb:9c:6f:43:fe:bc:0d:
02:5c:57:f5:00:74:4f:fa:c4:e5:10:6a:f6:73:14:
aa:31:27:9f:12:2a:f9:48:d3:48:d2:eb:57:36:21:
16:4d:58:8d:41:32:7c:05:60:60:56:4a:b9:f3:ae:
54:06:29:fe:91:74:31:47:9b:fa:8e:02:84:1d:05:
bc:37:9f:ab:24:38:e1:7d:b9:54:19:4d:f2:ae:1c:
a2:d4:42:71:58:7c:f5:da:9b:12:a9:75:e0:fd:e2:
ed:64:d3:05:9c:b3:4f:49:81:89:6d:0c:74:6b:c2:
56:d5:34:97:42:ab:57:4d:7e:4f:45:94:34:7d:19:
f2:ec:17:92:d6:95:6f:da:92:f7:ad:95:c5:02:c2:
d0:00:09:56:aa:d0:cb:84:61:5b:7e:95:07:ec:08:
14:47:89:c9:f6:b3:6d:a9:fd:e0:5d:5a:de:5b:9a:
e7:1c:39:b6:15:a3:3f:a8:10:6f:78:94:48:ea:ac:
3c:01:e4:cf:b2:97:4f:63:cd:23:c4:94:28:1d:fc:
1b:72:56:50:96:ea:6d:bc:85:c1:9c:e7:04:7f:46:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:0E:36:10:23:48:78:49:2B:05:8D:14:6F:71:9C:8F:D9:F2:DF
X509v3 Authority Key Identifier:
keyid:9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/3ykONhAjSHhJKwWNFG9xnI_Z8t8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8080:101::/48
Signature Algorithm: sha256WithRSAEncryption
22:35:b2:1d:38:4b:c8:a0:61:71:19:38:92:2a:38:f7:ff:ab:
90:63:1f:df:0f:b8:91:bd:46:ef:05:44:2a:6c:a5:52:c5:b1:
5e:1e:6a:8c:87:33:5d:18:a8:54:cd:3d:bc:66:a1:b4:9c:b9:
f7:37:d5:a5:ae:51:51:7c:d4:ac:7a:79:c0:42:9e:e7:2f:72:
ca:15:5a:c8:bd:fa:b5:ec:06:3c:cd:48:2e:07:80:42:e5:54:
47:e0:6b:ba:ca:6c:00:99:9f:86:e2:93:8c:06:22:5e:d1:5a:
d9:6e:1f:32:82:37:97:95:b7:91:12:7d:3d:2b:76:95:7c:7d:
02:1a:ca:4b:84:6e:a7:2f:04:f9:88:54:32:72:52:85:e3:09:
f5:e2:77:e1:ae:37:31:8d:bf:07:38:bc:7e:37:4b:ec:12:8b:
89:0c:ac:95:39:f5:a0:e0:76:74:2d:02:de:7c:79:87:d4:8a:
41:c1:43:53:67:4e:9a:31:26:17:ad:a3:b1:0b:cc:a8:b3:14:
cd:ea:c8:5c:f9:71:aa:72:ef:84:bd:1e:fd:06:87:c9:12:5a:
19:d6:20:dd:d0:14:83:5a:38:22:b2:39:7b:ad:d3:3e:fe:27:
57:74:eb:5b:d8:35:24:d2:36:ed:9c:e3:76:1c:11:c7:d6:d6:
8c:97:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org