Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/9NkDH3kbdEUiD1KfhazLkoOv71w.roa
File: 9NkDH3kbdEUiD1KfhazLkoOv71w.roa (raw, json)
Hash identifier: KBPi8Ff92zZq4dOpsWbQ4gd1+lft7GXTCYYgwBDVqQs=
Subject key identifier: F4:D9:03:1F:79:1B:74:45:22:0F:52:9F:85:AC:CB:92:83:AF:EF:5C
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 06E3
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/9NkDH3kbdEUiD1KfhazLkoOv71w.roa
Signing time: Thu 18 May 2023 07:24:29 +0000
ROA not before: Thu 18 May 2023 07:24:29 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137798
IP address blocks: 2402:f8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: May 18 07:24:29 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F4D9031F791B7445220F529F85ACCB9283AFEF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:d5:8f:85:e7:bd:1b:4b:20:68:2a:70:a4:
f0:de:e5:f3:21:b0:ae:53:ed:70:76:ed:37:60:b7:
1b:c7:2e:13:40:eb:27:9c:73:a8:5c:0a:55:d1:3c:
3b:90:e3:4f:ea:38:74:99:7c:21:21:d3:72:75:63:
df:2a:9c:36:2c:ad:2c:46:85:ff:20:99:57:e1:3c:
8e:92:9d:77:2d:cc:0f:79:7c:42:c0:d5:aa:f6:ca:
89:a9:73:90:b7:25:37:b6:67:01:fc:f4:81:21:0c:
cb:3e:2d:85:32:0d:a1:8a:da:29:30:6e:f2:fa:8c:
41:48:38:07:6b:18:34:0d:ce:96:b9:e3:83:09:4b:
49:aa:07:ae:f7:e5:ca:d4:29:43:9d:21:ac:70:fe:
05:1c:89:c0:7b:c0:30:12:10:6e:b1:99:91:39:9f:
6d:e6:71:79:72:4d:c1:01:7d:1e:f7:f3:2c:c8:2b:
25:80:a3:eb:e5:21:0f:65:15:92:14:0e:8d:da:b8:
7a:20:2a:22:b2:cf:13:74:9a:3c:8f:fd:d8:89:c2:
56:3f:18:d9:8c:af:dd:de:a9:08:3c:d5:ab:62:f9:
f8:f6:7c:b9:db:ff:8d:8b:17:eb:fa:7c:6e:17:a3:
5d:d2:cd:51:9b:55:e5:3d:ae:b2:ac:67:43:00:12:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:03:1F:79:1B:74:45:22:0F:52:9F:85:AC:CB:92:83:AF:EF:5C
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/9NkDH3kbdEUiD1KfhazLkoOv71w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
cf:f2:63:0f:91:b6:03:8c:4f:96:bf:81:c1:9b:77:e0:2c:1b:
cb:55:7f:e2:35:ad:82:43:62:61:62:76:a8:09:28:fe:38:93:
35:e2:d3:ce:3e:1a:9b:8c:6e:b8:89:cb:ed:a4:a6:8f:93:7b:
61:04:44:64:e7:dd:86:77:ce:34:a0:2c:28:0b:f0:b0:bb:8f:
63:2a:b1:b4:9d:8b:cc:30:e5:21:43:73:fa:fe:11:57:c7:8f:
b4:a8:0d:cb:b6:d1:fa:e2:65:96:99:66:67:5f:49:d8:4e:86:
67:2d:5f:9f:64:14:44:be:9c:27:7e:d2:7f:28:a5:b2:48:c7:
d4:4f:d5:79:3d:e3:a9:0a:99:5b:97:62:8d:62:e1:01:b8:92:
30:0e:3c:f9:8a:d9:bb:19:5d:49:08:46:c1:8a:2b:df:bc:62:
46:86:a9:29:8b:eb:44:0c:f3:6f:39:8d:6b:ef:de:a1:13:a7:
29:de:2e:3d:0b:ab:8b:69:d8:2e:c1:03:91:d8:92:39:c6:7a:
3f:48:95:aa:2e:d5:f4:7a:ea:9c:64:14:dc:f9:e1:89:6a:19:
a3:4a:19:03:09:27:1e:ee:ae:39:dc:f2:7b:67:c4:8b:f7:78:
3c:38:6e:52:e8:22:b9:0a:62:0f:53:a8:ea:5c:aa:7e:d5:0b:
8c:5d:78:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org