Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/wOs0mQrvED_2rY6GUCiNHQ_srNw.roa
File: wOs0mQrvED_2rY6GUCiNHQ_srNw.roa (raw, json)
Hash identifier: 8L8cZ0TWp9iW8nO6KNQU83prOgfRnHRrNNNx06wsCLo=
Subject key identifier: C0:EB:34:99:0A:EF:10:3F:F6:AD:8E:86:50:28:8D:1D:0F:EC:AC:DC
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 0FEC
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/wOs0mQrvED_2rY6GUCiNHQ_srNw.roa
Signing time: Wed 24 May 2023 03:53:57 +0000
ROA not before: Wed 24 May 2023 03:53:57 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 137797
IP address blocks: 2402:f9c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4076 (0xfec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: May 24 03:53:57 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C0EB34990AEF103FF6AD8E8650288D1D0FECACDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:31:64:4d:ac:25:f4:06:d2:1b:f2:d6:8c:
2a:05:a9:b0:d2:a0:3b:8d:19:f8:ff:08:b7:74:a2:
41:ef:86:02:78:41:e4:77:b0:f0:6e:96:11:f1:26:
54:ad:6c:76:e0:60:55:3c:41:21:b9:7d:99:1a:f4:
a8:63:7c:b5:28:aa:15:37:00:70:b9:96:bf:38:4d:
f7:85:8d:3a:79:81:f2:67:db:c1:b7:00:32:c0:69:
23:29:aa:b0:4e:2c:37:0f:83:e6:62:18:04:f2:4f:
fb:19:48:de:15:bb:d8:00:5d:23:d8:09:b8:4d:41:
09:90:0c:9b:ce:77:d6:27:bf:8b:5a:9b:2b:1c:9a:
c3:a6:ab:6e:a0:07:55:7f:27:77:25:a8:9f:10:e7:
1b:84:9b:da:b3:aa:6b:83:de:3c:96:d9:bc:62:fd:
94:54:3e:d5:68:89:2f:7b:36:ee:4c:86:3b:74:fa:
a4:30:b2:48:79:25:92:af:c2:4a:ec:dd:b8:5a:a1:
09:a6:8d:24:3c:46:63:0e:80:c5:54:ac:77:c3:28:
11:9b:95:c5:9d:29:8d:a6:37:c1:a8:3b:59:c6:ee:
fd:1e:8d:76:10:dd:2a:7a:04:41:d7:8f:de:6b:98:
60:b9:49:6d:09:79:37:db:08:43:d7:4f:32:a0:c9:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:34:99:0A:EF:10:3F:F6:AD:8E:86:50:28:8D:1D:0F:EC:AC:DC
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/wOs0mQrvED_2rY6GUCiNHQ_srNw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f9c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:bb:39:63:17:30:04:78:25:85:78:e9:da:db:37:42:69:f1:
ec:68:0f:d4:4e:70:8c:dd:5e:76:51:f3:3d:da:80:a1:b1:75:
64:68:f5:09:3b:36:e6:3a:11:72:ad:b2:96:5f:d1:52:65:a8:
00:32:8c:d0:f4:6f:3b:f6:95:d4:21:cc:02:ac:a0:91:7b:38:
ef:c9:fa:4d:49:97:ed:55:20:07:fe:30:9d:7a:69:8e:8a:f7:
fb:b3:51:eb:24:86:8b:30:7a:c0:26:fd:d8:2b:c5:54:92:a7:
10:67:f1:68:a7:9b:6f:9e:82:54:6d:0b:0c:a5:22:70:80:e6:
82:02:07:db:b1:34:cd:50:20:8f:10:32:6f:0f:4e:53:86:0d:
da:28:2b:e7:98:ec:e6:fa:3e:d2:eb:1d:fd:7c:20:52:d1:f9:
39:c3:64:55:ef:4a:c9:5a:6d:64:f5:41:a1:bd:a6:4b:b6:53:
78:2d:be:37:c7:96:da:ab:1b:b5:f3:c1:c2:d6:1c:2d:ab:b7:
f6:c1:48:47:38:e2:67:fe:2f:8f:58:36:8d:38:b7:c3:e7:22:
31:0a:53:12:ab:7b:02:43:4f:ed:8d:63:82:02:36:b2:3c:a8:
9c:a7:cb:d8:21:d6:16:cf:90:ec:59:cd:a1:49:2a:e4:67:9d:
72:59:21:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org