Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2833/xpJRJ959n7uJ4NABODgqYoGpvAc.roa
File: xpJRJ959n7uJ4NABODgqYoGpvAc.roa (raw, json)
Hash identifier: u2Luad35y+ISpkeaVszbB/xtPduwBGSbo8HwOuwClvc=
Subject key identifier: C6:92:51:27:DE:7D:9F:BB:89:E0:D0:01:38:38:2A:62:81:A9:BC:07
Certificate issuer: /CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Certificate serial: 04A0
Authority key identifier: 63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/xpJRJ959n7uJ4NABODgqYoGpvAc.roa
Signing time: Wed 20 Nov 2024 13:08:36 +0000
ROA not before: Wed 20 Nov 2024 13:08:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4766
IP address blocks: 103.125.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D6C9D8941744BA15480050C04EF53320CA0FC3
Validity
Not Before: Nov 20 13:08:36 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C6925127DE7D9FBB89E0D00138382A6281A9BC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:f9:71:01:ed:86:76:15:c9:ef:8b:4b:5e:
b5:06:e3:0f:ac:48:b4:46:c1:09:75:f3:f0:ea:9a:
46:58:13:71:46:83:c7:1f:82:01:ff:79:55:51:e7:
f0:87:bd:a1:24:86:29:91:11:18:6f:71:f5:1a:42:
e7:39:ef:af:0d:3c:86:f7:2e:f8:20:43:a5:2b:17:
4e:ce:e7:ea:ac:f0:2f:ff:5e:2b:b2:7d:bd:77:79:
b1:58:2b:7b:3f:d9:3f:f3:9b:a0:41:31:80:5e:65:
83:37:f4:e5:b5:54:8e:21:b4:15:0e:9c:16:65:f4:
41:df:ca:c8:fd:e6:fc:ae:bb:0b:5d:3d:43:a7:7b:
af:4b:81:c4:7a:0c:f8:71:00:ae:97:2e:d6:89:a2:
ef:cc:d9:13:03:1f:86:95:1f:35:bd:19:f1:16:0a:
0e:e1:d9:ea:15:fa:af:8d:44:02:02:d6:b6:d1:4c:
c6:3e:c8:9b:03:4c:3b:e8:1c:f9:e1:dd:4d:6d:5d:
3f:9b:18:05:18:12:92:1c:3f:0d:e7:aa:55:c6:00:
2c:31:ef:c6:76:37:81:93:bf:2b:4c:59:29:f7:0a:
79:bb:c1:10:5e:53:34:18:39:6e:fa:50:89:30:dd:
8c:4f:52:7d:f4:cd:10:c0:30:22:07:99:e9:47:bc:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:51:27:DE:7D:9F:BB:89:E0:D0:01:38:38:2A:62:81:A9:BC:07
X509v3 Authority Key Identifier:
keyid:63:D6:C9:D8:94:17:44:BA:15:48:00:50:C0:4E:F5:33:20:CA:0F:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/Y9bJ2JQXRLoVSABQwE71MyDKD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9bJ2JQXRLoVSABQwE71MyDKD8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2833/xpJRJ959n7uJ4NABODgqYoGpvAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:68:08:3a:e1:94:86:1d:61:88:e6:9e:40:96:f8:c5:6c:77:
af:9a:fb:55:4e:31:72:d9:20:98:b5:41:24:91:85:42:ef:c6:
87:88:07:94:4b:34:ae:87:3d:50:31:ea:1b:e7:ea:2c:f8:49:
74:0b:ed:23:92:b9:34:2c:03:94:72:7f:96:7b:11:77:79:a7:
04:cc:52:b2:d9:68:27:37:e3:60:e2:79:1a:da:6a:3e:b8:a7:
2e:e3:17:53:63:81:28:19:cf:18:f3:b9:2e:27:ef:bc:3c:d3:
8c:37:a4:b2:cd:0a:c5:34:90:1d:9b:28:9b:06:ea:e1:77:38:
e2:54:fc:72:76:92:05:7e:4a:22:31:85:84:dd:a6:26:7e:c2:
07:5a:9f:67:3c:14:48:1e:5d:52:b8:ea:9a:f1:2b:9d:ce:61:
5d:a1:ef:0c:c3:2c:53:2c:fe:49:7d:6b:5b:99:d7:33:7e:f4:
2a:37:c5:5f:d9:b8:b0:1c:42:94:7f:bf:6e:af:87:98:26:4c:
4a:80:8c:36:13:17:69:5f:81:aa:26:4a:16:90:64:44:2c:c7:
3c:f4:e5:2b:5b:53:89:33:e7:d1:15:cd:e6:98:43:77:a7:c1:
45:54:84:f0:57:04:0e:5b:64:81:78:15:be:d5:ad:ad:4a:0e:
c2:73:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:59 2024 by rpki-client on console-fra.rpki-client.org