Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa
File: xdyFQe59XCS64KU7d13ZJ11ZhV4.roa (raw, json)
Hash identifier: PW58DZ5hrD+CUBMYOxYUV59605Ax5kBGmNjJMFy1zdc=
Subject key identifier: C5:DC:85:41:EE:7D:5C:24:BA:E0:A5:3B:77:5D:D9:27:5D:59:85:5E
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1088
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa
Signing time: Thu 15 Jun 2023 08:48:17 +0000
ROA not before: Thu 15 Jun 2023 08:48:17 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 137443
IP address blocks: 219.234.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 02:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jun 15 08:48:17 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C5DC8541EE7D5C24BAE0A53B775DD9275D59855E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:e2:a5:cb:0f:4b:1c:5c:33:da:10:ef:ea:
f5:99:b0:3d:b3:e7:a7:85:b3:6b:1a:2a:51:79:32:
a3:19:fc:34:87:65:a4:a1:77:58:54:f1:70:7f:b7:
7f:2b:8d:0b:a9:64:a2:35:52:74:e9:5b:1c:f0:a8:
2b:7d:21:f8:c3:2e:b8:f9:80:5f:81:90:6f:fe:06:
31:01:81:62:98:e7:a1:63:5f:aa:e2:bc:94:8e:42:
f3:7d:49:78:e8:54:52:49:70:66:4e:3d:c9:91:b5:
88:6d:2a:e2:e5:ce:66:a8:b0:27:cb:fb:7b:3a:51:
97:76:72:5f:60:56:6c:6a:85:6b:ed:e5:73:1f:4b:
fa:41:6e:db:80:67:81:26:29:5f:1a:ed:02:c8:f1:
97:0d:f4:35:92:e5:80:07:ad:00:1b:4c:f3:d1:e0:
fc:01:8a:06:5a:a4:5e:a3:19:bc:15:88:ec:25:23:
be:7b:31:65:8d:15:66:57:17:78:f0:db:ff:0c:b9:
95:45:64:c2:12:9e:3d:80:66:72:36:02:a3:10:45:
ac:79:8d:54:9b:05:b8:cd:a1:69:9c:50:6f:62:2f:
d4:7d:95:cf:08:b4:a8:d2:6b:a9:92:38:f4:00:56:
d4:24:6d:78:2d:98:7e:62:9b:28:e7:7d:8f:3f:7a:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:85:41:EE:7D:5C:24:BA:E0:A5:3B:77:5D:D9:27:5D:59:85:5E
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/xdyFQe59XCS64KU7d13ZJ11ZhV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:cc:d4:d9:9a:77:98:e6:ce:72:a2:d0:c0:58:d5:45:1d:8b:
b4:74:c5:41:8b:57:9a:ba:66:13:2f:e6:0b:71:db:46:4b:f6:
c1:bd:57:2b:4d:2b:b2:9a:92:3d:f7:7c:e6:db:86:1b:e4:95:
df:5b:1b:eb:83:e7:cb:99:3b:94:cd:c1:e2:ec:fa:27:db:06:
76:e6:86:92:92:eb:cd:97:a8:aa:73:95:19:94:5d:de:f9:f4:
16:5f:ad:6a:b5:8c:15:ae:c4:d4:dd:b0:0a:a2:a3:0a:28:8d:
a6:57:93:2e:4b:35:f4:1e:56:78:4f:46:e5:a1:48:55:0e:6d:
b6:82:4b:15:48:6d:16:5f:2d:71:d1:f1:f8:fe:20:49:09:d9:
77:6f:18:70:9b:ca:bf:a2:88:9e:25:ec:ba:9b:7c:6e:62:64:
49:f0:b4:57:b8:47:2e:4d:58:56:93:c0:5e:4f:4f:a4:9c:fb:
88:8e:9a:7b:dc:5c:5a:be:48:f4:51:2c:47:c0:9c:a9:20:a9:
4a:40:24:a2:51:d1:bc:db:33:12:f5:2a:be:7f:02:b8:e6:d7:
65:69:ab:1c:f2:d7:57:c8:c8:4d:c7:c7:5f:43:61:4a:91:00:
70:44:2f:1e:08:ec:16:bc:be:81:f5:7a:41:5f:db:f5:c2:aa:
f7:42:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:54:56 2024 by rpki-client on console-fra.rpki-client.org