Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/zZGVuK_Uxm6mD0dxe60vMRiEkPA.roa
File: zZGVuK_Uxm6mD0dxe60vMRiEkPA.roa (raw, json)
Hash identifier: m4Ht1WPYq1oiZB5YicFDPiRYzteMnqARqszVsHQ41Nk=
Subject key identifier: CD:91:95:B8:AF:D4:C6:6E:A6:0F:47:71:7B:AD:2F:31:18:84:90:F0
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 0D1C
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/zZGVuK_Uxm6mD0dxe60vMRiEkPA.roa
Signing time: Tue 02 Jan 2024 06:20:07 +0000
ROA not before: Tue 02 Jan 2024 06:20:07 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 146834
IP address blocks: 2404:e5c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Jan 2 06:20:07 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=CD9195B8AFD4C66EA60F47717BAD2F31188490F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:20:39:a7:e2:39:d9:2d:08:fe:22:e8:f7:
8c:51:f3:a3:77:99:8e:5d:7b:55:ba:42:78:1a:6f:
a7:87:d0:7a:b4:d7:9d:78:14:43:1c:03:7a:f1:05:
9d:44:6e:76:7a:c0:8a:19:7f:13:dc:1b:53:54:06:
19:85:25:81:84:f1:eb:6e:49:95:4c:70:83:9c:84:
2b:e5:60:fb:f4:00:74:35:7f:ea:c0:43:af:06:61:
f4:e1:52:e8:34:e7:78:42:55:19:b2:8d:7e:8e:1a:
8e:5e:4d:9f:48:08:30:23:61:e4:42:ba:7b:3a:3f:
65:3f:cc:31:2e:1d:ef:73:7c:ca:ec:f4:ac:16:28:
a2:37:02:94:26:b3:d2:38:3e:28:9a:6f:7d:d2:06:
35:4c:00:ed:b2:3f:b5:de:00:2f:f8:38:6c:40:15:
3f:27:ba:fe:59:88:f3:80:a6:0d:03:93:f0:22:b3:
7b:c1:b4:2d:e9:8b:3b:bf:df:b5:a8:f3:48:32:43:
b4:78:e2:9b:62:93:5a:29:c9:db:fd:27:0b:94:04:
3a:b4:b8:26:72:6f:cc:b4:d2:89:d1:57:c5:9d:9f:
57:60:5b:eb:e0:dd:56:1c:bb:98:02:8c:90:d4:e6:
d5:e5:90:88:bb:28:e1:b5:a3:3b:50:5f:bd:ed:74:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:95:B8:AF:D4:C6:6E:A6:0F:47:71:7B:AD:2F:31:18:84:90:F0
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/zZGVuK_Uxm6mD0dxe60vMRiEkPA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:9b:cd:25:38:0a:58:b6:55:e1:cd:68:1b:76:37:b1:cb:33:
b1:4c:12:ea:3e:90:f0:91:06:54:53:c3:32:73:3c:d4:d3:2c:
ed:92:d4:c7:56:05:7c:b5:ef:33:cc:04:43:95:64:85:9a:97:
70:7f:86:df:a8:ef:6a:27:82:a8:3f:9a:13:7f:00:d0:c9:7b:
c2:02:d1:55:94:e2:31:cc:5a:6b:09:9e:82:0d:a7:a8:6c:01:
40:d9:84:c9:e2:66:cc:cd:46:27:06:5b:40:76:3f:2b:52:e2:
c4:84:35:92:47:cc:7e:0d:97:3b:7c:a3:b5:a2:af:90:77:23:
e7:7a:81:0b:e9:ae:7b:52:8a:10:df:2f:d3:96:f9:e4:ea:dd:
f9:13:16:ce:c6:93:1f:ab:b1:e1:4a:f1:7d:85:06:93:fb:f0:
c2:88:bd:ef:c3:9f:7f:86:a1:25:e0:55:cb:e6:51:b6:a5:70:
ba:f8:82:0b:b7:d2:19:cd:7c:aa:c5:1f:e1:ad:ec:1f:fe:37:
a5:52:bf:51:fb:9e:6a:20:8c:ad:d0:a8:64:28:d6:3f:17:c5:
19:9e:9d:ca:e6:2e:de:a0:fb:3c:a8:a5:c5:b0:b8:2f:40:ec:
f4:67:b6:88:36:e5:e1:43:32:65:d0:b2:68:0e:ee:a1:7d:5e:
6b:f2:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:46:28 2024 by rpki-client on console-fra.rpki-client.org