Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/2qqZJ51ev8zyRcJryhtj79HVIGU.roa
File: 2qqZJ51ev8zyRcJryhtj79HVIGU.roa (raw, json)
Hash identifier: GMMygp/o7ANuEItMIIjD9vylTUKrxllOQJYVmyK+EmM=
Subject key identifier: DA:AA:99:27:9D:5E:BF:CC:F2:45:C2:6B:CA:1B:63:EF:D1:D5:20:65
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 1619
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/2qqZJ51ev8zyRcJryhtj79HVIGU.roa
Signing time: Fri 19 May 2023 05:54:54 +0000
ROA not before: Fri 19 May 2023 05:54:54 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139139
IP address blocks: 2406:3340::/36 maxlen: 36
2406:3340:1000::/36 maxlen: 36
2406:3340:2000::/36 maxlen: 36
2406:3340:3000::/36 maxlen: 36
2406:3340:4000::/36 maxlen: 36
2406:3340:5000::/36 maxlen: 36
2406:3340:6000::/36 maxlen: 36
2406:3340:7000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5657 (0x1619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: May 19 05:54:54 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=DAAA99279D5EBFCCF245C26BCA1B63EFD1D52065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:d8:56:79:ab:89:11:f8:a0:08:6f:d0:ef:
ee:65:80:ad:37:95:45:50:fe:f1:89:5e:69:71:fe:
99:12:10:73:bb:44:d6:37:1a:c8:dd:d3:d4:ea:19:
da:e0:d4:44:94:2c:6b:b1:c6:2b:dc:f0:a6:87:7e:
3c:64:8d:a1:8b:62:82:6d:fd:14:b8:ad:ec:7c:3f:
39:3c:1a:7c:96:8a:81:3b:e3:6a:5d:0b:d4:a5:61:
b0:2b:62:6c:86:fd:cd:6b:97:ce:83:09:6d:50:7d:
9a:73:89:63:e7:dc:af:26:64:3b:6c:45:a4:ff:28:
0b:90:82:68:a6:23:70:0a:26:50:68:7c:05:d8:2b:
45:7a:5d:b6:95:86:28:ff:85:46:13:74:6a:64:1d:
ba:f4:57:ff:13:a4:38:a3:67:13:68:6a:ef:bc:0f:
51:b5:87:49:d8:ce:a7:22:88:1a:f5:e7:d8:27:c5:
a2:d8:1c:23:ec:28:22:97:d3:ca:63:97:92:7c:6c:
a2:d3:01:4c:ca:a5:a8:de:d3:a7:12:b8:58:1d:82:
3a:0b:04:91:7b:f4:1f:2a:2d:12:0d:d5:a1:f5:81:
1f:bc:cd:2a:08:d8:ad:35:6d:16:2a:f1:cc:30:07:
a1:6d:c0:51:5c:4f:5c:cc:26:14:13:15:7b:4d:00:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:99:27:9D:5E:BF:CC:F2:45:C2:6B:CA:1B:63:EF:D1:D5:20:65
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/2qqZJ51ev8zyRcJryhtj79HVIGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:3340::/33
Signature Algorithm: sha256WithRSAEncryption
94:76:55:c2:81:af:34:b9:c6:8a:ce:e4:be:dd:56:92:18:f9:
47:f8:6c:a8:15:0d:25:94:11:39:1c:40:c2:42:30:56:a9:ea:
e3:c5:7d:01:e5:4b:52:23:0f:8d:b6:f4:7c:89:56:08:58:7f:
cf:38:27:98:c1:ef:32:93:44:2f:c5:4a:9b:62:b2:65:f6:51:
ad:00:5c:cb:88:e6:28:9a:ea:4b:2a:32:f0:e7:9e:c5:e3:ff:
96:6b:f1:31:14:c4:43:d8:4c:de:17:2b:c1:bf:2e:2c:01:bf:
af:97:2c:0d:2d:55:30:aa:57:24:bb:6e:81:b5:ff:35:e9:99:
2e:19:f1:f6:44:82:7f:95:0b:33:5a:7a:cf:63:92:0f:f9:62:
44:f6:9c:47:e8:14:60:2f:52:e3:e5:1e:a2:07:82:a9:b2:ba:
09:1e:0e:f9:b8:84:21:6d:f4:19:21:5e:17:3e:98:17:0c:eb:
9e:13:df:32:06:42:cd:71:37:23:83:04:79:4f:7f:7e:3e:21:
2b:ed:01:71:47:39:df:1e:58:54:2c:98:b5:1f:fe:2f:af:56:
8d:d2:dd:81:af:ca:67:4e:23:e9:02:ea:89:74:9d:c3:62:f1:
ce:da:71:29:e7:7b:6f:11:7b:0b:e0:b6:0d:41:89:fb:2a:62:
99:5a:cc:1e
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICFhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy
RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yMzA1MTkw
NTU0NTRaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKERBQUE5OTI3OUQ1RUJG
Q0NGMjQ1QzI2QkNBMUI2M0VGRDFENTIwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo39hWeauJEfigCG/Q7+5lgK03lUVQ/vGJXmlx/pkSEHO7RNY3
Gsjd09TqGdrg1ESULGuxxivc8KaHfjxkjaGLYoJt/RS4rex8Pzk8GnyWioE742pd
C9SlYbArYmyG/c1rl86DCW1QfZpziWPn3K8mZDtsRaT/KAuQgmimI3AKJlBofAXY
K0V6XbaVhij/hUYTdGpkHbr0V/8TpDijZxNoau+8D1G1h0nYzqciiBr159gnxaLY
HCPsKCKX08pjl5J8bKLTAUzKpaje06cSuFgdgjoLBJF79B8qLRIN1aH1gR+8zSoI
2K01bRYq8cwwB6FtwFFcT1zMJhQTFXtNAP4HAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQU2qqZJ51ev8zyRcJryhtj79HVIGUwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J
D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4
OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvMnFxWko1MWV2OHp5
UmNKcnlodGo3OUhWSUdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGByQGM0AAMA0GCSqGSIb3DQEBCwUAA4IBAQCUdlXCga80ucaKzuS+3VaSGPlH
+GyoFQ0llBE5HEDCQjBWqerjxX0B5UtSIw+NtvR8iVYIWH/POCeYwe8yk0QvxUqb
YrJl9lGtAFzLiOYomupLKjLw557F4/+Wa/ExFMRD2EzeFyvBvy4sAb+vlywNLVUw
qlcku26Btf816ZkuGfH2RIJ/lQszWnrPY5IP+WJE9pxH6BRgL1Lj5R6iB4KpsroJ
Hg75uIQhbfQZIV4XPpgXDOueE98yBkLNcTcjgwR5T39+PiEr7QFxRznfHlhULJi1
H/4vr1aN0t2Br8pnTiPpAuqJdJ3DYvHO2nEp53tvEXsL4LYNQYn7KmKZWswe
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org