Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUR5ixg4YcbqXgr_xYeUeT1UY_I.roa
File: FUR5ixg4YcbqXgr_xYeUeT1UY_I.roa (raw, json)
Hash identifier: zxWePZ4t7qbrjUVGUiwU2Dl17jQDg5AJWVm90t7POdA=
Subject key identifier: 15:44:79:8B:18:38:61:C6:EA:5E:0A:FF:C5:87:94:79:3D:54:63:F2
Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Certificate serial: 0C2C
Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUR5ixg4YcbqXgr_xYeUeT1UY_I.roa
Signing time: Tue 25 Jun 2024 09:03:56 +0000
ROA not before: Tue 25 Jun 2024 09:03:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136907
IP address blocks: 139.9.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jul 2024 02:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2
Validity
Not Before: Jun 25 09:03:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1544798B183861C6EA5E0AFFC58794793D5463F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:d8:a6:6b:d9:0b:f1:90:b8:1e:44:b7:77:
ce:39:91:70:b5:8e:f4:d2:3d:ab:cf:25:72:92:bd:
47:61:e7:ce:99:8b:28:d8:06:27:b4:ba:73:f0:07:
98:50:dc:93:6b:64:5e:76:1f:3d:47:1c:4c:e9:55:
bf:29:9d:c6:4f:6c:04:90:17:fb:61:3a:38:9d:c4:
49:98:8d:4a:a8:48:09:4b:bf:00:47:82:6a:32:bb:
09:59:c4:0f:a7:c3:06:23:a0:c6:87:e6:1c:c6:12:
a3:f1:fb:43:4c:65:b1:2d:68:d8:49:51:c5:0a:1f:
a0:a8:e4:8c:41:be:8a:80:7d:c4:04:f7:73:32:10:
ac:29:8e:6c:4f:6e:8d:db:65:39:10:60:7a:0f:cd:
a9:0c:75:5b:5b:1e:5d:3b:88:e0:df:b4:15:38:81:
c9:58:8a:af:dc:a7:16:aa:c6:d2:04:42:c4:e8:29:
43:39:10:03:24:7d:46:a7:e6:d5:f1:a7:1c:68:8b:
ea:8a:43:68:43:3d:22:5e:16:9f:9f:41:a7:6f:67:
ae:a6:fc:53:00:57:d3:30:d1:64:47:d7:7e:42:a8:
55:9d:ac:b5:bf:b6:ce:1d:e5:4e:a4:e6:5d:02:a3:
00:60:95:de:69:48:9e:50:c3:90:06:9c:a4:40:d6:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:79:8B:18:38:61:C6:EA:5E:0A:FF:C5:87:94:79:3D:54:63:F2
X509v3 Authority Key Identifier:
keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/FUR5ixg4YcbqXgr_xYeUeT1UY_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.9.98.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:31:84:fd:6c:b6:bf:77:da:2b:36:9a:11:86:03:26:97:97:
a7:c8:c4:a3:85:43:85:60:07:7e:79:76:46:4e:1e:c8:88:54:
46:40:3b:30:27:7c:13:b4:02:d8:57:40:01:11:ab:00:ea:89:
64:45:e5:3e:d2:da:21:ac:37:aa:96:a6:2f:23:12:58:ab:4d:
26:bb:4e:15:3b:0e:72:6f:3a:b1:2c:ab:96:bf:28:22:7b:77:
69:86:90:35:b0:e7:aa:f6:f1:84:26:a4:06:2a:23:1e:1e:12:
fd:97:eb:0d:0f:23:78:ee:7a:66:e7:16:f5:63:87:b2:8d:ec:
7c:c8:f0:01:be:5d:b9:01:44:5d:eb:c3:c7:01:c8:61:11:63:
35:5d:5a:ce:83:19:49:58:71:9b:b7:69:46:8a:c0:87:53:23:
8b:e6:96:94:b1:c1:52:c0:3a:d6:85:96:5a:ee:88:6a:1f:45:
dd:a0:c0:3c:8b:1d:51:6b:47:5e:df:d7:73:fc:e3:33:4c:70:
59:45:fd:d0:4a:2b:04:4d:14:a1:f2:98:d8:b1:97:a7:39:6e:
72:ce:51:5e:3f:fc:12:63:41:d0:07:aa:2f:b9:65:8d:6f:0c:
93:2b:ff:c1:d2:f6:4a:9c:0e:4c:6a:e3:03:9d:e8:08:e9:e3:
30:7d:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 04:29:01 2024 by rpki-client on console-fra.rpki-client.org