Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/elQ-R8pC1ED_Zn71T5NFa9TU9gQ.roa
File: elQ-R8pC1ED_Zn71T5NFa9TU9gQ.roa (raw, json)
Hash identifier: Nv4p75kCw87indRdkDWphRADNgZnIadz0zT+xeU1gzM=
Subject key identifier: 7A:54:3E:47:CA:42:D4:40:FF:66:7E:F5:4F:93:45:6B:D4:D4:F6:04
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0C3A
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/elQ-R8pC1ED_Zn71T5NFa9TU9gQ.roa
Signing time: Tue 25 Jun 2024 09:03:56 +0000
ROA not before: Tue 25 Jun 2024 09:03:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136907
IP address blocks: 110.41.90.0/24 maxlen: 24
110.41.208.0/24 maxlen: 24
110.41.209.0/24 maxlen: 24
110.41.210.0/24 maxlen: 24
124.71.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 02:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jun 25 09:03:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7A543E47CA42D440FF667EF54F93456BD4D4F604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:7d:04:69:22:8e:1a:b6:24:6b:c3:c9:e8:
5b:42:30:32:03:43:2a:8b:ee:ba:56:1d:16:6e:7f:
55:0e:0a:7b:c3:d2:98:46:3c:49:6c:a3:a7:51:90:
5d:24:35:2b:bc:0c:4f:e9:87:8f:68:81:fc:a4:11:
79:dd:42:5e:99:12:80:a8:cd:0e:76:25:5f:d8:71:
62:26:38:0d:89:14:29:9d:b7:0e:f7:0b:43:f4:67:
30:23:fa:68:17:a8:42:d9:47:76:8b:a6:8d:04:7d:
fb:35:df:7e:3d:40:2b:1a:af:ad:63:9e:59:c8:ae:
6e:98:02:5a:59:25:85:64:a1:c6:85:6d:ff:6c:b2:
9f:1a:56:1d:73:cc:28:cb:79:6a:af:fc:70:76:f3:
d4:90:27:77:56:ba:55:e8:d3:21:18:94:58:29:c6:
5f:38:ab:7d:50:52:66:45:19:4f:7a:ac:44:af:c4:
56:27:05:69:77:40:ce:a9:e4:eb:a8:56:a2:e1:46:
b2:5b:fe:d8:68:15:60:f9:81:6f:ab:20:80:2b:a8:
b8:90:56:06:aa:97:4e:53:17:9e:13:76:3b:c6:e0:
4e:6b:a9:85:20:01:7e:90:f7:7d:ae:14:ee:3a:4a:
93:a1:05:75:5d:09:e3:a5:75:8e:09:37:ed:20:0a:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:54:3E:47:CA:42:D4:40:FF:66:7E:F5:4F:93:45:6B:D4:D4:F6:04
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/elQ-R8pC1ED_Zn71T5NFa9TU9gQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.90.0/24
110.41.208.0-110.41.210.255
124.71.250.0/23
Signature Algorithm: sha256WithRSAEncryption
60:02:a7:c2:0b:ad:25:d6:07:d9:93:4d:59:93:54:40:1f:80:
65:c4:04:0c:d4:6c:76:19:30:bb:4b:6b:95:64:07:8e:1c:57:
ef:a2:0b:66:67:ad:d1:4c:4d:37:fe:cc:30:7a:a8:c8:e1:45:
24:0e:78:a9:3e:d7:a5:54:d3:ff:46:75:61:d6:bd:9b:a9:2f:
aa:cf:6e:78:5f:6b:3d:2d:77:fb:32:ee:88:88:7b:2d:44:62:
62:96:e6:eb:59:06:2f:1a:69:6c:82:f8:66:84:5d:39:ee:76:
f9:b7:da:91:da:84:91:07:5a:7b:ef:70:ba:b1:e4:32:58:b4:
e5:5a:53:56:14:e9:07:35:14:97:33:32:1c:d3:a8:9f:7c:6c:
f3:d6:aa:55:cf:ac:eb:e3:45:60:80:c6:b7:30:c2:b0:1d:8f:
a7:aa:6a:d0:63:dc:9e:94:69:e2:94:1e:6b:55:6c:e1:ca:c8:
64:56:a7:eb:3c:19:e2:f2:1e:54:ff:af:c2:46:79:0e:22:ed:
ad:ff:96:e3:61:97:e1:bc:80:e3:5e:8b:8b:e3:47:12:84:c8:
f4:8c:de:9f:dd:12:e7:18:79:cb:30:85:6b:d6:9b:5c:87:cd:
77:e2:08:3f:4c:bb:8f:f5:40:f1:ff:99:53:3e:f6:1d:06:18:
e3:8b:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 04:03:20 2024 by rpki-client on console-ams.rpki-client.org