Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/GxaWqHWSpZmArP_zwFzzcZfIUTE.roa
File: GxaWqHWSpZmArP_zwFzzcZfIUTE.roa (raw, json)
Hash identifier: CDRlwWn4+d3dl0koJe+UVAQTyCPC8WGAOIwqYisZhTA=
Subject key identifier: 1B:16:96:A8:75:92:A5:99:80:AC:FF:F3:C0:5C:F3:71:97:C8:51:31
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1481
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GxaWqHWSpZmArP_zwFzzcZfIUTE.roa
Signing time: Thu 16 Nov 2023 19:13:57 +0000
ROA not before: Thu 16 Nov 2023 19:13:57 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 136958
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5249 (0x1481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 16 19:13:57 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=1B1696A87592A59980ACFFF3C05CF37197C85131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:20:8a:2c:ac:5d:dd:c7:83:9f:3f:1e:41:
02:26:80:88:4c:9a:ec:30:d8:ed:58:38:2e:89:ef:
10:10:5d:57:ba:be:bc:af:0b:9b:78:9f:b7:4f:76:
76:83:88:9d:37:d6:19:a8:e6:b2:bd:f6:64:1c:6f:
00:a4:56:d8:c8:6b:6c:c0:10:52:5a:d2:fc:68:e5:
6e:a2:34:ad:e1:4b:79:a9:65:35:6d:82:95:46:7a:
25:98:87:aa:99:c6:21:36:55:03:06:8e:ab:1a:bc:
d3:24:f7:08:c8:e9:51:98:95:e6:37:71:6e:0a:5e:
8d:2d:d7:32:7f:b0:8e:f7:48:7e:2d:63:40:b7:a7:
b8:bc:fe:4a:1a:17:35:97:ab:b3:04:b7:54:8c:3e:
1f:b1:89:16:75:e8:be:84:23:a3:07:2c:51:6e:27:
e3:6b:44:01:da:21:ed:27:da:ae:1e:07:9e:e9:36:
8b:1e:d2:f1:f8:90:dd:74:24:ac:e0:13:46:72:94:
03:8e:e0:84:45:64:f8:9a:38:8f:45:c5:fd:30:18:
61:53:30:fd:e8:0c:19:8a:0a:d7:3e:51:d6:a5:76:
53:44:29:62:1c:d4:b4:3d:59:cc:81:5d:df:d1:51:
5a:23:24:41:86:93:51:08:91:f2:2d:cb:e9:56:ad:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:96:A8:75:92:A5:99:80:AC:FF:F3:C0:5C:F3:71:97:C8:51:31
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GxaWqHWSpZmArP_zwFzzcZfIUTE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
80:26:cb:22:6e:cc:69:08:64:14:62:a2:89:f9:d2:ec:a4:91:
25:b9:ac:d3:c3:21:ac:fc:48:e9:29:93:98:01:dd:2f:3b:e2:
9d:69:fe:53:b2:46:98:8c:87:97:11:f5:92:a9:d4:25:d1:42:
a9:3d:e9:a3:ba:86:11:4c:e4:16:69:82:1f:a3:6b:de:6e:ea:
88:5d:ac:ea:bf:41:d0:0e:8a:48:ad:2a:69:b5:68:64:eb:96:
cc:11:b3:74:41:f1:5e:89:52:42:d7:ad:73:79:67:70:63:d3:
d6:18:7f:c0:11:f9:69:5e:14:68:18:51:15:b7:af:e0:f2:ec:
dd:c0:68:33:cd:03:65:e9:6a:c5:37:2f:34:1f:67:38:d2:e0:
aa:33:54:e3:01:aa:ea:51:f3:70:5f:78:db:b4:e1:6a:00:14:
cb:b6:a1:d9:13:49:06:ea:19:73:f8:46:56:06:5e:e3:76:28:
a7:76:de:86:b8:0c:b8:b2:47:73:1b:cc:dc:f1:96:8c:a2:2f:
48:db:b0:eb:96:91:1a:ea:1d:4f:b1:42:2e:50:ff:6b:73:11:
53:69:53:a7:49:b2:1d:df:16:02:d5:62:ef:81:3d:af:4a:fd:
0a:db:bf:7f:68:d5:0b:8d:7e:f1:7a:78:c4:d1:f5:57:0a:64:
c9:50:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org