Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/a-9zVqjkeErMjQO_lZUXufqPKn4.roa
File: a-9zVqjkeErMjQO_lZUXufqPKn4.roa (raw, json)
Hash identifier: tmJvBHydQOBfMkKn4Z9VNa9jWcgUv+YH94WVevtPah4=
Subject key identifier: 6B:EF:73:56:A8:E4:78:4A:CC:8D:03:BF:95:95:17:B9:FA:8F:2A:7E
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 022F
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/a-9zVqjkeErMjQO_lZUXufqPKn4.roa
Signing time: Tue 16 Jan 2024 02:35:10 +0000
ROA not before: Tue 16 Jan 2024 02:35:10 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 9808
IP address blocks: 2407:8f40:2::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jan 16 02:35:10 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=6BEF7356A8E4784ACC8D03BF959517B9FA8F2A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:44:1c:34:01:5b:9e:30:24:08:5f:3a:bd:
02:38:54:e8:27:55:aa:6d:d1:73:77:f8:4b:b1:56:
82:56:6f:af:cb:78:8a:c6:7c:7e:e6:c5:e2:d9:ea:
f6:c3:63:25:8e:bb:bf:93:7c:5f:ca:cf:1d:d7:11:
7d:e2:0c:9b:68:e8:ff:f5:b3:26:c3:cd:db:4f:ae:
10:48:6f:47:ae:b6:5e:b9:85:bd:71:2b:56:2f:17:
11:6f:79:70:05:68:c6:ef:c6:32:40:c9:3b:08:a5:
f5:72:03:62:87:df:8a:b5:63:5a:21:59:3b:b4:1e:
75:c3:55:75:b8:39:f8:4c:91:78:ed:7b:8f:36:78:
a8:dd:33:b5:7a:90:6b:ca:4f:ae:a0:b5:59:43:a5:
8e:34:87:83:1d:06:32:07:bc:26:57:66:69:39:09:
c6:72:cd:59:ee:82:8b:a9:f5:77:63:01:f0:62:86:
5a:8a:f7:de:65:88:3f:36:73:02:29:33:85:6c:7c:
cb:bd:1a:5a:00:71:cd:6a:6f:e9:a5:03:39:cc:54:
97:c6:3e:62:43:83:6b:6c:1f:7b:22:9e:b3:a4:9b:
a0:49:58:67:8f:f4:e3:16:fe:db:6d:41:65:8f:e8:
ba:ac:77:f0:3a:64:7a:46:c1:14:98:67:c5:c8:ba:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:73:56:A8:E4:78:4A:CC:8D:03:BF:95:95:17:B9:FA:8F:2A:7E
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/a-9zVqjkeErMjQO_lZUXufqPKn4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:8f40:2::/48
Signature Algorithm: sha256WithRSAEncryption
77:ce:ed:17:fc:4d:fb:1a:dc:d0:a1:8c:6b:d2:bd:07:6d:13:
31:46:b2:9c:a0:70:3f:a7:3d:08:c9:1f:6b:3d:65:ae:91:71:
05:b7:6b:33:82:b2:0f:a1:27:32:a9:36:67:58:73:ca:63:8c:
f1:f9:12:99:de:1e:eb:6d:71:d4:84:82:65:fe:24:8b:8b:54:
79:ff:37:3c:bf:8f:72:4d:96:a5:ed:10:5d:fe:2a:34:77:00:
50:34:bd:f4:3a:de:eb:31:f6:11:a6:c0:d0:48:62:5d:2b:87:
8d:c9:19:31:6f:48:6c:48:dc:e1:3b:af:bf:fd:2a:e7:97:8e:
23:0c:88:ed:16:98:2b:ad:f2:c0:40:08:3a:f6:38:7a:13:33:
72:61:44:53:9e:d5:f2:42:94:94:7f:7d:ab:76:24:df:c4:6c:
c9:50:4d:c1:b4:aa:21:4a:d3:cf:37:d3:f7:5f:c0:01:8b:9a:
c6:5e:1e:e2:10:a8:b6:ea:fa:c3:8b:d1:df:00:e3:de:27:fc:
34:b6:26:7a:b5:c3:a5:15:6c:c1:dd:f8:c9:a7:04:b8:6a:6b:
e9:62:32:b9:c1:21:9c:73:a8:3e:6b:c1:32:28:bc:05:e7:de:
79:06:2f:42:8c:35:0c:90:57:09:ad:3e:c5:5e:21:2f:46:41:
c1:d7:de:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org