Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/4gm3WYhlTQaGebZxXi38op9wFbw.roa
File: 4gm3WYhlTQaGebZxXi38op9wFbw.roa (raw, json)
Hash identifier: Ezb1bQLnAOCQqB6YRWpTHNzfWp5mv/5bGpbcAuDhs5U=
Subject key identifier: E2:09:B7:59:88:65:4D:06:86:79:B6:71:5E:2D:FC:A2:9F:70:15:BC
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1289
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4gm3WYhlTQaGebZxXi38op9wFbw.roa
Signing time: Fri 22 Sep 2023 01:30:54 +0000
ROA not before: Fri 22 Sep 2023 01:30:53 +0000
ROA not after: Tue 17 Sep 2024 08:06:57 +0000
asID: 135373
IP address blocks: 112.73.0.0/19 maxlen: 24
112.73.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 08:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4745 (0x1289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Sep 22 01:30:53 2023 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=E209B75988654D068679B6715E2DFCA29F7015BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:16:0b:ef:1b:cf:79:ea:0e:7a:50:cd:1a:
b6:bd:9a:f1:72:99:2c:4d:c7:aa:a5:e0:c1:46:3d:
24:a7:6f:83:a0:8b:c6:5c:17:16:ef:32:31:26:33:
8b:d7:81:85:69:60:b7:48:88:92:05:2d:e3:1f:ae:
45:a1:10:fd:6a:3e:a2:1d:b4:dd:9a:35:fe:ee:94:
c1:78:05:c8:77:52:ec:07:b9:23:df:6a:e8:68:69:
01:cb:d2:b8:51:5f:f6:31:68:05:0a:bb:f1:52:10:
6f:98:db:f7:ac:70:6c:2e:5b:3e:4d:68:1e:7d:42:
53:3f:1e:62:d6:3d:74:af:30:fe:57:67:b6:5a:03:
c0:9e:b7:a1:fc:61:0b:5c:1c:47:67:1c:ab:95:66:
aa:d7:dc:db:68:41:17:0f:0f:9f:39:5a:51:2b:ff:
46:1c:88:88:be:4e:a2:a3:1a:4d:45:f2:4e:d9:c0:
ae:96:38:59:12:81:b4:23:70:a8:c2:e8:54:61:75:
ab:c4:eb:96:7a:ac:1f:90:3e:07:da:84:4a:29:f1:
48:ae:85:fa:9a:58:35:04:a2:4b:7e:e3:71:d1:10:
2f:34:4b:e9:6f:3e:c1:e5:ec:76:1a:47:d9:51:65:
8b:84:e8:22:63:c3:f3:72:de:52:68:97:a9:36:28:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:B7:59:88:65:4D:06:86:79:B6:71:5E:2D:FC:A2:9F:70:15:BC
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4gm3WYhlTQaGebZxXi38op9wFbw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/18
Signature Algorithm: sha256WithRSAEncryption
58:6f:f6:89:ce:b6:c6:39:d4:b4:eb:22:dd:bc:03:4b:6e:f2:
fd:39:76:71:9d:49:36:ef:06:36:32:de:27:71:1d:8b:39:0a:
d1:79:96:ee:59:b4:d5:f2:92:90:67:a4:19:63:d0:d6:c9:de:
60:90:81:9e:0e:de:0c:42:b8:4c:5b:d2:08:eb:67:a3:a6:81:
e4:9b:78:4a:53:d7:93:1c:f4:b4:0c:86:15:3b:d4:a4:04:dd:
7a:81:c3:3c:c9:a1:9b:d5:95:95:41:b3:61:74:10:f7:b8:cb:
1f:40:9e:c6:3c:e9:cd:8e:e5:4a:bc:d1:bb:7f:87:e5:64:f9:
bd:4d:f7:ba:d2:60:8e:2c:95:eb:c8:23:6f:f6:38:f6:46:9d:
37:cf:13:a0:33:ad:af:c3:3a:45:33:98:51:a8:28:47:1c:87:
90:58:7b:be:b4:fc:70:5b:ad:7e:b8:6a:9c:b2:49:d3:6f:f1:
f6:3a:a7:40:8e:05:fe:64:e9:85:be:2c:c1:54:13:bd:35:10:
db:f8:f8:fb:50:ad:38:ac:71:c0:b6:45:a6:68:58:f4:53:85:
a4:be:96:13:13:e2:85:7c:d0:2c:5e:d5:a2:40:8a:b8:30:be:
9e:31:1c:19:56:69:ac:a3:82:ff:bf:cc:d8:60:66:0d:4c:2f:
84:c5:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 10:16:08 2024 by rpki-client on console-ams.rpki-client.org