Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa
File: PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa (raw, json)
Hash identifier: ShBeN130BTW+RbGe+BH2hPpjAdRxXH63WYlMo4eC/Hs=
Subject key identifier: 3C:4D:49:BB:04:6A:8D:D7:84:D3:FD:BF:CC:14:6A:3E:0F:B3:FF:E4
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 0E
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa
Signing time: Mon 24 Jun 2024 07:33:56 +0000
ROA not before: Mon 24 Jun 2024 07:33:56 +0000
ROA not after: Tue 24 Jun 2025 01:23:54 +0000
asID: 146761
IP address blocks: 114.111.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 16 Jul 2024 04:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jun 24 07:33:56 2024 GMT
Not After : Jun 24 01:23:54 2025 GMT
Subject: CN=3C4D49BB046A8DD784D3FDBFCC146A3E0FB3FFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:c9:2a:e2:b2:eb:ff:7a:16:2c:d2:05:00:
50:0b:94:ec:38:6d:c9:c2:10:94:7a:15:df:db:b6:
ff:26:66:ce:4a:01:bc:1d:48:98:ea:e6:da:f2:ff:
d4:c5:d2:18:c1:ab:b7:58:13:af:04:ff:e3:5b:72:
be:ec:af:8f:b3:3a:60:cb:9f:f2:ba:7e:6b:5f:1e:
2d:12:ce:15:37:55:14:90:ba:f7:90:b5:b8:ff:7d:
af:49:25:df:4d:28:ed:75:bb:df:ba:41:ad:f7:0d:
93:27:5c:49:47:26:4b:ab:74:94:83:aa:f8:97:ab:
79:79:90:38:2d:de:26:27:aa:63:0f:f0:36:06:a2:
73:17:a6:29:19:28:3a:b0:f2:bf:62:9b:f4:62:3f:
ca:b3:ac:8e:b4:bc:38:72:92:d9:16:1c:ef:36:72:
07:d5:35:c2:a6:03:02:c2:e5:7a:8e:43:51:c8:f9:
c8:49:98:33:a9:59:0c:48:3a:3d:2c:70:2a:db:2f:
cd:6d:8a:57:19:8f:60:01:02:5f:98:ae:6e:4e:aa:
40:3f:2c:58:de:fc:59:5a:48:4e:9f:71:e0:b2:9e:
26:70:7b:28:2a:2f:8e:50:86:bb:d6:ab:55:13:0e:
89:5c:35:80:2d:f5:ea:e2:8a:90:1d:39:db:e2:92:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:49:BB:04:6A:8D:D7:84:D3:FD:BF:CC:14:6A:3E:0F:B3:FF:E4
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/PE1JuwRqjdeE0_2_zBRqPg-z_-Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.176.0/20
Signature Algorithm: sha256WithRSAEncryption
78:d7:88:36:86:86:03:93:8b:47:5a:80:5e:01:43:10:ca:41:
48:f5:b0:cb:af:fe:36:e2:99:27:24:32:96:de:40:dc:a5:a1:
9d:43:5d:b8:76:c3:05:f9:7e:ee:94:07:0b:35:03:63:2a:08:
bb:20:55:fd:74:51:74:5d:1d:6a:78:f5:6b:3d:80:3c:f8:d3:
79:18:76:9a:fc:f0:12:b6:f5:34:93:6f:19:02:72:6c:97:ed:
aa:28:80:b3:70:f6:a9:b4:b7:b2:a3:4d:55:4a:e3:5b:c8:95:
49:1e:fe:2c:bb:be:87:43:b7:4e:30:d9:d9:d7:ed:4c:65:38:
49:02:43:c4:3d:f0:5f:85:80:a4:22:6a:60:8c:57:23:b3:fa:
e7:58:ac:9c:fe:7f:bb:36:8a:cb:55:a9:b5:c2:f5:3d:3b:d1:
41:2d:fc:74:e6:e3:b4:47:56:31:4a:c0:66:d2:11:31:cc:e1:
5c:ea:cf:83:4b:17:3c:b5:25:fc:83:34:65:71:e6:2e:d6:23:
f9:93:f4:a5:68:e0:5b:19:c3:bb:1d:9d:c4:35:a0:58:56:3d:
5b:66:4c:a2:f2:c3:e5:c2:9b:7e:41:72:85:a2:35:a9:a1:56:
d6:e8:00:4a:e4:89:b4:dd:fb:d1:b6:ed:19:4e:85:60:89:b1:
d7:f9:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 06:19:09 2024 by rpki-client on console-fra.rpki-client.org