Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa
File: 30WcYGvWBNNrIhdtCG1iHiAv0ek.roa (raw, json)
Hash identifier: D8o36zQPOQ0O2cwIFsmw/pPXg/QcjP7svyWY8k8tjHo=
Subject key identifier: DF:45:9C:60:6B:D6:04:D3:6B:22:17:6D:08:6D:62:1E:20:2F:D1:E9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: A2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa
Signing time: Thu 20 Jun 2024 04:40:29 +0000
ROA not before: Thu 20 Jun 2024 04:40:29 +0000
ROA not after: Wed 21 May 2025 03:30:10 +0000
asID: 2914
IP address blocks: 113.31.0.0/21 maxlen: 24
113.31.8.0/21 maxlen: 24
113.31.16.0/21 maxlen: 24
113.31.24.0/21 maxlen: 24
113.31.80.0/22 maxlen: 24
113.31.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 06:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jun 20 04:40:29 2024 GMT
Not After : May 21 03:30:10 2025 GMT
Subject: CN=DF459C606BD604D36B22176D086D621E202FD1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:5a:bb:42:bc:63:fd:a7:d5:2e:4d:3d:6f:
41:3f:7f:49:e8:de:23:88:4b:1e:4a:a2:de:4a:53:
6e:4c:9e:fc:b9:5e:a9:8c:4a:20:e2:e3:cd:ba:4d:
64:ef:6c:e5:bb:e5:e7:b5:d9:74:38:c1:86:51:68:
c0:77:cf:25:0e:b9:7c:bd:1a:07:4f:0a:75:21:39:
c1:e2:e2:1b:bc:c7:9b:40:b2:ac:e8:40:7d:74:5e:
26:3d:43:15:5c:ec:e3:5b:8f:ca:6e:c2:3c:b4:00:
8e:14:85:37:69:3e:34:bd:d7:33:93:8e:7f:bb:e6:
de:a1:4c:64:97:06:87:fa:f5:5e:a9:94:d7:58:58:
75:31:d3:af:80:e0:19:f6:f9:54:89:61:b1:17:cc:
22:21:91:ab:fa:e4:8c:db:dc:7a:21:66:47:f3:b0:
d0:a1:72:e1:fb:9b:fe:fc:0a:70:7c:31:8c:d0:ba:
40:01:44:e8:0b:ed:ef:20:50:7e:07:88:7f:57:ad:
b0:b5:39:78:e3:2a:8d:1c:41:8b:c6:94:9f:19:6b:
8a:f9:f6:63:cc:e2:e9:92:0f:a6:87:00:a4:e6:58:
1d:21:38:78:34:47:3e:ad:66:ef:8f:3c:f0:b0:86:
08:1a:1a:13:65:b2:a8:bb:04:bc:b1:0a:c9:c5:04:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:9C:60:6B:D6:04:D3:6B:22:17:6D:08:6D:62:1E:20:2F:D1:E9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/30WcYGvWBNNrIhdtCG1iHiAv0ek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0/19
113.31.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:f9:7a:4b:85:00:e8:7d:cb:e8:9e:88:8a:24:72:27:fd:8e:
37:a7:ef:1e:69:83:10:44:44:c3:12:33:97:23:2e:c9:30:fb:
78:99:c6:2d:53:d1:fa:9b:00:7e:87:fb:3c:f2:ed:89:43:db:
ba:28:15:2b:7c:de:78:21:a5:85:97:e4:96:1c:44:54:b9:e9:
85:7e:5e:22:fc:8c:d7:93:68:27:6e:9a:69:06:99:00:af:45:
7b:52:65:cc:83:14:90:e9:2f:d8:3e:6b:5a:ff:15:dc:18:25:
9b:b9:81:e4:19:cf:aa:c8:18:80:32:c8:3c:fd:c3:b0:5e:98:
23:be:0d:7c:50:29:69:03:5b:50:e9:af:df:ea:6e:49:fa:a6:
72:0f:0c:94:9e:d5:c4:3e:2f:fe:16:60:b4:06:5d:b1:42:46:
6a:5e:50:ef:0d:ed:5a:ec:23:62:49:3f:53:53:53:a6:d1:ea:
9b:3b:f2:17:63:bc:59:56:f0:1b:63:cf:d2:3a:80:45:47:dd:
6d:11:f6:e0:d7:21:d8:83:21:76:cf:61:4d:77:fd:cf:17:fd:
40:0c:34:b8:4b:1a:81:96:f9:30:5d:cc:8d:9f:0f:80:2b:12:
fd:67:c8:3b:0f:a2:0a:00:a1:27:32:37:52:ff:84:50:29:b7:
94:a7:ee:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 15 09:06:53 2024 by rpki-client on console-ams.rpki-client.org