Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YcpT_L2cYHhKlt4sosDtZyoYJ3M.roa
File: YcpT_L2cYHhKlt4sosDtZyoYJ3M.roa (raw, json)
Hash identifier: R/CU4PKFXEXDPLS/3QBUzzLkoyTMTZwp4N2CNrYFOM0=
Subject key identifier: 61:CA:53:FC:BD:9C:60:78:4A:96:DE:2C:A2:C0:ED:67:2A:18:27:73
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YcpT_L2cYHhKlt4sosDtZyoYJ3M.roa
Signing time: Tue 21 May 2024 14:13:44 +0000
ROA not before: Tue 21 May 2024 14:13:44 +0000
ROA not after: Wed 21 May 2025 03:30:10 +0000
asID: 2914
IP address blocks: 113.31.0.0/18 maxlen: 24
113.31.64.0/20 maxlen: 24
113.31.80.0/22 maxlen: 24
113.31.84.0/22 maxlen: 24
113.31.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 02:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: May 21 14:13:44 2024 GMT
Not After : May 21 03:30:10 2025 GMT
Subject: CN=61CA53FCBD9C60784A96DE2CA2C0ED672A182773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:f7:a2:5b:0f:45:00:1e:70:18:d4:5b:a3:
83:86:63:45:11:f0:55:84:b4:71:ef:0f:36:9e:32:
ab:10:d2:9f:16:76:73:f0:d1:19:23:9e:af:90:ea:
44:66:0a:83:8b:2e:72:28:0c:a2:7b:0b:cb:e7:6c:
e4:ec:88:80:96:1b:16:49:9f:42:24:91:46:dd:27:
37:44:90:af:52:5e:c9:60:d0:8d:1c:90:62:2e:d1:
59:47:25:0e:65:75:b7:4f:5a:33:d2:e8:89:52:f1:
be:5d:fd:aa:aa:d1:3a:08:e1:e5:ce:80:75:32:a3:
0e:e4:dc:d0:28:08:53:f1:0c:17:e7:ca:5e:32:80:
f6:ef:48:a9:dc:bb:23:7c:79:17:c8:01:38:07:5a:
9b:6e:b5:00:cb:da:75:b8:e0:80:3d:24:aa:4f:62:
58:cf:21:f9:3d:1c:4d:ab:de:1f:c7:98:8c:7e:11:
41:87:57:fe:c0:cb:5d:07:a3:ca:c9:62:9f:bf:4d:
00:32:fd:fc:8e:db:c1:db:41:62:90:42:34:fa:c3:
6f:5b:0d:fe:b8:ca:1d:6a:e3:d2:9b:71:89:86:aa:
09:df:2d:7e:96:c4:38:e2:78:06:99:19:3d:72:36:
c6:b6:9d:08:bf:c6:3f:80:ff:ae:41:00:fc:67:da:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:53:FC:BD:9C:60:78:4A:96:DE:2C:A2:C0:ED:67:2A:18:27:73
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YcpT_L2cYHhKlt4sosDtZyoYJ3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0-113.31.87.255
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:fb:41:26:90:36:f5:c6:b2:45:68:61:0a:1d:2f:09:6f:15:
65:a4:74:bc:a6:3d:d2:3d:b6:63:8a:c1:95:9e:9e:39:44:20:
bd:7d:87:1d:ec:e3:51:9f:6c:63:0c:60:12:63:1d:cf:59:cc:
5e:05:ff:6f:77:40:cd:75:62:65:44:a2:2e:e3:69:60:1d:7f:
8d:d4:49:9b:00:53:6d:c2:93:15:d5:73:3e:da:d0:48:da:e3:
87:b8:78:8f:62:88:4d:30:a2:a1:11:29:57:f9:af:eb:5c:41:
74:37:a2:5c:a0:07:0b:df:ab:6e:48:f1:e1:b9:8d:75:92:6a:
61:1c:c4:4b:98:0d:d7:2b:68:37:0a:95:0a:f3:34:4d:05:29:
f3:c5:8b:b2:a9:21:35:48:5e:8a:29:52:88:f5:10:88:52:7e:
06:76:12:9d:2b:f6:80:4a:1f:1e:42:1f:77:fa:70:7e:72:8a:
f8:3d:b5:b8:0b:09:66:41:a3:5c:4b:73:49:5b:f3:bc:8f:f1:
16:fe:fb:e4:26:be:cd:34:74:9c:74:b1:df:99:63:2f:c5:b1:
00:94:74:94:34:24:3a:7b:6f:8c:9e:4e:d7:db:23:eb:ed:09:
e1:10:2d:f4:09:83:eb:13:fe:a2:18:6f:32:6e:2f:64:d0:d2:
58:20:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 04:06:39 2024 by rpki-client on console-fra.rpki-client.org