Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/wTRqzsVqDItRRx9SFzHFa2alH-g.roa
File: wTRqzsVqDItRRx9SFzHFa2alH-g.roa (raw, json)
Hash identifier: pAmC8LlkHT8NisPjAgXQ5zA4D/oiwqsBJWTYA3525Q8=
Subject key identifier: C1:34:6A:CE:C5:6A:0C:8B:51:47:1F:52:17:31:C5:6B:66:A5:1F:E8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 6A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wTRqzsVqDItRRx9SFzHFa2alH-g.roa
Signing time: Mon 10 Jun 2024 02:57:37 +0000
ROA not before: Mon 10 Jun 2024 02:57:37 +0000
ROA not after: Wed 21 May 2025 03:30:10 +0000
asID: 2914
IP address blocks: 113.31.0.0/18 maxlen: 24
113.31.80.0/22 maxlen: 24
113.31.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 04:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jun 10 02:57:37 2024 GMT
Not After : May 21 03:30:10 2025 GMT
Subject: CN=C1346ACEC56A0C8B51471F521731C56B66A51FE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:ef:17:cb:54:8c:7e:39:06:6d:80:62:74:
7a:3f:dc:d3:78:24:82:e9:99:fe:dd:b2:52:62:69:
56:11:0d:84:55:2c:c0:90:5c:9d:77:22:89:33:67:
19:09:a1:3a:11:ac:1c:60:9f:a2:b8:b0:a9:45:4b:
cd:0f:a1:28:6b:e6:75:8a:56:53:5a:23:c3:78:17:
15:ef:7b:76:75:04:5f:d1:50:d6:9a:d7:9c:1c:48:
80:1a:44:b0:b7:db:e7:3e:b3:93:a5:63:f5:9b:8b:
b2:7b:17:75:20:5e:37:e9:73:cf:74:22:80:6e:c6:
80:3c:3f:76:c9:9f:4b:9e:9c:1b:d9:56:4c:53:a2:
b7:05:31:8d:6d:ef:d1:ab:22:36:e8:00:7b:9b:a4:
a7:de:36:97:8b:76:af:2f:22:47:5a:65:cb:44:53:
f1:24:63:d8:43:f5:b0:6e:1d:35:61:f1:c3:0a:cc:
67:bd:fc:7b:bc:11:32:b0:90:f3:6a:49:51:40:a8:
2d:77:4b:1c:ff:00:6a:33:e6:20:10:82:3b:0f:b9:
26:4a:9f:09:50:17:73:98:7e:97:09:73:74:e0:4f:
ed:30:1c:bb:1e:57:33:20:86:23:36:1f:26:b5:a8:
66:77:ca:32:b3:ce:2c:76:b9:56:bb:36:a3:6e:24:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:6A:CE:C5:6A:0C:8B:51:47:1F:52:17:31:C5:6B:66:A5:1F:E8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wTRqzsVqDItRRx9SFzHFa2alH-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0/18
113.31.80.0/21
Signature Algorithm: sha256WithRSAEncryption
66:92:8d:08:51:d8:bb:d7:80:d6:7c:62:3b:28:7b:cc:0b:b8:
c3:24:c2:f9:c9:ae:e8:c6:69:8f:76:53:7b:04:5a:89:df:c7:
ba:74:e4:06:1f:62:a7:de:53:5e:2a:41:86:08:55:74:a8:7d:
0d:43:2b:2d:20:10:51:87:8c:95:39:80:15:bc:12:99:29:79:
0c:b2:ee:fd:64:68:8b:a4:34:33:fa:3e:b0:92:2b:56:36:18:
52:de:59:89:44:f8:69:62:9b:06:da:11:0a:30:dc:20:0d:67:
58:6a:38:32:64:0d:af:0f:8f:7c:1f:00:d7:fe:2b:97:6b:24:
07:df:0e:4a:f8:1b:5e:44:9a:6f:1d:29:64:83:f5:11:99:f2:
ec:9e:46:63:d3:2b:c8:2d:e3:1a:4a:46:dd:23:3b:f5:5a:4f:
4e:5f:5c:b8:db:f3:63:ed:00:dd:45:6a:ee:72:29:b6:6c:96:
aa:4b:eb:43:4f:1e:05:a3:f6:88:02:53:98:12:da:e3:7e:96:
74:a0:fc:ad:66:9c:6f:04:59:97:aa:d3:44:ee:0f:b7:9a:b1:
b8:6c:ef:e6:68:a0:a2:f4:4c:7c:f2:55:6a:35:30:b0:e7:43:
82:9a:fa:48:19:43:9c:ea:8a:9b:50:e1:b9:e0:2c:77:27:cc:
5a:40:b4:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 20 06:10:03 2024 by rpki-client on console-ams.rpki-client.org