Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/J6yOuZATT3xPO_3Ahwfr9M77NgQ.roa
File: J6yOuZATT3xPO_3Ahwfr9M77NgQ.roa (raw, json)
Hash identifier: OXRVFArPEiCGWUZchKm6OhnLNIJvR864BBY1zjAsCNQ=
Subject key identifier: 27:AC:8E:B9:90:13:4F:7C:4F:3B:FD:C0:87:07:EB:F4:CE:FB:36:04
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C4E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/J6yOuZATT3xPO_3Ahwfr9M77NgQ.roa
Signing time: Wed 28 Aug 2024 08:53:54 +0000
ROA not before: Wed 28 Aug 2024 08:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 119.59.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 03:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Aug 28 08:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27AC8EB990134F7C4F3BFDC08707EBF4CEFB3604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:a4:8b:8e:2b:ae:9e:b9:08:16:b2:0b:33:
49:e6:ec:8c:a2:36:9b:a0:c3:1e:6d:da:d8:d9:b8:
07:64:93:29:a0:d5:69:eb:07:7b:92:4c:cf:8b:6f:
ac:d8:6b:03:9e:ce:07:06:3e:96:9b:9d:65:08:46:
16:00:11:aa:99:11:5a:6e:79:85:98:af:c9:fc:4f:
73:60:17:c1:69:65:7d:02:05:42:66:35:c4:a8:88:
66:ab:e1:5f:60:c8:ef:97:fd:bf:0a:6a:b4:a0:83:
5c:19:34:35:58:67:45:29:7d:30:bb:57:33:57:1a:
0a:4a:7b:1b:63:6a:a2:36:e2:b5:15:c2:2a:b5:82:
34:a1:69:e5:79:7a:d9:b6:b5:09:66:60:e4:30:ae:
fe:bb:3a:8d:51:d2:81:9d:15:a3:5e:d3:ed:9e:0d:
0b:de:1a:d0:ee:d5:50:05:bd:ae:6b:b8:44:c2:cb:
d1:4b:e2:cf:1a:4f:70:43:23:85:64:fa:6d:7e:1c:
09:9b:d2:0b:52:e5:9a:21:08:1d:9b:c2:d7:2a:26:
df:99:bc:da:a1:72:65:54:0f:c2:6a:35:2d:9f:cb:
f3:bd:59:4f:cb:78:85:c5:94:2b:21:e2:03:25:c7:
40:e9:ff:7f:35:18:b8:99:65:f4:d8:91:4a:d5:a8:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:8E:B9:90:13:4F:7C:4F:3B:FD:C0:87:07:EB:F4:CE:FB:36:04
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/J6yOuZATT3xPO_3Ahwfr9M77NgQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:0a:3a:94:e7:6b:c4:2f:d7:f4:56:7c:41:b7:65:21:d5:c5:
91:08:02:95:99:da:3b:99:9c:90:9c:aa:ba:28:53:3d:f4:b1:
b5:43:79:66:08:2d:8b:52:46:c7:61:98:05:da:79:e3:e9:c0:
15:ea:2d:f2:24:2a:2b:51:be:76:fa:38:d6:b5:0f:2f:30:ec:
00:a2:8a:36:63:7f:1d:7c:a7:73:3a:fa:c5:c8:31:89:ea:41:
09:47:9a:ff:fb:27:1a:20:76:5b:36:5f:69:ad:96:cd:4b:4a:
7f:7f:86:8b:1e:ec:2e:d2:c6:d1:2b:9a:65:85:98:91:fa:2c:
ad:69:ba:dd:5e:70:a6:a8:ed:95:45:4a:f4:2b:18:59:1c:ac:
3e:04:69:bf:3c:f7:d8:d3:19:0e:34:8d:bb:71:64:48:e5:e3:
e1:d3:f2:75:43:6c:ca:59:c3:f7:a7:27:90:2b:9b:48:31:e4:
15:f9:93:2c:fb:b2:11:62:a4:d5:5e:43:d8:04:22:14:ad:4c:
93:2b:f0:bb:e8:9e:93:07:b0:2f:b0:42:01:84:35:5a:bf:47:
3c:dd:b5:bc:0b:48:e3:af:ed:42:c2:3b:d6:f7:0a:67:03:cf:
75:a5:e7:cf:44:fe:8d:90:52:56:e9:bf:a8:78:e1:6d:a5:4f:
06:53:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:02:16 2024 by rpki-client on console-ams.rpki-client.org