Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/RuAFtEC5Ok7M3m9zOlmhpGdYCuo.roa
File: RuAFtEC5Ok7M3m9zOlmhpGdYCuo.roa (raw, json)
Hash identifier: xNcXPYtEAhfGkIK71LU+74GUK1HCvGpeQceGLOZOR7w=
Subject key identifier: 46:E0:05:B4:40:B9:3A:4E:CC:DE:6F:73:3A:59:A1:A4:67:58:0A:EA
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C54
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RuAFtEC5Ok7M3m9zOlmhpGdYCuo.roa
Signing time: Wed 28 Aug 2024 08:53:57 +0000
ROA not before: Wed 28 Aug 2024 08:53:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 119.59.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 03:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Aug 28 08:53:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=46E005B440B93A4ECCDE6F733A59A1A467580AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:28:67:ec:82:84:d7:54:02:68:98:88:18:
77:cb:aa:d7:44:94:4f:d2:21:3f:06:bc:f4:f2:3c:
d5:10:b4:cf:00:53:dd:d3:0d:54:e7:65:fe:2e:3b:
d9:be:0a:b7:6d:c3:ec:52:a7:3e:c3:94:51:8d:68:
a4:80:68:86:50:1c:d4:0f:3c:0e:3d:c6:cb:d3:42:
7a:f9:49:0c:c7:32:70:82:7f:44:42:e3:d3:6d:61:
e6:53:12:d3:71:ec:9e:18:6a:6f:8b:45:f8:0c:5e:
ef:30:4f:69:e0:4f:d9:35:17:17:9c:22:2d:48:bf:
1d:02:5b:35:9d:40:2a:0c:98:59:ff:f8:1c:34:ec:
56:1f:e0:86:7f:f0:64:37:5c:8d:0a:6a:98:13:85:
57:10:00:6e:dc:4c:d5:62:a7:d2:7a:f3:00:e1:ed:
d6:6a:93:50:3c:86:38:ca:dd:fe:e6:de:ff:63:67:
43:4f:48:a8:e5:2f:45:ca:23:d2:bd:87:4f:a5:8a:
48:3d:28:c5:c3:02:d9:e9:65:cf:60:26:58:ea:60:
24:e9:e9:e7:92:97:e7:69:d0:97:a2:ed:92:28:d3:
5a:f8:64:5b:b8:58:62:80:28:b1:c7:d5:12:9d:a4:
ea:76:79:b5:95:43:1e:bd:3e:f5:e0:0f:5a:a6:0b:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:05:B4:40:B9:3A:4E:CC:DE:6F:73:3A:59:A1:A4:67:58:0A:EA
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RuAFtEC5Ok7M3m9zOlmhpGdYCuo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.200.0/22
Signature Algorithm: sha256WithRSAEncryption
18:46:c0:8f:9d:bc:dd:be:f8:86:98:3c:b7:ec:84:4e:77:b9:
e6:77:2b:2c:9e:61:f3:30:be:36:e0:95:dd:c3:33:66:81:bd:
1c:eb:ed:28:45:a9:d3:0f:0a:42:72:8b:87:0d:52:56:39:a0:
d5:a7:95:a1:c1:ff:33:c9:41:97:70:cc:6e:77:c6:1f:0f:28:
51:96:26:76:e3:48:8a:0e:e5:24:51:33:51:25:49:b9:65:43:
ff:75:d4:ce:12:e3:b7:4e:07:39:db:9c:10:f2:23:34:c6:1a:
48:ab:7e:57:fd:dc:3f:67:da:64:74:60:a8:a4:81:09:c2:6f:
67:22:34:0c:6d:3f:0f:4a:ef:8e:f3:8c:54:cd:76:8c:e1:38:
46:f8:f7:7a:72:c4:e4:5e:d0:08:0e:9d:52:4f:2c:64:6a:41:
79:2a:8b:95:62:b5:68:d0:3b:87:a0:45:d7:c5:5d:48:63:2d:
d3:54:af:ee:48:b5:f8:77:3a:c8:18:14:62:a6:25:63:c2:69:
48:33:57:86:62:e1:e0:c6:d8:6d:e2:38:b3:87:82:e3:30:97:
b8:65:e7:b0:f8:72:04:53:d1:b0:f4:03:6b:fa:2e:f3:fb:3d:
b1:87:92:58:13:aa:be:69:9e:bc:41:72:b0:b5:40:b9:98:fe:
a5:d6:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:02:16 2024 by rpki-client on console-ams.rpki-client.org