Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa
File: j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa (raw, json)
Hash identifier: qeECB/sxjwUplfrb/cJwIxviUJwv/kmUv484se1WO58=
Subject key identifier: 8F:4F:0E:F2:87:35:64:A8:07:96:48:98:6A:3E:E0:75:96:84:9B:33
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0AD7
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa
Signing time: Wed 19 Jun 2024 12:31:11 +0000
ROA not before: Wed 19 Jun 2024 12:31:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 119.59.192.0/22 maxlen: 24
119.59.196.0/22 maxlen: 24
119.59.200.0/22 maxlen: 24
119.59.204.0/22 maxlen: 24
119.59.212.0/22 maxlen: 24
119.59.216.0/22 maxlen: 24
119.59.224.0/22 maxlen: 24
119.59.228.0/22 maxlen: 24
119.59.232.0/22 maxlen: 24
119.59.240.0/22 maxlen: 24
119.59.244.0/22 maxlen: 24
119.59.248.0/22 maxlen: 24
119.59.252.0/22 maxlen: 24
123.98.24.0/22 maxlen: 24
123.98.36.0/22 maxlen: 24
123.98.52.0/22 maxlen: 24
123.98.92.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 02:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2775 (0xad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jun 19 12:31:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F4F0EF2873564A8079648986A3EE07596849B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:9c:86:c5:64:4f:ae:c4:50:b1:68:05:02:
36:5a:30:de:54:7c:c7:52:cb:3f:62:d1:16:7b:10:
90:a9:39:6e:6c:1e:28:11:24:f5:e9:34:12:d1:62:
14:a6:e6:51:bf:ff:af:f6:73:a4:47:2f:ac:04:1a:
0b:d3:4d:2d:33:26:4b:d6:6d:fc:62:8e:08:c7:3f:
d6:f5:ce:b7:89:9d:76:0b:b5:2f:30:bf:16:98:e9:
8e:cc:9b:8f:72:6e:64:a5:44:64:54:bc:cd:34:c9:
8e:1e:c8:7b:6e:90:ed:8a:c2:3f:99:62:a7:49:35:
7d:15:e3:ef:db:84:b6:18:ea:1a:b5:89:6d:fa:56:
1a:0a:54:b0:d4:3e:81:46:14:1d:36:70:52:4b:bd:
07:6a:07:bb:ad:c3:4c:5b:c0:28:62:44:f9:b2:3d:
04:bc:dc:9d:74:57:00:52:72:90:cd:41:62:87:26:
4c:5b:22:79:eb:a0:a1:42:19:34:76:e2:38:cb:22:
15:33:23:fa:d1:2f:1d:af:ce:f2:5f:1d:3c:05:18:
59:e7:47:b0:04:04:9d:8b:14:81:42:59:56:2f:49:
42:f6:74:3f:d8:da:38:78:11:6c:1b:48:f2:ef:aa:
73:4c:82:1c:00:d6:42:1c:68:eb:80:da:57:d2:0a:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:0E:F2:87:35:64:A8:07:96:48:98:6A:3E:E0:75:96:84:9B:33
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/j08O8oc1ZKgHlkiYaj7gdZaEmzM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.192.0/20
119.59.212.0-119.59.219.255
119.59.224.0-119.59.235.255
119.59.240.0/20
123.98.24.0/22
123.98.36.0/22
123.98.52.0/22
123.98.92.0/22
211.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f7:cc:d4:23:75:a8:77:22:fd:b0:9b:c7:ab:58:00:4b:6f:
30:a2:30:55:c1:b4:2b:01:6c:4d:6e:0b:c3:2e:34:9a:51:dd:
00:3a:d8:2e:01:f2:26:bd:69:1d:bb:66:23:fe:af:10:26:88:
c6:44:ae:9a:f3:51:8a:86:98:52:bf:42:bf:88:04:26:ac:c0:
da:f0:37:89:61:9b:b8:df:9e:b7:e8:e1:48:01:1a:06:9c:fb:
46:71:42:8e:00:0c:9c:0e:8f:fa:39:23:12:8f:37:2f:b8:22:
c0:28:d8:db:32:2b:9c:13:14:08:81:a9:8b:87:4e:b6:b9:d3:
35:d0:9a:66:d3:9f:22:41:83:04:59:4a:86:55:8e:e1:ac:f6:
5e:f1:a5:de:cd:c3:5f:b1:1b:06:ca:dc:2c:1d:5b:b2:0c:b2:
29:1e:77:4d:4b:50:7b:a7:9d:02:a9:35:93:a2:34:51:be:8b:
6f:41:c1:22:bd:35:10:91:21:5e:13:de:ec:32:d4:9a:63:f1:
45:a0:72:f1:25:47:83:c2:a0:ae:8c:93:f3:43:d7:a4:96:ba:
81:39:a0:a6:25:96:f5:01:fe:93:06:ca:9f:a8:45:a9:6f:9d:
60:7f:05:63:dd:bd:56:58:83:d0:d8:0b:59:2e:c6:bb:7e:ca:
80:46:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:39:34 2024 by rpki-client on console-ams.rpki-client.org