Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/F0ubHFhyy9pJeYTQAgnPDZcGJpg.roa
File: F0ubHFhyy9pJeYTQAgnPDZcGJpg.roa (raw, json)
Hash identifier: VQONCf7Tff0tfd7hsFcLHJ8aWiFSqUIC75vcGRWXYrQ=
Subject key identifier: 17:4B:9B:1C:58:72:CB:DA:49:79:84:D0:02:09:CF:0D:97:06:26:98
Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial: 1041
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/F0ubHFhyy9pJeYTQAgnPDZcGJpg.roa
Signing time: Wed 24 May 2023 03:54:15 +0000
ROA not before: Wed 24 May 2023 03:54:15 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 56002
IP address blocks: 2405:ad00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Validity
Not Before: May 24 03:54:15 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=174B9B1C5872CBDA497984D00209CF0D97062698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:95:7a:9c:6e:65:ea:61:58:40:89:2d:5f:
ba:ad:79:8d:21:46:64:a0:c7:23:c4:1b:1b:57:80:
88:ee:ba:f6:00:86:90:3c:ee:9b:0c:ab:71:36:27:
7d:9b:f4:a8:78:1d:c4:21:79:eb:ab:95:fb:42:35:
da:dc:d9:ec:41:8b:52:0c:83:ef:9c:d6:d0:6e:f9:
f6:e8:3a:2a:fd:4d:81:e7:ac:f4:b0:3c:56:98:a2:
3a:1c:5a:35:66:9f:84:53:cb:9a:39:48:ea:d1:f5:
10:93:01:26:24:41:9f:b1:85:89:b5:80:91:6a:c3:
03:8e:a7:ab:25:98:8f:d4:00:83:96:f5:90:fa:e6:
b9:3b:a6:b2:71:cb:ce:3b:58:9f:9a:11:95:92:fc:
54:5e:7f:8c:0c:79:87:02:42:c5:5d:fe:9c:2a:8b:
3d:84:46:d0:5e:83:b9:c5:c1:b1:a8:35:00:12:f8:
43:0a:61:b9:3f:6b:c3:ed:dc:03:95:af:04:a1:99:
24:ec:48:5b:a6:5e:44:ef:d7:28:07:7f:08:1d:b1:
1a:96:aa:aa:79:72:f3:98:80:8e:4c:bc:d7:0e:c3:
f5:5c:0a:d9:14:fb:46:37:24:b1:24:5d:0a:00:ac:
c2:19:18:8b:12:53:1c:3a:67:24:f8:09:86:da:ce:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:9B:1C:58:72:CB:DA:49:79:84:D0:02:09:CF:0D:97:06:26:98
X509v3 Authority Key Identifier:
keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/F0ubHFhyy9pJeYTQAgnPDZcGJpg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:ad00::/32
Signature Algorithm: sha256WithRSAEncryption
83:f2:74:19:fd:27:a8:ed:c7:ed:b5:56:24:9e:e9:59:d4:3b:
66:41:25:d6:3d:fc:70:fb:45:00:7e:04:8d:36:6a:c9:4a:e6:
70:c5:3f:97:ad:e4:fc:89:69:13:3f:49:76:94:bf:dc:cb:f6:
bb:a2:1f:ac:1d:f8:37:e4:39:a7:e4:98:de:a7:de:b9:ff:70:
0f:86:8e:cf:2b:e9:f2:a4:c0:57:e8:b0:c4:8c:95:cb:bf:90:
aa:07:b6:26:c9:52:48:e7:04:3d:3e:b8:cd:ec:15:d7:ce:0a:
96:b9:ed:10:f5:95:0d:cb:67:8d:35:e9:51:99:53:d3:47:d2:
e4:3f:88:62:3a:4b:68:32:cc:03:82:88:a5:85:22:81:7d:e0:
e2:e2:a1:69:17:23:7c:13:fc:78:a7:c1:5c:8f:4b:d6:d9:8e:
1f:e9:10:0b:13:4e:67:01:fa:55:27:f5:66:bb:31:79:94:3f:
2f:f3:01:7d:e5:5d:7d:d1:11:79:a5:37:fe:3e:2b:50:e1:53:
94:33:1e:03:f1:b0:f3:d6:ec:31:43:17:bc:6e:f9:10:ba:13:
57:eb:43:e2:4a:84:14:de:2b:d6:5a:56:23:6b:4a:a5:35:74:
8e:73:61:2a:bc:02:3c:57:65:c9:e1:eb:13:4c:68:a2:8f:76:
35:3d:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org