Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/zw19VCPg4cSsNuh4MrFgTUvZdUA.roa
File: zw19VCPg4cSsNuh4MrFgTUvZdUA.roa (raw, json)
Hash identifier: ZGFi1glWZyZzAyBc8G9s4qDlIl1CU7jE6QmhEpLh8Vo=
Subject key identifier: CF:0D:7D:54:23:E0:E1:C4:AC:36:E8:78:32:B1:60:4D:4B:D9:75:40
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 10C1
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/zw19VCPg4cSsNuh4MrFgTUvZdUA.roa
Signing time: Sun 25 Jun 2023 09:03:09 +0000
ROA not before: Sun 25 Jun 2023 09:03:09 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4808
IP address blocks: 2406:4d00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 May 2024 02:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4289 (0x10c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jun 25 09:03:09 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=CF0D7D5423E0E1C4AC36E87832B1604D4BD97540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:d0:68:28:91:d8:cb:82:cc:6a:08:7b:72:
b3:aa:d9:5a:d5:0b:10:f4:34:60:fc:e9:04:ad:85:
bf:a0:4b:38:23:ad:a0:41:3b:00:ad:62:1a:b4:05:
99:d4:14:e7:53:3e:ca:71:c6:17:8a:ed:6b:6f:20:
f6:02:0c:46:1b:ff:d7:13:b8:cc:25:b3:4a:3e:22:
c6:59:a1:6c:d1:bd:8e:12:3b:cb:42:55:87:8b:0c:
12:32:de:5f:e5:35:ad:55:ca:96:0b:e6:8e:50:fd:
2d:7b:63:f3:9a:8e:d4:3e:f5:d1:a3:cc:4f:73:f1:
4e:36:a5:dd:78:c8:32:77:07:63:d6:b9:1e:d9:d4:
e0:db:c1:d3:fb:07:21:ec:8d:0d:cd:eb:0b:9b:d1:
ca:2c:22:52:cf:e2:af:3e:f1:de:9f:2e:39:db:65:
6c:d4:db:f4:5c:ec:06:37:89:29:d0:2d:5e:79:dd:
9e:54:2b:18:b7:a8:74:b7:c1:c5:fc:db:1e:33:71:
db:ea:1c:b6:db:e9:91:16:7c:6f:ec:73:11:37:72:
af:3c:63:43:aa:9c:a8:c1:d8:77:d7:61:5a:7d:2a:
48:30:7f:fe:30:0d:8c:5c:96:8f:6c:6a:6a:c4:5d:
fd:b5:7c:a4:3a:65:a0:0f:c1:d6:3c:39:7c:11:f7:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:7D:54:23:E0:E1:C4:AC:36:E8:78:32:B1:60:4D:4B:D9:75:40
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/zw19VCPg4cSsNuh4MrFgTUvZdUA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:4d00::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c1:04:24:c2:f0:c4:6c:3a:4e:fa:18:58:78:6f:6e:31:92:
88:da:b7:e8:98:fd:9f:f6:23:97:19:61:94:85:dd:c7:7c:ec:
66:86:2d:ae:1e:77:3f:ef:d2:67:38:73:db:61:e0:b4:60:1b:
e6:e1:3c:48:7f:e8:e0:f1:33:aa:77:b8:4e:a6:ba:f3:ba:30:
d8:f7:e0:f2:23:0f:c3:80:09:89:37:36:9e:a5:16:aa:9f:94:
bf:79:54:6b:ee:d8:26:a4:49:dd:21:23:05:1c:c0:e2:9c:25:
63:03:32:aa:21:8d:f9:38:b1:bc:21:41:ab:25:24:19:83:c9:
33:09:9c:c9:9d:b8:12:b6:83:fc:b3:4b:c7:70:c2:d6:ed:30:
43:5d:2f:dc:f3:f3:b7:19:cb:9f:2c:2b:2f:19:b5:c6:09:f3:
39:3b:1b:cf:a4:99:8a:cf:d5:91:4f:35:99:89:78:2f:4f:e6:
f4:79:fe:ad:84:cb:2a:9a:39:af:5d:4b:07:be:5b:06:5a:78:
b9:d3:a3:b0:2e:c0:0b:c1:75:32:83:38:93:3a:b5:41:d7:32:
d6:38:54:2b:8b:84:30:5a:f6:d6:fe:42:55:d6:d4:19:8a:a2:
f7:7e:88:16:57:2e:d0:52:0a:a5:bb:b4:d8:f0:cd:28:c1:2e:
2d:d2:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:54:56 2024 by rpki-client on console-fra.rpki-client.org