Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/agZI9M0cVzRF6nsTudzwVvMJwyA.roa
File: agZI9M0cVzRF6nsTudzwVvMJwyA.roa (raw, json)
Hash identifier: eI472Zt3I+XnTec63aNp3YJhDHfkJH8bULHhWH4wR3M=
Subject key identifier: 6A:06:48:F4:CD:1C:57:34:45:EA:7B:13:B9:DC:F0:56:F3:09:C3:20
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0710
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/agZI9M0cVzRF6nsTudzwVvMJwyA.roa
Signing time: Thu 18 May 2023 07:24:19 +0000
ROA not before: Thu 18 May 2023 07:24:19 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 50983
IP address blocks: 2403:1b80::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:19 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6A0648F4CD1C573445EA7B13B9DCF056F309C320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:aa:57:89:28:7e:a9:f1:5c:1d:84:c0:8c:
9a:b4:7a:d0:0c:24:a0:ce:41:06:41:a2:23:46:f3:
4e:e5:a9:f1:11:0a:df:7a:29:19:78:fc:76:db:81:
37:16:0a:a0:0d:16:02:6c:16:a2:35:5e:21:24:b0:
6a:10:1a:97:6b:47:d4:1e:f7:8d:dd:b5:30:54:58:
65:8b:c4:85:5b:ee:0a:9f:89:ff:50:21:80:d7:2b:
20:b6:1d:ec:6b:c9:bf:1e:4d:96:20:41:0e:e2:ae:
33:e2:18:27:1c:5a:f4:ae:f8:66:32:02:38:42:47:
a4:ce:11:f0:f4:a8:df:39:04:62:b4:02:f2:b1:c7:
c8:b1:c0:83:9c:9b:6c:b1:a6:1e:29:82:ce:f9:ed:
7e:4d:bb:42:e8:c7:a8:60:d1:44:57:d3:6b:fe:01:
a9:3b:88:02:18:9c:61:fe:6c:46:bb:e6:74:bf:d4:
85:fc:eb:2b:f7:32:e4:93:68:d0:a2:cb:6d:71:ce:
1c:1d:e7:62:5b:31:ef:d1:00:1c:48:ef:da:21:af:
1a:61:ce:d0:4c:07:89:1c:65:85:2a:c9:6c:c1:23:
72:54:a6:4a:a6:c5:05:87:d9:56:77:04:05:36:8e:
1f:71:98:98:2d:94:45:af:33:86:bb:58:f8:2d:fc:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:48:F4:CD:1C:57:34:45:EA:7B:13:B9:DC:F0:56:F3:09:C3:20
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/agZI9M0cVzRF6nsTudzwVvMJwyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
b4:a8:e0:d7:e0:77:f1:af:9c:c3:17:80:47:39:68:cf:5c:37:
bb:ee:a1:5e:4f:f0:38:a9:a7:83:4d:00:94:e9:97:5d:af:7d:
5f:d4:1d:a6:4f:91:aa:38:03:99:69:a9:d8:6b:e9:76:0e:12:
1b:af:24:90:5a:56:10:d9:72:47:d4:58:2e:f6:5f:32:f7:dc:
aa:37:6b:ac:26:49:2e:e9:b8:b6:9c:c1:1a:ee:bf:1c:41:5e:
f9:d1:4f:a3:f3:97:87:be:80:32:30:cb:8e:60:b1:e7:55:6f:
bc:24:4a:db:f7:31:c4:d7:42:2c:12:ad:9d:22:be:93:4f:11:
c4:26:a8:20:f0:b0:6c:47:bf:24:bc:41:c2:42:f2:e6:b8:0e:
85:01:c0:70:cf:15:9d:56:f1:ab:ba:1e:c0:23:39:51:26:6b:
77:c5:a9:b8:9c:15:af:6f:38:4e:3c:4e:e0:53:82:79:c5:f3:
6a:70:57:ea:43:c6:7e:8c:87:31:24:be:19:a0:7c:71:28:4e:
40:87:c3:0e:35:f5:90:e6:a8:1e:21:26:bb:21:84:87:61:e5:
94:2b:1c:5c:49:96:38:de:96:ea:3c:72:63:4b:42:d5:fa:5c:
33:d8:70:d2:5b:ce:80:00:1e:98:40:93:78:88:c6:9e:a0:d4:
91:20:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org