Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/c5KJ-SVpNKvyZRRuYHRDlnu9vx4.roa
File: c5KJ-SVpNKvyZRRuYHRDlnu9vx4.roa (raw, json)
Hash identifier: Vi+a1tVmWZguybHfitu4b1jnC2c0+Ljfp0EvQTxgRjk=
Subject key identifier: 73:92:89:F9:25:69:34:AB:F2:65:14:6E:60:74:43:96:7B:BD:BF:1E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0707
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/c5KJ-SVpNKvyZRRuYHRDlnu9vx4.roa
Signing time: Thu 18 May 2023 07:24:17 +0000
ROA not before: Thu 18 May 2023 07:24:17 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59083
IP address blocks: 2403:1b80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:17 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=739289F9256934ABF265146E607443967BBDBF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:b4:44:c3:32:92:dd:39:76:95:e3:a7:f7:
14:07:fc:4c:af:d8:54:f1:b7:5f:58:22:37:b7:45:
ab:f3:1d:f8:f3:a6:c7:ff:2f:e4:c4:79:57:ef:88:
c3:31:86:9f:20:3f:eb:7b:58:51:b5:9e:9e:59:c2:
ef:b6:e9:ab:a8:23:28:38:a0:50:75:37:de:4f:38:
b4:5a:fd:08:d0:e6:e1:a3:3b:73:92:d6:72:52:b5:
e2:8b:ff:1e:c8:40:33:97:52:13:27:dd:14:08:f6:
36:01:94:0e:ed:1d:83:6e:86:25:6e:c6:ea:ac:d5:
87:01:b6:ad:a5:a9:7f:62:dd:50:c3:a3:c4:0c:ec:
ad:30:9c:13:1f:dc:4d:02:33:f6:e0:d2:58:d6:67:
f3:f6:eb:ba:be:0d:df:b4:dd:9f:aa:2b:cd:f0:56:
cd:c7:61:97:d0:2f:11:ea:29:77:0b:28:fd:83:33:
76:b2:09:3c:f7:6c:62:df:00:f4:b1:c8:12:1a:4b:
11:80:df:6c:67:8e:25:80:ed:79:c2:39:93:69:2f:
23:97:af:2e:89:98:de:44:1d:44:bb:2d:ce:84:bb:
9e:79:c0:d6:43:8f:94:01:43:bf:d8:ed:c7:e7:30:
f4:6d:b1:a7:37:a3:fc:9f:c8:6f:08:51:da:c0:8e:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:89:F9:25:69:34:AB:F2:65:14:6E:60:74:43:96:7B:BD:BF:1E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/c5KJ-SVpNKvyZRRuYHRDlnu9vx4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1b80::/48
Signature Algorithm: sha256WithRSAEncryption
67:22:f3:9f:04:f3:b9:dc:83:36:77:8f:d2:42:f5:1d:5e:79:
e2:59:18:7e:20:39:4e:fa:2c:4d:82:d6:75:fe:71:1d:03:d5:
e5:08:96:88:21:1d:a1:92:93:88:ce:37:6d:cf:4c:c6:de:51:
9c:d7:ec:3d:1e:f6:e7:3f:15:83:37:80:92:1c:16:e3:91:f4:
be:74:7b:30:0d:64:27:f8:28:eb:e6:82:46:f4:ea:82:18:9e:
a3:03:a1:f7:37:ef:cd:f3:8e:cc:02:ad:5b:31:f5:b2:a5:ed:
96:42:fd:56:23:cb:c6:e4:a9:6d:b0:33:a9:63:d6:69:60:e4:
6e:5a:17:dc:3a:90:05:24:ab:bf:20:72:e2:c7:8f:2f:68:0c:
0c:66:d4:a0:c2:49:b4:89:48:bf:ef:58:77:66:da:ff:a0:56:
2b:ae:a0:ba:ed:fd:39:af:8d:d6:5d:70:3f:99:b1:32:be:76:
64:bb:bd:14:e9:35:d2:e5:db:30:24:5b:be:55:02:3c:0d:95:
da:81:9e:7f:49:d7:16:27:96:23:6c:5c:fd:91:52:a0:a8:b0:
5d:d0:f4:c2:ea:f9:c2:ee:57:26:e1:01:89:c2:92:fe:50:6e:
97:fb:c1:17:28:ae:1e:b7:0e:df:11:e4:9c:21:b3:94:78:40:
22:d4:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org