Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jXn74xp_6EgOyOPpOn3706Lb0sY.roa
File: jXn74xp_6EgOyOPpOn3706Lb0sY.roa (raw, json)
Hash identifier: TmzM10oz/yiO3wBrGh1YBJIWF27CmslUor7i6IKLxQs=
Subject key identifier: 8D:79:FB:E3:1A:7F:E8:48:0E:C8:E3:E9:3A:7D:FB:D3:A2:DB:D2:C6
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 070E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jXn74xp_6EgOyOPpOn3706Lb0sY.roa
Signing time: Thu 18 May 2023 07:24:19 +0000
ROA not before: Thu 18 May 2023 07:24:19 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 24373
IP address blocks: 2406:1e80::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: May 18 07:24:19 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=8D79FBE31A7FE8480EC8E3E93A7DFBD3A2DBD2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:d8:af:e8:af:00:9c:b3:b4:e1:a3:3c:96:
f6:a0:eb:81:70:16:8b:ee:bd:83:a2:24:92:68:c3:
19:0d:32:2d:52:b2:8f:be:95:b9:2d:08:d4:c7:3f:
fe:d0:d2:1c:9f:2f:fd:7a:27:e2:09:44:06:7b:19:
e0:34:71:ce:5b:1d:eb:c5:9e:1d:a9:54:81:77:c9:
b4:cd:09:9c:07:d9:d4:6e:d8:71:72:fe:90:c4:0b:
a6:70:65:57:05:29:43:c9:51:3c:fd:97:8a:c7:fc:
17:86:1c:f0:60:bf:af:63:4a:d4:8d:f4:43:66:a2:
e6:20:7d:84:bb:d6:5d:89:4b:58:00:e9:66:1f:09:
c3:de:69:6e:b2:ba:f3:88:9b:47:69:bf:56:39:5a:
3c:91:43:6a:d9:57:6f:08:58:f1:de:0a:5f:3b:a3:
78:84:68:e1:e3:e1:94:42:27:38:45:e6:11:79:a0:
69:c7:74:8c:5e:7b:66:8f:0c:82:a6:82:32:46:97:
0f:9b:7a:0b:db:39:44:b9:39:94:6b:09:04:6f:56:
dc:84:ea:76:c9:10:39:a7:44:6c:0c:21:f8:88:8b:
92:05:48:6e:7b:b8:bd:75:fc:bb:06:0b:0a:88:e1:
39:8d:0a:b9:4e:42:1f:b5:1e:37:b3:f8:bc:2c:41:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:FB:E3:1A:7F:E8:48:0E:C8:E3:E9:3A:7D:FB:D3:A2:DB:D2:C6
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jXn74xp_6EgOyOPpOn3706Lb0sY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/48
Signature Algorithm: sha256WithRSAEncryption
27:fd:77:fe:ac:f4:b5:d7:33:73:6c:f1:06:c3:eb:a7:05:f6:
46:46:ec:ad:90:6d:4d:ea:93:12:72:92:a2:b4:01:72:08:5e:
5c:46:a6:10:75:65:c8:92:85:b5:c6:8c:7e:27:d3:21:70:5b:
1e:6e:e9:0e:2b:65:a9:d2:96:de:d3:f6:e0:c5:2c:33:df:11:
f3:be:aa:ea:05:1d:4d:fa:a7:82:30:ec:77:c2:32:6a:1c:2f:
72:32:0d:e1:53:fa:dd:13:e5:e7:8a:f0:3f:0a:7a:37:da:cb:
12:fb:04:9b:78:d4:51:6b:db:14:90:14:9b:31:58:9f:0b:da:
67:bb:11:b5:e4:6b:2f:21:2c:a2:57:74:4a:ef:ab:71:36:2e:
7e:95:81:cf:5b:82:90:9e:92:69:ad:cd:a9:e3:16:bd:f6:0b:
34:53:a3:a6:bb:bb:5c:6c:e3:38:f8:8c:3c:d8:25:e9:8c:0b:
1f:23:cd:b3:b4:1e:2b:0e:2e:a5:24:12:f4:ce:e3:85:00:d9:
74:b0:04:b8:4d:39:54:80:1e:4f:5c:ed:be:ac:77:3f:81:4e:
ea:fe:39:be:fd:aa:4f:d3:34:5d:9c:68:f5:33:18:24:f1:68:
40:e8:04:03:18:66:b2:96:0c:95:96:11:d2:f5:cd:e6:bf:e0:
d9:36:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org